Senior Identity and Access Management Engineer

Job Detail

Loading

×Sorry to interrupt

CSS Error

Refresh

Skip to Main Content

Balyasny Asset Management HomepageOpen Main Navigation

About UsAbout Us

How We WorkHow We Work

Our StrategiesNews & Insights

CareersCareers

Open Roles

Senior Identity and Access Management Engineer

Hong KongChicagoNew YorkWarsaw

Posted Yesterday

Balyasny Asset Management is expanding their Identity & Access management program and seeking a candidate for a Senior Identity and Access Management Engineer (IAM Engineer) role. The Senior IAM Engineer will be responsible for designing, implementing, and managing identity and access management solutions. This role involves working closely with technology and security teams to ensure that access to systems and data is secure and compliant with organizational policies and regulations. The role will be hands-on, and will require experience designing, implementing, and operating IAM processes and technology. While this role will primarily focus on IAM, we are seeking a well-rounded professional who understands the breadth of Information Security, especially data security and its intersection with IAM through data access governance. Lastly, this role will also require integrating IAM controls and solutions with AI, and leveraging AI to help accomplish these goals.

At BAM, you will have the chance to work with exciting technologies and some of the smartest and most driven individuals in the industry. We're passionate about our work and about Information Security, and we're seeking a candidate who feels the same way.

This position will report to BAM's Identity and Access Management Lead.

Key Responsibilities:

• Design, implement, and manage IAM controls and solutions for both workforce and workload (human and agentic), including identity and account governance, authentication, authorization, provisioning, lifecycle management, and secrets management.
• Collaborate with IT and security teams to design, map, implement, and maintain IAM controls, solutions, and integrations between platforms, systems, and applications across the organization, including AI.
• Develop, document, and maintain workflows and custom solutions as needed to address BAM's IAM requirements or provide additional functionalities and automation to the business.
• Monitor and analyze IAM systems to identify and resolve security and access issues.
• Conduct regular audits and assessments of systems to ensure their effectiveness and compliance with IAM policies and standards.
• Operate as a subject matter expert (SME) for IAM platforms, tools, integrations, and processes, to provide full technical support and guidance to users and stakeholders.
• Stay up to date with the latest trends and technologies in identity and access management, especially agentic trust.
• Create and maintain accurate documentation on IAM policies, standards, and processes.

Qualifications & Requirements:

• Bachelor's degree in Information Security, Computer Science, or a closely related field.

• 5+ years of hands-on engineering experience in IAM technologies, products, and solutions:

• Expert in any major IGA platform (e.g., SailPoint, Saviynt, etc.)

• Familiar with major authentication platforms (e.g., Okta, Entra ID, etc.).

• Familiar with any major secrets management (PAM) platform (e.g., CyberArk / Idira, Delinea, HashiCorp Vault, etc.).

• Familiar with leveraging major AI models (e.g., Claude Code, Codex, etc.) for IAM or Information Security work.

• Strong understanding of IAM concepts, frameworks, and best practices, including:

• MFA, FIDO2, passkey, verifiable credential, etc.

• Access modeling, *BAC, real-time authorization, etc.

• GLBA, GDPR, SOX, SEC Regulations, DORA, etc.

• Strong scripting skills (PowerShell, SQL). Python will be a plus.

• Strong technical background.

• Excellent problem-solving skills and attention to detail.

Bonus Points For:

• Certified SailPoint or Saviynt engineer or architect.
• Experience with MCP development.
• Experience in Okta, AD, Azure / Entra ID / O365 / Exchange, AWS IAM.
• Relevant certifications such as CISSP, CEH, Security+, OSCP, SANS, etc.

Don't have all of the skills listed above? Have extra skills you think are important that we haven't thought of? Please, let us know by applying and telling us a bit more about yourself and why you think you're qualified!

With respect to NY, CA, and IL based applicants, the starting base pay range for this role is between USD 175000 and USD 225000 annually. The actual base pay is dependent upon several factors, including, but not limited to, relevant experience, business needs and market demands. This role may also be eligible for bonus compensation and employee benefits.

Apply now

Loading

Job Detail