Identity and Access Management (IAM) Manager

The Identity and Access Management (IAM) Manager is a hands‑on technical leader responsible for the design, implementation, and continuous improvement of Clark’s identity ecosystem. This role balances high‑level strategy with deep technical execution, serving as the lead architect and engineer for the Saviynt, Entra ID, and Okta platforms. You will not only manage the roadmap and stakeholders, but will also remain involved in the technical details—writing scripts, configuring complex SSO integrations, and building the automation frameworks that secure our enterprise. This is a full‑time onsite position based in our McLean, VA office. Core Responsibilities Architectural Oversight: Lead the technical design of IAM solutions from discovery through long‑term support, ensuring all systems meet “Least Privilege” and Zero Trust standards. Lead Engineering: Act as the Tier3 technical expert for the Saviynt IGA platform, personally overseeing the onboarding of complex applications and the development of custom connectors. Advanced Automation: Directly develop and maintain scripts (PowerShell, Python) and SQL queries to automate user provisioning, de‑provisioning, and complex lifecycle workflows. Modern Auth Implementation: Hands‑on configuration of federation protocols including SAML, OAuth, and OIDC, and managing the migration of legacy authentication to modern standards. Governance & Audit Lead: Partner with Internal Audit to automate access certifications and provide technical evidence for compliance requirements across all enterprise systems. Platform Health: Take ultimate accountability for the stability of SSO platforms, participating in bimonthly maintenance and troubleshooting the most critical technical escalations. Strategic & Managerial Responsibilities Roadmap Execution: Drive the planning and technical execution of IAM technology enhancements and long‑term security roadmaps. Mentorship & Coaching: Coach and upskill team members on IAM best practices, peer‑reviewing technical changes to ensure alignment with Clark standards. Standardization: Create and enforce engineering standards for documentation, IAM procedures, and infrastructure‑as‑code. Cross‑Functional Collaboration: Engage with Business Application Owners and SMEs to translate business requirements into technical IAM specifications. Basic Qualifications 8+ years of dedicated, hands‑on IAM experience. 3+ years of demonstrated experience leading technical teams, including direct people management (hiring, performance reviews, and career development) and serving as a technical mentor for junior engineers in high‑pressure environments. Expert‑level proficiency in APIs, SCIM, SAML, and OIDC. Advanced experience with SQL and scripting (PowerShell/Python) for identity automation. Deep administrative experience in Saviynt (or SailPoint), Entra ID, and Okta. Proven ability to collaborate across business units, engage with stakeholders, and drive results while remaining adaptable and accountable. Ability to work in the office 5 days a week and participate in bimonthly maintenance windows as required. Preferred Qualifications Experience integrating IAM platforms with ServiceNow for ticketing automation and CyberArk for privileged access. Ability to develop advanced reporting and telemetry for IT and Business stakeholders. Equal Opportunity Employer Clark Construction Group, LLC (and its subsidiaries and affiliates) is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to sex, race, color, age, national origin, religion, physical and mental disability, genetic information, marital status, sexual orientation, gender identity, citizenship, pregnancy or maternity, protected veteran status, or any other status prohibited by applicable national, federal, state or local law. Clark promotes a drug‑free workplace. Applicants have rights under Federal Employment Laws: Family and Medical Leave Act (FMLA), Equal Employment Opportunity (EEO), and Employee Polygraph Protection Act (EPPA). Clark is committed to working with and providing reasonable accommodations to individuals with disabilities. If you need a reasonable accommodation because of a disability for any part of the employment process, please email View email address on click.appcast.io or call View phone number on click.appcast.io and let us know the nature of your request and your contact information. Authorization to Work: Applicants must be currently authorized to work in the US on a full‑time basis in order to be considered. #J-18808-Ljbffr