IAM Engineer

Senior Identity and Access Management Engineer

Hands-on Senior Identity and Access Management Engineer to join a growing cybersecurity team supporting a large enterprise environment. This individual will serve as the dedicated owner of the organization’s Identity Governance and Administration program and play a key role in strengthening access governance, identity lifecycle management, and application security. This is a highly visible position that will partner with IT, cybersecurity, compliance, application owners, and business leadership. The ideal candidate is technically strong, comfortable working in a fast-paced environment, and able to clearly communicate identity initiatives, risks, and recommendations to senior leaders.

Key Responsibilities:

• Serve as the primary owner of the company’s Identity Governance and Administration platform and processes.
• Administer and support enterprise IGA and IAM technologies, including CyberArk, Saviynt, ObserveIT, and OKTA.
• Manage user provisioning, de-provisioning, and access changes throughout the employee lifecycle.
• Design, implement, and improve Joiner, Mover, and Leaver workflows.
• Develop and maintain Role-Based Access Control models and access governance standards.
• Support OKTA Lifecycle Management and integrations with enterprise applications.
• Participate in periodic access reviews, access certifications, and entitlement remediation.
• Support Segregation of Duties controls and identify potentially conflicting access.
• Integrate IAM and IGA platforms with enterprise applications using REST APIs, SCIM, SAML, and related protocols.
• Use Postman and similar tools for API testing, troubleshooting, and validation.
• Develop scripts and automation using PowerShell, Python, or equivalent technologies.
• Identify opportunities to replace manual access management processes with scalable automated solutions.
• Support access control audits, risk remediation, compliance reviews, and governance initiatives.
• Work with application owners, security teams, infrastructure teams, and business stakeholders to implement secure access solutions.
• Develop and maintain technical documentation, procedures, standards, and operational runbooks.
• Troubleshoot complex IAM, application-integration, provisioning, and authentication issues.
• Communicate project progress, technical challenges, risks, and recommendations to senior leadership.
• Mentor junior team members and provide technical guidance when needed.
• Contribute to the continuous improvement of the company’s cybersecurity and identity governance programs.

Required Qualifications:

• Bachelor’s degree or equivalent professional experience.
• At least six years of direct Identity and Access Management, cybersecurity, or information security experience.
• At least two years of hands-on experience administering an enterprise IGA platform.
• Hands-on experience with one or more of the following:
• CyberArk
• Saviynt
• ObserveIT
• Hands-on experience administering OKTA, including OKTA Lifecycle Management.
• Strong understanding of identity governance, access controls, and identity lifecycle management.
• Experience creating or improving Joiner, Mover, and Leaver workflows.
• Experience designing, implementing, or supporting Role-Based Access Control.
• Experience with access certifications, access reviews, and entitlement governance.
• At least two years of scripting and automation experience using PowerShell, Python, or an equivalent language.
• Experience integrating identity platforms and enterprise applications using REST APIs.
• Knowledge of SCIM, SAML, API-based provisioning, and identity federation concepts.
• Experience using Postman or similar tools for API testing and validation.
• Strong troubleshooting, analytical, documentation, and problem-solving skills.
• Excellent communication skills, including the ability to explain technical work to business stakeholders and senior leadership.
• Ability to operate effectively in a fast-paced environment, manage changing priorities, and adjust course when needed.
• Strong team-oriented mindset and willingness to collaborate across technical and business groups.

Preferred Qualifications:

• Experience supporting large-scale enterprise identity programs.
• Experience working in healthcare or another highly regulated industry.
• Knowledge of identity governance and security frameworks, including:
• NIST 800-63
• ISO 27001
• HITRUST
• Clearance not required but preferred.