IAM Security Engineer

OverviewYou’re invited to join our Enterprise Information Security team, focusing on corporate Identity & Access Management. At Esri, you will work with a close-knit, skilled team in a highly innovative environment. Help us build and operate enterprise single-sign-on (SSO), identity governance, and multi-factor authentication (MFA) solutions, and to develop and enhance automated workflows. We welcome you to join us and use your technical expertise across various IAM products and systems to improve the security, privacy, and daily user experience of your colleagues.ResponsibilitiesDesign, develop, and enhance IAM solutions integrating enterprise applications and security servicesManage IAM lifecycle processes, including provisioning, de-provisioning, access request and periodic access certificationDeploy and configure connectors within SailPoint IdentityIQ/IDN for various enterprise systems including custom connectors for home grown applicationsDevelop and maintain high-quality, reusable features and components using Java and other scripting languagesAdminister and support LDAP, Single Sign-On (SSO), federation, SAML, OAuth, OIDC and enterprise IAM systemsImplement and support cloud-based identity platforms such as Microsoft Entra IDEngineer and manage identity integrations with ServiceNow, including form development, workflow design, access request catalog items, and automation of approval processesDesign and manage identity-related workflows in SailPoint to support access governance and provisioning processesSupport identity and mailbox provisioning and management within Microsoft Exchange Online and on-premises Exchange environmentsDevelop and maintain PowerShell automation scripts, and bulk identity updates across Active Directory and integrated systemProvide Level 2-3 support, ensure SLA compliance, perform access data cleanup and certification, and participate in on-call support as requiredImplement conditional access policies, MFA and governance standards across enterprise applicationsCollaborate cross-functionally with business and technology teams to align IAM processes with organizational needsRequirements2+ years of experience in IAM planning, implementation, and operations2+ years of Java development experience2+ years developing IAM solutions using SailPoint IdentityIQFoundational knowledge of identity technologies such as SailPoint, Ping, CA, and EntraProficiency managing LDAP directories, Active Directory, REST Webservices, SAML, OIDC, databases, PowerShellStrong analytical, problem-solving, and communication skillsVisa sponsorship is not available for this posting. Applicants must be authorized to work for any employer in the USBachelor’s degree in computer science or a related STEM fieldRecommended Qualifications1+ years of ServiceNow Form/Workflow development experience is a strong plusExperience with CI/CD pipelinesExperience with AWS, LinuxExperience with authentication libraries, MSAL, PassportExperience with architecting and implementing multi-agent architectures to enhance RBAC/ABAC models, automate complex identity governance, and proactively resolve lifecycle bottlenecks through autonomous reasoning.#LI-TM1#LI-onsiteTotal RewardsEsri’s competitive total rewards strategy includes industry-leading health and welfare benefits: medical, dental, vision, basic and supplemental life insurance for employees (and their families), 401(k) and profit-sharing programs, minimum accrual of 80 hours of vacation leave, twelve paid holidays throughout the calendar year, and opportunities for personal and professional growth. Base salary is one component of our total rewards strategy. Compensation decisions and the base range for this role take into account many factors including but not limited to skill sets; experience and training; licensure and certifications; and other business and organizational needs.A reasonable estimate of the base salary range is$73,840—$128,440 USDThe CompanyAt Esri, diversity is more than just a word on a map. When employees of different experiences, perspectives, backgrounds, and cultures come together, we are more innovative and ultimately a better place to work. We believe in having a diverse workforce that is unified under our mission of creating positive global change. We understand that diversity, equity, and inclusion is not a destination but an ongoing process. We are committed to the continuation of learning, growing, and changing our workplace so every employee can contribute to their life’s best work. Our commitment to these principles extends to the global communities we serve by creating positive change with GIS technology. For more information on Esri’s Racial Equity and Social Justice initiatives, please visit our website here.If you don’t meet all of the preferred qualifications for this position, we encourage you to still apply!Esri is an equal opportunity employer (EOE) and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability status, protected veteran status, or any other characteristic protected by law. If you need reasonable accommodation for any part of the employment process, please email View email address on click.appcast.io and let us know the nature of your request and your contact information. Please note that only those inquiries concerning a request for reasonable accommodation will be responded to from this e-mail address.Esri Privacy Esri takes our responsibility to protect your privacy seriously. We are committed to respecting your privacy by providing transparency in how we acquire and use your information, giving you control of your information and preferences, and holding ourselves to the highest national and international standards, including CCPA and GDPR compliance.