IAM Engineer

Hands-on Senior Identity and Access Management Engineer to join a growing cybersecurity team supporting a large enterprise environment. This individual will serve as the dedicated owner of the organization s Identity Governance and Administration program and play a key role in strengthening access governance, identity lifecycle management, and application security.
This is a highly visible position that will partner with IT, cybersecurity, compliance, application owners, and business leadership. The ideal candidate is technically strong, comfortable working in a fast-paced environment, and able to clearly communicate identity initiatives, risks, and recommendations to senior leaders.
Key Responsibilities:
•Serve as the primary owner of the company s Identity Governance and Administration platform and processes.
•Administer and support enterprise IGA and IAM technologies, including CyberArk, Saviynt, ObserveIT, and OKTA.
•Manage user provisioning, de-provisioning, and access changes throughout the employee lifecycle.
•Design, implement, and improve Joiner, Mover, and Leaver workflows.
•Develop and maintain Role-Based Access Control models and access governance standards.
•Support OKTA Lifecycle Management and integrations with enterprise applications.
•Participate in periodic access reviews, access certifications, and entitlement remediation.
•Support Segregation of Duties controls and identify potentially conflicting access.
•Integrate IAM and IGA platforms with enterprise applications using REST APIs, SCIM, SAML, and related protocols.
•Use Postman and similar tools for API testing, troubleshooting, and validation.
•Develop scripts and automation using PowerShell, Python, or equivalent technologies.
•Identify opportunities to replace manual access management processes with scalable automated solutions.
•Support access control audits, risk remediation, compliance reviews, and governance initiatives.
•Work with application owners, security teams, infrastructure teams, and business stakeholders to implement secure access solutions.
•Develop and maintain technical documentation, procedures, standards, and operational runbooks.
•Troubleshoot complex IAM, application-integration, provisioning, and authentication issues.
•Communicate project progress, technical challenges, risks, and recommendations to senior leadership.
•Mentor junior team members and provide technical guidance when needed.
•Contribute to the continuous improvement of the company s cybersecurity and identity governance programs.
Required Qualifications:
•Bachelor s degree or equivalent professional experience.
•At least six years of direct Identity and Access Management, cybersecurity, or information security experience.
•At least two years of hands-on experience administering an enterprise IGA platform.
•Hands-on experience with one or more of the following:
•CyberArk
•Saviynt
•ObserveIT
•Hands-on experience administering OKTA, including OKTA Lifecycle Management.
•Strong understanding of identity governance, access controls, and identity lifecycle management.
•Experience creating or improving Joiner, Mover, and Leaver workflows.
•Experience designing, implementing, or supporting Role-Based Access Control.
•Experience with access certifications, access reviews, and entitlement governance.
•At least two years of scripting and automation experience using PowerShell, Python, or an equivalent language.
•Experience integrating identity platforms and enterprise applications using REST APIs.
•Knowledge of SCIM, SAML, API-based provisioning, and identity federation concepts.
•Experience using Postman or similar tools for API testing and validation.
•Strong troubleshooting, analytical, documentation, and problem-solving skills.
•Excellent communication skills, including the ability to explain technical work to business stakeholders and senior leadership.
•Ability to operate effectively in a fast-paced environment, manage changing priorities, and adjust course when needed.
•Strong team-oriented mindset and willingness to collaborate across technical and business groups.
Preferred Qualifications:
•Experience supporting large-scale enterprise identity programs.
•Experience working in healthcare or another highly regulated industry.
•Knowledge of identity governance and security frameworks, including:
•NIST 800-63
•ISO 27001
•HITRUST
Clearance not required but preferred.