IAM Engineer III

About the Job:

We are seeking an IAM Engineer to join our Identity Governance & Administration (IGA) team to design, build, and operate identity governance capabilities, while developing and supporting Java-based applications and services that enable IAM at scale. The ideal candidate has hands-on experience with SailPoint (IdentityIQ and/or ISC) and strong Java development skills to build and maintain custom software solutions.

What's the Job:

• Implement and maintain IGA capabilities including lifecycle management, access requests, entitlement management, role management (RBAC), access reviews, and separation of duties.
• Develop, and maintain Java applications and services that support IAM/IGA (e.g., custom connectors, middleware, REST APIs, microservices, utilities, web applications).
• Produce documentation (designs, configurations, runbooks) and contribute to knowledge base and standards.
• Contributes to the innovation of software development within IAM domain.
• Consults on right-sizing decisions, software solutions, and services.
• Accountable for building, managing, and maintaining Identity and Access related security tools and the infrastructure required to support them. Focus on designing and implementing automation to aid the team in creating efficiencies.
• Participate in change management, release planning, and on-call rotation for production support as needed.
• Support audit activities and evidence collection.
• Perform other duties as assigned.

What You'll Bring to the role:

• Bachelor's degree in Cyber Security, Computer Science, Information Systems or equivalent work experience in the IT field.
• Strong Java programming expertise (e.g., Java 8+), including object-oriented design, REST API integrations, and build tooling (Maven/Gradle).
• Experience with engineering best practices to include analyzing, designing, developing, deploying, and supporting software solutions and infrastructure implementations/upgrades.
• Experience in the following domains: SailPoint Identity, Privileged Access, Access Certifications, SSO/Federation, Active Directory, Azure, AWS
• Strong problem-solving skills.
• Strong documentation, testing and automation skills.
• Strong sense of ownership and the ability to work with a limited set of requirements.
• Ability to explain technical solutions to technical teams and non-technical teams.
• Strong ability to align and mature to security practices.
• Strong ability to align technical needs to business processes.
• Strong ability to prioritize work based on business objectives.

#LI-Hybrid

Compensation Range:

Pay Range - Start:
$98,320.00

Pay Range - End:
$147,480.00

Geographic Specific Pay Structure:

Structure 110:

Structure 115:

We believe in fairness and transparency. It's why we share the salary range for most of our roles. However, final salaries are based on a number of factors, including the skills and experience of the candidate; the current market; location of the candidate; and other factors uncovered in the hiring process. The standard pay structure is listed but if you're living in California, New York City or other eligible location, geographic specific pay structures, compensation and benefits could be applicable, click here to learn more.

Grow your career with a best-in-class company that puts our clients' interests at the center of all we do. Get started now!

Northwestern Mutual is an equal opportunity employer that welcomes talented individuals of all backgrounds. We are committed to creating and maintaining an environment in which each employee can contribute creative ideas, seek challenges, assume leadership and continue to focus on meeting and exceeding business and personal objectives.