Cloud IAM Engineer - Azure Entra ID & Zero Trust Expert

Oluwaremi “Remi” Olarewaju

Cloud Identity & Access Management Engineer Baltimore, MD

Email: **********@*****.*** Phone: 443-***-**** LinkedIn: linkedin.com/in/oluwaremi-olarewaju

Professional Summary

Cloud Security & IAM Engineer with 7+ years of enterprise experience securing hybrid Windows and Azure environments. Specialized in Microsoft Entra ID (Azure AD), Conditional Access, MFA enforcement, RBAC, privileged access controls (PIM), and identity lifecycle management. Proven ability to reduce identity risk, enforce Zero Trust security models, and automate IAM operations using PowerShell and Microsoft Graph across 500+ user environments.

Core Skills

Identity & Access Management: Microsoft Entra ID (Azure AD), Conditional Access, MFA, RBAC, Identity Protection, Identity Lifecycle (Joiner/Mover/Leaver), Privileged Identity Management (PIM)

Cloud & Endpoint Security: Microsoft Intune, Defender for Endpoint, BitLocker, Autopilot, Device Compliance & Identity-Based Access Enforcement

Automation & Visibility: PowerShell, Microsoft Graph API, IAM Auditing & Reporting, Sign-In Logs, Audit Logs, Risk-Based Access Controls

Infrastructure & Platforms: Windows Server 2019/2022, Windows 10/11, MECM/SCCM, VMware, Citrix, ServiceNow (ITIL Incident & Change)

Professional Experience

Johns Hopkins University, Baltimore, MD

System Administrator (IAM / Cloud Security) 06/2023 – Present

Administer Azure Entra ID identities for 500+ users and 700+ endpoints, enforcing Conditional Access, MFA, and RBAC to support Zero Trust security objectives.

Designed and deployed risk-based Conditional Access policies, reducing phishing impact and unauthorized access attempts across the tenant.

Increased Intune device compliance from 78% to 95%+ by implementing identity-driven endpoint baselines and remediation workflows.

Integrated device compliance with Conditional Access to restrict cloud access from non-compliant or high-risk endpoints.

Developed PowerShell automation using Microsoft Graph API to audit identities, rotate local admin credentials, and generate IAM compliance reports.

Supported Tier-2/3 identity and access issues while mentoring junior staff and driving ITIL workflows in ServiceNow.

Cigniti Technologies

Software Deployment Engineer 07/2022 – 12/2022

Deployed and managed enterprise applications via SCCM/MECM and Intune, integrating detection logic and identity-aware deployment controls.

Built PowerShell scripts to standardize installations, logging, and post-deployment validation across customer environments.

MV Transportation

Junior System Administrator 04/2022 – 07/2022

Administered Active Directory users, groups, OUs, and GPOs, supporting role-based access and least-privilege models.

Supported DNS, DHCP, VPN access, and file share permissions while assisting with endpoint hardening using Defender and BitLocker.

Morgan, Lewis & Bockius LLP

DMS Engineer 12/2020 – 01/2022

Supported 1,000+ endpoints in a highly regulated legal environment, partnering with security teams to ensure access controls met confidentiality and compliance standards.

T. Rowe Price

Computer Support Analyst 06/2019 – 08/2019

Oracle

Computer Support Analyst 08/2017 – 06/2019

Supported enterprise endpoint deployments and cloud-integrated services within financial and global SaaS environments.

Authored troubleshooting runbooks to reduce MTTR and improve operational consistency.

Technical Projects (IAM Labs)

Zero Trust Identity Enforcement Lab (Azure Entra ID): Designed and implemented Conditional Access policies enforcing MFA, device compliance, and legacy authentication blocking. Validated policy effectiveness using Entra ID sign-in logs and risk indicators.

Privileged Identity Management & Identity Governance Lab: Secured privileged roles using Azure PIM, implementing just-in-time access, approval workflows, MFA on activation, and audit logging. Conducted access reviews to identify and remediate excessive permissions.

Certifications

(ISC) Certified in Cybersecurity (CC) (Scheduled-2Q)

CompTIA Security+ (SY0-701) — In Progress

Microsoft SC-300: Identity & Access Administrator — In Progress

Microsoft Azure Administrator (AZ-104) — In Progress

Contact this candidate