Senior IAM Engineer

General information Country USA State Ohio City Cincinnati Descriptions & requirements About the Role:The Senior IAM Engineer is a senior individual contributor responsible for designing, implementing and maintaining identity and access management solutions across the enterprise. This role ensures that access to corporate systems and applications is secure, efficient and aligned with corporate policies. Additionally, this role will partner with IT, Security and Application teams to enforce secure access patterns, automate identity lifecycle processes and reduce operational risk. This role requires hands-on expertise, technical leadership and the ability to influence cross-functional teams without direct reports.What’s in it for you:Competitive base salary and bonusesPosition based in Cincinnati, OH, Charlotte, NC or Tampa, FL (relocation assistance provided)Access to the latest emerging technologiesInfluence and build the future of TQL TechnologyA culture of continuous education and technical training (and reimbursements for the same)Hybrid work environment with the ability to work remotely 40 hours per monthComprehensive benefits packageHealth, dental and vision coverage401(k) with company matchPerks including employee discounts, financial wellness planning, tuition reimbursement and moreCertified Great Place to Work and voted a 2019-2026 Computerworld Best Places to Work in ITWhat you’ll be doing:Access Governance and Role Design:Develop new access governance processes in line with industry best practices.Design roles (RBAC), workflows and certifications for implementation in IAM systems and Privileged Access Management (PAM) solutions.Define and control identification, authentication and privileges in IAM systems.Identity Lifecycle & Access ManagementImplement and maintain user provisioning, access modification and de-provisioning based on joiner/mover/leaver status.Automate workflows to improve accuracy, efficiency and compliance.Authentication & AuthorizationImplement and maintain authentication methods (SSO, MFA, password policies)Partner with application and infrastructure teams to integrate access controls.Troubleshoot and resolve complex identity or access issues.System Configuration and Integration:Configure out-of-the-box connectors and write code for custom connectors within the IAM system.Configure SAML for third-party applications to integrate with the Identity Governance and Administration (IGA) system.Modernize application identity management for integration into the IAM system, coordinating closely with stakeholders.Privileged Access Management (PAM)Support PAM platform operations, including vault management, session monitoring and policy enforcement.Ensure privileged accounts are properly controlled, monitored and audited.Cross-Functional CollaborationPartner with Security Operations, Application Security and IT team to ensure identity solutions meet security and business requirements.Advise stakeholders on secure access patterns and risk mitigation strategies.Participate in architecture discussions and provide technical guidance.Documentation and Reporting:Translate business processes and legacy processes into functionality within IAM systems.Create and maintain up-to-date documentation to support IAM solutions and their configuration.Develop user access/activity reports to support access recertification, business unit, and regulatory requests.Continuous ImprovementRecommend and implement enhancements to IAM tooling, policies and processes.Identify opportunities to reduce manual effort and operational risk through automation.Training and Support:Provide training and support to internal teams and end-users on IAM processes and tools.Mentor and support other IAM engineers and IAM analysts.Review IT tickets to address and resolve access problems promptly.Risk Management:Limit security risks by setting access boundaries for accounts and restricting highly privileged access.What we’re looking for: Bachelor's degree in computer science, technology, or a related field.5 years working with an IGA solution (SailPoint, Saviynt, Okta) experience required.5 years administrating Active Directory and/or Entra ID experience required.2 years object-oriented programming (Java, C#, Python) or scripting (PowerShell) experience required.2 years working with a Privileged Access Management suite (e.g., Entra PIM, CyberArk, PAM 360) experience required.2 years planning and implementing advanced system administration tasks experience preferred, including hands-on involvement in setting up, configuring, and optimizing new systems to meet organizational needs.2 years developing integrations that consume APIs (SOAP/RESTful) experience preferred.2 years of customer-facing IT service experience preferred (e.g., Help Desk, Desktop Engineering).Demonstrate a genuine curiosity for understanding systems both independently and in relation to other interconnected systems.Exhibit a passion for problem-solving in ambiguous situations, including researching solutions or conducting independent testing.Deep understanding of IAM principles, methodologies, and solutions, including access control (role-based and discretionary), authentication, authorization, provisioning, approvals, and workflows.Excellent written, verbal, and presentation skills; ability to effectively explain complex technical concepts to both technical and non-technical stakeholders.Employment visa sponsorship is unavailable for this position. Applicants requiring employment visa sponsorship now or in the future (e.g., F-1 STEM OPT, H-1B, TN, J1 etc.) will not be considered.About UsTotal Quality Logistics (TQL) is one of the largest freight brokerage firms in the nation. TQL connects customers with truckload freight that needs to be moved with quality carriers who have the capacity to move it. As a company that operates 24/7/365, TQL manages work-life balance with sales support teams that assist with accounting, and after hours calls and specific needs. At TQL, the opportunities are endless which means that there is room for career advancement and the ability to write your own paycheck. What’s your worth? Our open and transparent communication from management creates a successful work environment and custom career path for our employees. TQL is an industry-leader in the logistics industry with unlimited potential. Be a part of something big.Total Quality Logistics is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, age, national origin, genetic information, disability or protected veteran status.If you are unable to apply online due to a disability, contact recruiting at View email address on click.appcast.io