• US Citizen

• Green Card

• EAD (OPT/CPT/GC/H4)

• H1B Work Permit

• Corp-Corp

• W2-Permanent

• W2-Contract

• Contract to Hire

• Consulting/Contract

• UG :- - Not Required

• PG :- - Not Required

• No of position :- ( 1 )

• Post :- 18th Dec 2025

Importance of the role

Client being engaged in a Cloud first strategy, Identity and Access Management is the new strategic security frontier. The company is also facing challenges around compliance and operational efficiency in the way we operate and govern Identity. The IAM Technical Engineer(50% effort)/Coordinator (50% effort) will work with the Americas IAM & Individual Productivity Service Line Manager to Design/Build/Deploy IAM services for the Americas Zone and assist with L4 support.

Role positioning

This role reports to the AMER IAM & Individual Productivity Service Line Director in the Americas Infra – Enterprise Services team and based in NJ USA.

Main projects/activities:

Design, Build, Deploy, and assist with Support of Identity and Access Management services for L’Oréal Americas Zone. The IAM Technical Coordinator will be coordinating some of the projects of the team and support demands from Application Delivery teams, Security and the business.

The scope of the team includes

• • • Access Management: o Coordination of AD modernization for AMER (Domain Controller optimization, weak protocol remediation, decommissioning of legacy forest).
  • o Support application & business teams to implement modern authentication (SSO, MFA) within Azure AD.
  • o New AD delegation model (review and modification of access permissions for OUs, GPOs, review object parameters to ensure consistent with policies).
  •  
  • • Identity Governance and Administration: support evolution of Global identity lifecycle management platform and process
  • • Privileged Access Management: o Assist with CyberArk enrollment for AMER and support application demands coordination with our Managed Service Provider.
  • o Implementation of Microsoft gMSA where applicable to replace service accounts.
  •  
  • • Zero Trust
  • • Azure AD initiatives (Conditional Access Policy evoluttions, Passwordless, etc.) and evolution of SSO/MFA for users/applications

Technologies involved:

- Access management: AD, Azure AD

- Privileged Access management: CyberArk, gMSA

- Identity Governance and Administration: Service Now based

- Device and Policy Management: Intune

- Public IaaS: Azure

C1 - Internal use

Stakeholders:

- Client Group and Zone infrastructure team

- Group and Zone Security teams

- Americas B2B applications and Digital teams

- Americas Enterprise Architecture team

- Americas HR team

- Managed Service Provider / Accenture

Skills

- 5+ years of experience

- Proficient English speaker is a must, Spanish is a plus

- Ability to learn new technologies quickly, hands on experience on Active Directory and IAM related technologies

- Infra Project management and experience coordinating variety of IT stakeholders, being able to create Powerpoint slides, successfully drive meetings with sufficient communication and manage follow-ups

- Experience in large, international, distributed organizations

- Proactive, Growth mentality

- Proficient in Microsoft Office (Word, Excel, PowerPoint)

- Ability to execute simple Powershell scripts/commands for reporting