IAM Engineer

Job Summary

We are seeking an experienced **IAM Engineer** to design, implement, and maintain secure Identity and Access Management solutions across enterprise environments. The ideal candidate will have strong experience with identity lifecycle management, authentication, authorization, access governance, and cloud identity platforms. This role will work closely with security, infrastructure, application, and compliance teams to ensure secure and efficient access to systems and applications.

Key Responsibilities

• Design, implement, and maintain enterprise **Identity and Access Management (IAM)** solutions.
• Manage user provisioning, deprovisioning, account lifecycle, and access requests.
• Configure and administer **SSO, MFA, RBAC, and authentication/authorization** solutions.
• Develop and maintain IAM integrations using **SAML, OAuth 2.0, and OpenID Connect (OIDC)**.
• Manage identity platforms such as **Microsoft Entra ID (Azure AD), Okta, Ping Identity, SailPoint**, or similar technologies.
• Implement and maintain automated identity provisioning using **SCIM, APIs, and directory services**.
• Support **Active Directory, LDAP, and cloud identity environments**.
• Develop and maintain IAM workflows, policies, and access controls.
• Participate in **access reviews, certification campaigns, and privileged access management (PAM)** activities.
• Troubleshoot authentication, authorization, provisioning, and SSO-related issues.
• Collaborate with cybersecurity, cloud, application, infrastructure, and compliance teams.
• Assist with IAM security assessments, audits, and compliance requirements.
• Create technical documentation, architecture diagrams, procedures, and operational runbooks.
• Monitor IAM systems and investigate access-related security incidents.
• Identify opportunities to automate IAM processes and improve security and operational efficiency.

Required Qualifications

• Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related field, or equivalent experience.
• **5+ years of experience** in Identity and Access Management, cybersecurity, or a related engineering role.
• Strong hands-on experience with **IAM concepts, identity lifecycle management, authentication, authorization, and access control**.
• Experience with **Microsoft Entra ID (Azure AD), Okta, SailPoint, Ping Identity**, or comparable IAM platforms.
• Strong knowledge of **Active Directory and LDAP**.
• Experience implementing and troubleshooting **SSO and MFA**.
• Hands-on knowledge of **SAML, OAuth 2.0, OIDC, SCIM, and REST APIs**.
• Experience with **RBAC, least-privilege access, access reviews, and identity governance**.
• Experience with scripting or automation using **PowerShell, Python, or similar technologies**.
• Understanding of cloud IAM concepts across **Azure, AWS, or Google Cloud**.
• Strong troubleshooting, analytical, and communication skills.
• Ability to work effectively with security, infrastructure, application, and compliance teams.

Preferred Qualifications

Experience with **SailPoint IdentityIQ/IdentityNow, CyberArk, BeyondTrust, Saviynt, or One Identity**.

Experience with **Privileged Access Management (PAM)** solutions.

Knowledge of **Zero Trust and modern identity security architectures**.

Experience integrating IAM solutions with enterprise applications and SaaS platforms.

Familiarity with **DevOps, CI/CD, Infrastructure as Code, and cloud automation**.

Experience with **Terraform, Ansible, or Git-based automation**.

Knowledge of security and compliance frameworks such as **NIST, SOC 2, ISO 27001, or SOX**.

Relevant certifications such as **CISSP, Security+, Okta certifications, Microsoft Identity certifications, or SailPoint certifications**.

Experience working in large enterprise or highly regulated environments.