Sr. Identity and Access Management Engineer

Company Overview

When it comes to IT solution providers, there are a lot of choices. But when it comes to providers with innovative and differentiating end-to-end service offerings, there's really only one:
Zones - First Choice for IT. TM Zones is a Global Solution Provider of end-to-end IT solutions with an unmatched supply chain. Positioned to be the IT partner you need, Zones, a Minority Business Enterprise (MBE) in business for over 35 years, specializes in Digital Workplace, Cloud & Data Center, Networking, Security, and Managed/Professional/Staffing services. Operating in more than 120 countries, leveraging a robust portfolio, and utilizing the highest certification levels from key partners, including Microsoft, Apple, Cisco, Lenovo, Adobe, and more, Zones has mastered the science of building digital infrastructures that change the way business does business ensuring whatever they need, they can Consider IT Done.

Follow Zones, LLC on Twitter @Zones, and Linked In and Facebook.

Term: 6 months

Location: Remote (United States)

Pay: $75.00 - $85.00; commensurate with experience

Hours: normal business hours

As the Senior Identity and Access Management (IAM) Engineer is a member of the Cybersecurity team and is responsible for designing, developing, and implementing high-quality IAM solutions that align with the organization’s cybersecurity strategy. The candidate will collaborate with cross-functional teams to ensure IAM systems are robust, scalable, and compliant with industry best practices.

The candidate must have a strong background in technology, security and metrics, and must be highly adaptive. The candidate must be highly organized and analytical and is expected to partner and mentor effectively with other teams on an ongoing basis.

The requirements below are representative of the knowledge, skill, and/or ability required. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions. This job description is not intended to be a comprehensive list of the duties and responsibilities of the position, and the duties and responsibilities may change without notice.

• Design and architect IAM frameworks to support secure access across hybrid environments.
• Automate IAM processes to improve operational efficiency and reduce manual intervention.
• Lead the integration of IAM solutions with existing systems, ensuring compatibility and compliance with security standards.
• Implement role-based access control (RBAC), Least-Privilege, and Zero-Trust principles.
• Contribute to the development and maintenance of IAM solutions - Ping One SSO, Saviynt Enterprise Identity Cloud, Entra
• Monitor and enhance IAM security posture through continuous improvement and threat mitigation.
• Implement and support Identity Threat Detection and Response solutions and practices.
• Evaluate vendor IAM solutions and document their applicability and value.
• Create and maintain comprehensive documentation for IAM processes and ensure compliance with regulatory requirements.
• Research, design, and advocate for relevant IAM architectures and solutions supporting security requirements of the enterprise, its customers, business partners and vendors.
• Maintain familiarity with IT security vulnerabilities, threats, exploits and mitigations.

• Hands-on experience delivering enterprise-level IAM solutions and controls.
• Strong conceptual thinking and communication skills - the ability to translate complex business and technical requirements into effective and comprehensible solutions.
• Expertise in authentication and authorization standards, including FIDO2, SAML, OAuth, and LDAP.
• Extensive hands‑on experience implementing and supporting one or more Single Sign On solutions (e.g., Ping One, Entra )
• Extensive hands‑on experience implementing and supporting one or more Identity Governance and Administration solutions (e.g., Saviynt, SailPoint)
• Experience implementing and managing Privileged Access Management (PAM)
• Experience in migrating legacy authentication standards to modern ones
• Experience with Active…