IAM Engineer - MFA

Job Description

DXC Technology helps global companies run their mission-critical systems and operations while modernizing IT, optimizing data architectures, and ensuring security and scalability across public, private and hybrid clouds. The world's largest companies and public sector organizations trust DXC to deploy services to drive new levels of performance, competitiveness, and customer experience across their IT estates.

Job Summary

We are seeking a highly capable IAM Engineer with hands-on experience in designing, implementing, and supporting enterprise-grade multi-factor authentication (MFA) solutions. This role focuses primarily on Azure MFA, with additional exposure to Okta MFA, CyberArk MFA, and Privileged Access Management (PAM) solutions.

You will be responsible for securing user access, integrating MFA with identity platforms, and supporting governance and compliance initiatives across hybrid cloud environments.

Key Responsibilities

• Lead the deployment, configuration, and administration of Azure MFA across cloud and hybrid infrastructures
• Integrate MFA with Microsoft Entra ID (Azure AD), on-prem Active Directory, VPNs, Microsoft 365, and third-party applications
• Design and implement Conditional Access Policies, manage authentication methods, and support passwordless authentication strategies
• Troubleshoot MFA-related issues in collaboration with internal teams and external vendors to enhance user experience
• Conduct health checks and generate reports on MFA adoption, authentication trends, and enrollment status
• Participate in broader Identity and Access Management (IAM) initiatives, including Zero Trust adoption and least privilege enforcement
• Provide incident support, including authentication log analysis, token troubleshooting, and user onboarding
• Contribute to the development and enforcement of MFA governance policies, access reviews, and exception management
• Support internal and external compliance audits by providing evidence of MFA enforcement and access controls
• Create user-facing documentation and deliver training on MFA best practices and self-service tools
• Stay updated on evolving authentication technologies, threat intelligence, and vendor roadmap developments
  
  

Essential

Technical Skills & Experience:

• 2–3 years of experience implementing and supporting enterprise MFA solutions
• Strong knowledge of identity protocols such as SAML, OAuth, OpenID Connect, and directory services
  
  

Hands-on experience with at least 2 of the following technologies is required:

• Azure MFA (Microsoft Entra ID / Azure AD)
• Okta Adaptive MFA
• CyberArk MFA
• Conditional Access Policies
• Microsoft 365 Identity & Access Management
• MFA integration with VPNs and third-party apps
• ITSM integration for access workflows and exceptions
• Privileged Access Management (PAM), particularly CyberArk
  
  

Preferred Certifications

• Microsoft SC-300 or MS-500
• Okta Certified Professional
• CyberArk Defender
  
  

Role Expectations

• Applies advanced subject matter expertise in identity security, authentication, and privileged access management
• Provides solutions to complex issues involving authentication flows, user behavior, and system integrations
• Makes informed decisions independently within policy frameworks to deliver secure and seamless access experiences
• Offers technical leadership on cross-functional initiatives and works closely with IAM, cybersecurity, and infrastructure teams
• Mentors junior engineers and supports the continuous improvement of internal processes and standards
• Represents the organization in vendor discussions and client-facing engagements related to authentication and access control
  
  

Learn more about DXC's Security team - Security

Instagram: https://www.instagram.com/dxctechnology

Youtube: https://www.youtube.com/DXCTechnology

TikTok: https://www.tiktok.com/@dxc_technology

Website http://www.dxc.com

Recruitment fraud is a scheme in which fictitious job opportunities are offered to job seekers typically through online services, such as false websites, or through unsolicited emails claiming to be from the company. These emails may request recipients to provide personal information or to make payments as part of their illegitimate recruiting process. DXC does not make offers of employment via social media networks and DXC never asks for any money or payments from applicants at any point in the recruitment process, nor ask a job seeker to purchase IT or other equipment on our behalf. More information on employment scams is available here.