IAM Engineer

The Identity and Access Management (IAM) Engineer designs, implements, and operates enterprise identity and access management solutions that protect critical business systems while enabling secure, efficient access for the workforce. This role serves as a technical authority for authentication, authorization, identity lifecycle management, and privileged access across on‑premises and cloud environments.

You will work closely with Cybersecurity, IT Infrastructure, HR, and application owners to deliver scalable, compliant identity solutions that reduce risk, support regulatory and audit requirements (such as SOX, NERC CIP, and ISO standards), and enable secure digital operations. This role also supports identity‑related security incidents and serves as a trusted technical advisor to IT and Security leadership.

A strong customer service focus, positive attitude, and effective communication skills are required.

Responsibilities

• Design, implement, and operate enterprise IAM solutions across on‑premises and cloud environments, including SSO, MFA, conditional access, RBAC/ABAC, directory services, and application integrations.
• Ensure IAM solutions align with Zero Trust and least‑privilege principles.
• Own and continuously improve Joiner/Mover/Leaver processes using authoritative identity sources.
• Automate identity provisioning and deprovisioning to reduce manual effort and access risk.
• Implement and operate Privileged Access Management (PAM) solutions, including credential vaulting, session monitoring, and break‑glass access.
• Support access certifications, audits, investigations, and regulatory assessments.
• Maintain IAM documentation, standards, and procedures; identify and remediate identity‑related risks and control gaps.
• Support identity‑related incident response by investigating authentication anomalies and improving IAM logging, monitoring, and alerting.
• Serve as an IAM subject‑matter expert, providing technical guidance and influencing identity‑first application designs.
• Advise IT and Security leadership on identity strategy, control effectiveness, and risk reduction.

Minimum qualifications

• Bachelor’s degree in Computer Science, Cybersecurity, Engineering, Information Systems, or a related field, or equivalent practical experience.
• 4+ years of experience implementing or operating enterprise IAM solutions (SSO, MFA, identity lifecycle management, directory services).
• Experience with IAM platforms such as Microsoft Entra ID (Azure AD), Okta, Ping Identity, or ForgeRock.
• Knowledge of authentication, authorization, RBAC/ABAC, and Zero Trust architecture.
• Experience integrating IAM with cloud platforms (Azure, AWS, and/or GCP).
• Experience supporting audits, access reviews, or compliance requirements.

Preferred qualifications

• 6–8+ years of experience designing and leading enterprise IAM and PAM solutions in hybrid or cloud environments.
• Experience with Privileged Access Management tools and secure service account management.
• Scripting or automation experience (PowerShell, Python).
• Experience integrating IAM with SIEM, ITSM tools (ServiceNow, Ivanti), and security monitoring platforms.
• Knowledge of regulatory frameworks such as SOX, NERC CIP, ISO 27001.
• Relevant certifications (CISSP, Microsoft Identity certifications, Okta, GIAM).
• Strong analytical, problem‑solving, and communication skills with a customer‑focused mindset.