Lead Engineer - IAM Operations

Job Summary

The IAM Operations Engineer is responsible for the day-to-daazy operations and support of Identity and Access Management (IAM) platforms and processes. The role ensures timely provisioning, modification, and deprovisioning of user access, supports access governance activities, and maintains compliance with organizational security standards. The engineer will collaborate with security, infrastructure, application, and business teams to provide secure and efficient access management services.

Key Responsibilities

Identity Lifecycle Management

• Provision, modify, and deprovision user accounts across enterprise applications and platforms.
• Support Joiner, Mover, and Leaver (JML) processes.
• Manage user, group, role, and entitlement administration activities.
• Ensure access requests are fulfilled within defined SLAs.

Access Governance & Compliance

• Support periodic access certifications and access reviews.
• Validate access approvals and ensure compliance with least privilege principles.
• Assist with audit evidence collection for internal and external audits.
• Maintain documentation, SOPs, and operational runbooks.

IAM Operations Support

• Provide L2 operational support for IAM platforms.

• Troubleshoot access-related issues including:

• Login failures

• SSO issues

• MFA challenges

• Account lockouts

• Password reset issues

• Group membership requests

• Monitor IAM system alerts, queues, and support tickets.

Authentication & Authorization

• Support SSO integrations using SAML, OAuth, and OpenID Connect.
• Assist with MFA enrollment, administration, and troubleshooting.
• Support RBAC implementation and role maintenance activities.
• Validate application onboarding requirements and access models.

Privileged Access Support

• Support PAM operational tasks including privileged account onboarding and lifecycle management.
• Assist with credential rotation validation and privileged access reviews.
• Support break-glass account governance and monitoring activities.

Monitoring & Reporting

• Monitor audit logs, access-related events, and IAM operational dashboards.
• Generate operational metrics and reports.
• Identify trends and recommend process improvements.
• Support security investigations related to user access when required.

Process Improvement & Automation

• Identify opportunities to automate manual IAM processes.
• Assist with scripting and workflow improvements.
• Participate in operational excellence initiatives.

Required Qualifications

• Bachelor's degree in Information Technology, Cybersecurity, Computer Science, or related field.
• 3-5 years of experience in Identity and Access Management operations.
• Experience supporting Microsoft Entra ID (Azure AD), Active Directory, SailPoint, One Identity, or similar IAM platforms.
• Experience with user provisioning, access reviews, RBAC, and identity lifecycle management.
• Understanding of SSO, MFA, SAML, OAuth, and OpenID Connect.
• Experience using ticketing systems such as ServiceNow.
• Strong troubleshooting and analytical skills.
• Excellent written and verbal communication skills.

Preferred Qualifications

• Experience supporting PAM platforms such as BeyondTrust, CyberArk, or Delinea.
• Knowledge of healthcare or regulated industry environments.
• Familiarity with audit and compliance frameworks.
• Basic PowerShell or scripting experience.
• Security certifications such as Security+, SC-300, or Identity-focused certifications.