IAM Engineer

The Identity Access Management Engineer is responsible for enhancing, maintaining, and executing the identity services program, both cloud‑based and on‑premises, for the organization. The role maintains IAM technical standards; implements IAM controls and processes; and assists in architecture, implementation, and execution of a risk‑based IAM architecture to ensure strong authentication and authorization controls across business critical systems. Essential Duties and Responsibilities User and Access Management Develop and assist with permission changes, group membership updates, and access provisioning. Create, modify, and disable user accounts in Active Directory, Microsoft 365, and other systems. Support MFA, SSO, and related authentication workflows. Authentication and Authorization Provide escalation support for all IAM‑related matters. Ensure readiness for internal and external audit and create action plans to resolve issues. Consult and integrate new/existing applications within the IAM authentication and authorization framework. Perform routine maintenance tasks and update documentation. Access Governance / Administration (IGA) Solutions Operate and manage Identity Governance & Administration (IGA) solutions across the enterprise. Escalate complex issues to senior staff or external vendors when appropriate. Own User Access Review (UAR) process and campaigns. Security and Compliance Follow established IT policies, procedures, and security requirements. Serve as an advisor for policies/procedures and guidelines to data owners. Support security protection, compliance efforts, and audit‑related data collection. Maintain confidentiality and adhere to data‑handling standards. Qualifications Bachelor’s degree in information technology or related field preferred (equivalent experience acceptable). 5+ years implementing and governing IAM cloud solutions, controls, and capabilities. Experience implementing SSO, federation standards such as SAML and OpenID Connect, MFA, and privileged access management. High proficiency in Active Directory, Entra ID (Azure AD), Okta, and connector frameworks. Excellent problem‑solving, documentation, and communication skills, with ability to collaborate across cross‑functional teams. Strong communication skills and ability to work directly with end users. Experience developing scripts and automation with PowerShell, Python, Power Automate, Azure Automation, etc. Preferred Qualifications Professional certifications: ITIL, Security+, SSCP, Certified in Cybersecurity (ISC2). Understanding of just‑in‑time privileged access models and PAM best practices. Experience with endpoint management tools (e.g., Intune). Experience in Agile and ITIL, metrics, and continuous improvement approaches to Service Delivery. Equal Opportunity Notice Highspring LLC (d/b/a Vaco by Highspring) and its affiliates are committed to full inclusion of all qualified individuals and do not discriminate against any employee or applicant for employment because of race, color, sex, religion or creed, national origin, citizenship, age, disability, status as a veteran, union membership, ethnicity, gender, gender identity, gender expression, sexual orientation, marital status, or political affiliation. #J-18808-Ljbffr Vaco by Highspring