Information Security Identity and Access Engineer

Pennsylvania State Employees Credit Union
  • Harrisburg, PA
    8 days ago

    Job Description

    Members Achieve More isn't just a tagline for us, it's part of everything we do! We're looking for passionate individuals to join our team to help us maintain that focus every day. Want to work somewhere that's remained strong for 90 years, that encourages you to learn, grow, and pursue your dreams? If yes, then read on...

    The Identity and Access Management (IAM) Engineer is responsible for designing, implementing, integrating, and supporting enterprise identity and access management solutions across on-premises, cloud, and hybrid environments. This role provides engineering expertise for identity governance, authentication, authorization, privileged access management, and identity lifecycle automation platforms.

    In addition to identity-focused responsibilities, the IAM Engineer II serves as a member of the broader information security engineering team and contributes to enterprise cybersecurity initiatives. The role participates in the implementation of security controls, security architecture reviews, vulnerability remediation efforts, incident response activities, and technical risk reduction projects that strengthen the organization''s overall security posture.

    Working under general supervision, the IAM Engineer II partners with Information Security, Infrastructure, Application Development, Cloud Engineering, Risk Management, Compliance, and business stakeholders to develop secure and scalable identity solutions. This position contributes to the engineering and enhancement of enterprise IAM capabilities through application integrations, automation, process optimization, and implementation of modern authentication technologies while ensuring compliance with organizational security standards and regulatory requirements.

    Schedule: Monday - Friday, 8:00am -4:00pm or 9:00am -5:00pm This position will be a hybrid model both in person and remote with minimum of onsite expectation of 60% or as needed.

    In this position, you will

    • Design, implement, and support enterprise Identity and Access Management (IAM) solutions, including identity governance, authentication, authorization, privileged access management, directory services, and cloud identity platforms.
    • Engineer and maintain identity lifecycle management, access governance, role-based security models, and automated provisioning and deprovisioning processes to ensure secure and efficient access control.
    • Integrate enterprise applications, cloud services, and infrastructure with IAM platforms using modern authentication, federation, API, and directory technologies while supporting hybrid environments.
    • Develop automation, scripting, and infrastructure-as-code solutions; perform system analysis, testing, troubleshooting, and performance optimization to improve the reliability and scalability of IAM and security services.
    • Design, implement, administer, and continuously enhance cybersecurity controls and security technologies across on-premises, cloud, and hybrid environments to protect enterprise systems, applications, networks, and data.
    • Support security architecture reviews, vulnerability management, security monitoring, incident response investigations, and threat remediation activities to reduce organizational risk and strengthen security posture.
    • Collaborate with information security, infrastructure, cloud, application development, compliance, data, and business teams to implement secure-by-design solutions, support regulatory and audit requirements, maintain technical documentation, and recommend continuous improvements to IAM and cybersecurity capabilities.
    • Other Duties as assigned.

    Qualifications:

    Bachelors: Computer Science (Required), Bachelors: Engineering (Required), Bachelors: Information Technology (Required)

    Any equivalent combination of experience and education. | Required Experience with automation, scripting, or integrations that improve identity and access management processes | Required Experience with Identity and Access Management (IAM), including account provisioning, access governance, SSO, MFA, and role-based access controls | Required Experience with identity governance, access reviews, and automated provisioning | Not Required Experience with Microsoft Entra RBAC, Conditional Access, and hybrid identity environments | Not Required Familiarity with CIAM and external identity solutions | Not Required Knowledge of FFIEC, NIST, or other security and compliance frameworks | Not Required Knowledge of Microsoft Entra ID, Active Directory, and identity lifecycle management | Required Possess solid working knowledge of IAM technologies and may provide technical guidance or mentoring to junior staff | Required Requires 6 or more years of experience in IAM engineering, security engineering, systems engineering, directory services, or identity infrastructure support | Required Understanding of Zero Trust, least privilege, and access security best practices | Required

    Certified Ethical Hacker (CEH) - EC-Council (International Council of E-Commerce Consultants), Certified Identity and Access Manager (CIAM) - Identity Management Institute (IMI), Certified Information Systems Security Professional (CISSP) - ISC2 (International Information System Security Certification Consortium), CompTIA Security+ - CompTIA (Computing Technology Industry Association), CyberArk Defender Certifications - CyberArk Software, CyberArk Sentry Certifications - CyberArk Software, Microsoft Certified: Cybersecurity Architect Expert - Microsoft, Microsoft Certified: Identity and Access Administrator Associate - Microsoft, Okta Certified Administrator - Okta, Inc., Okta Certified Professional - Okta, Inc., SailPoint IdentityIQ Engineer Certification - SailPoint Technologies

    Numbers & Facts

    LocationHarrisburg, PA

    Skills

    • Access Authorizationunmatched
    • Access Controlunmatched
    • Application Integrationunmatched
    • Application Programming Interface (API)unmatched
    • Authenticationunmatched
    • Automationunmatched
    • Best Practicesunmatched
    • CEH - Certified Ethical Hackerunmatched
    • CISSP - Certified Information Systems Security Professionalunmatched
    • Cloud Applicationsunmatched
    • Cloud Computingunmatched
    • CompTIA - Computing Technology Industry Associationunmatched
    • CompTIA Security+unmatched
    • Computer Scienceunmatched
    • Computer Securityunmatched
    • Continuous Improvementunmatched
    • EC-Councilunmatched
    • Enterprise Applicationsunmatched
    • Hybrid Cloudunmatched
    • Identity Data Managementunmatched
    • Identity Federationunmatched
    • Incident Responseunmatched
    • Information Technology & Information Systemsunmatched
    • Information/Data Security (InfoSec)unmatched
    • Infrastructure as a Service (IaaS)unmatched
    • International Information Systems Security Certification Consortium (ISC)2unmatched
    • Internet Securityunmatched
    • Maintain Complianceunmatched
    • Mentoringunmatched
    • Microsoft Access Databaseunmatched
    • Microsoft Active Directoryunmatched
    • Microsoft Product Familyunmatched
    • Performance Tuning/Optimizationunmatched
    • Process Improvementunmatched
    • Protective Servicesunmatched
    • Regulationsunmatched
    • Regulatory Requirementsunmatched
    • Reliability Engineeringunmatched
    • Risk Managementunmatched
    • Scalable System Developmentunmatched
    • Scripting (Scripting Languages)unmatched
    • Security Architectureunmatched
    • Security Complianceunmatched
    • Security Infrastructureunmatched
    • Security Monitoringunmatched
    • Single Sign-On (SSO)unmatched
    • Software Developmentunmatched
    • Software Engineeringunmatched
    • System Testunmatched
    • Systems Analysisunmatched
    • Systems Engineeringunmatched
    • Technical Leadershipunmatched
    • Technical Supportunmatched
    • Technical Writingunmatched
    • Testingunmatched
    • U.S. National Institute of Standards and Technology (NIST)unmatched

    Be found by employers

    5,500+ employers search our resume database daily. Add yours to get found by recruiters looking for candidates like you.

    Level up your application

    Professional resume templates

    Browse dozens of recruiter approved resume templates, layouts and formats. Choose your favorite and make it your own in minutes.

    Free resume templates

    Free resume builder

    Improve your existing resume or start from scratch and create a standout, ATS-friendly resume. Add job-specific content, download and apply.

    Free resume builder