Sr. IAM Engineer

Required Experience

• 5+ years of Identity & Access Management experience.
• 3+ years supporting a major IAM/IGA platform (preferably SailPoint IdentityNow/ISC or IdentityIQ).
• Experience managing enterprise Active Directory and Microsoft Entra ID environments.
• Experience implementing and supporting:
  • Automated provisioning/deprovisioning
  • Role-based access control (RBAC)
  • Access certifications / attestation campaigns
  • Single Sign-On (SSO)
  • Multi-Factor Authentication (MFA)
  • Privileged Access Management (PAM)
• Experience onboarding applications into IAM platforms.
• Strong troubleshooting and operational support experience.

• SailPoint IdentityNow / Identity Security Cloud (strong preference)
• Microsoft Active Directory
• Microsoft Entra ID (Azure AD)
• PowerShell scripting
• REST APIs and system integrations
• LDAP, SAML, OAuth, OpenID Connect, SCIM
• Microsoft 365 identity services
• Workday-to-IAM integrations
• Security group and entitlement management

• Serve as a SailPoint SME and platform administrator.
• Onboard enterprise applications into SailPoint.
• Design and maintain IAM workflows and automation.
• Support joiner/mover/leaver processes.
• Manage access certification campaigns.
• Validate and improve RBAC models.
• Partner with HR and application owners to automate provisioning.
• Support SOX, audit, and compliance activities.
• Assist with PAM, MFA, and SSO initiatives.
• Maintain documentation and operational procedures.
• Act as a backup SME for critical identity infrastructure and services.