Senior Associate - IAM Engineer

Location Designation: Hybrid - 3 days per quarter Responsibilities Engineer, configure, and maintain IAM solutions across IGA, PAM, Directory, and WAM domains. Collaborate with architecture teams to design IAM solutions that integrate securely with on-premises and cloud applications (AWS, SaaS, hybrid models). Develop and maintain workflows, connectors, policies, and scripts to automate identity lifecycle and access management processes. Integrate IAM solutions with enterprise authentication and authorization frameworks, including MFA, passwordless authentication, and emerging NHI standards (e.g., SPIFFE, DCR, PKCE). Partner with Information Security, Application, and Infrastructure teams to ensure IAM solutions meet security, compliance, and audit requirements. Troubleshoot and resolve complex IAM-related incidents, performance issues, and integration challenges. Support roadmap delivery for IAM initiatives, including cloud adoption, Zero Trust enablement, and modernization of legacy IAM services. Contribute to solution design reviews, platform upgrades, and security hardening initiatives. Explore and implement AI/ML-based anomaly detection for identity risk scoring and adaptive authentication. Build automation scripts (Python, PowerShell, Java) to enhance IAM workflows. Collaborate on introducing AI-driven decision-making for access governance, identity-based threat detection, and identity intelligence. Stay engaged with emerging identity, cloud, and AI-related technologies; bring forward ideas to evolve IAM for the future. Qualifications Bachelor’s degree in Computer Science, Information Systems, or equivalent experience. 10+ years of hands‑on engineering experience across multiple IAM domains. Strong knowledge of and experience with SailPoint, CyberArk, PingOne, PingFederate, Ping Directory, Entra and Active Directory. Proven experience integrating IAM solutions in hybrid (cloud + on‑premises) environments. Familiarity with identity protocols such as SAML, OAuth 2.0, OIDC, SCIM, LDAP, SPIFFE, DCR, and PKCE. Strong scripting skills (e.g., PowerShell, Python, Java) for automation and integration. Understanding of IAM‑related compliance and regulatory requirements (e.g., NYS DFS, NIST). Ability to work effectively in a team‑oriented, collaborative environment, with strong problem‑solving skills. Preferred Qualifications Experience with cloud identity platforms (e.g., Azure AD, AWS IAM). Exposure to Zero Trust architectures, modern authentication strategies, and AI‑enabled security capabilities. Prior experience in a large enterprise or financial services environment. IAM vendor certifications (e.g., SailPoint IdentityNow Engineer, CyberArk Trustee/Defender, Ping Identity Certified Professional). Pay Transparency Salary Range: $124,000-$177,000 Overtime eligible: Exempt Discretionary bonus eligible: Yes Sales bonus eligible: No Actual base salary will be determined based on several factors but not limited to individual’s experience, skills, qualifications, and job location. Additionally, employees are eligible for an annual discretionary bonus. In addition to base salary, employees may also be eligible to participate in an incentive program. Benefits We provide a full package of benefits for employees – and have unique offerings for a modern workforce, including leave programs, adoption assistance, and student loan repayment programs. Based on feedback from our employees, we continue to refine and add benefits to our offering, so that you can flourish both inside and outside of work. Job Requisition ID: 93876 #J-18808-Ljbffr New York Life