IAM Engineer

Overview

ABOUT US

Founded in 1993, Bayview Asset Management is an investment management firm focused on mortgage and consumer credit investments, including whole loans, asset-backed securities, mortgage servicing rights, and other credit-related assets.

We are seeking an experienced Identity Access & Management (IAM) Engineer to support our enterprise identity and access management initiatives. This role will focus on authentication, authorization, provisioning, privileged access management (PAM), and overall enterprise IGA administration. The IGA Engineer will play a key role in ensuring secure and efficient access to systems and applications while maintaining compliance with internal policies and regulatory requirements.

• Design, implement, and maintain IGA solutions to automate user provisioning, deprovisioning, and access reviews.
• Configure and manage role-based access control (RBAC), attribute-based access control (ABAC), and policy-based access controls.
• Develop workflows for user lifecycle management (Joiner-Mover-Leaver).
• Ensure compliance with internal security policies and external regulations.
• Enforce security policies related to authentication and access control.

• Implement and maintain PAM solutions to secure access to privileged accounts and credentials.

• Maintain and optimize IGA platform configurations.
• Monitor and troubleshoot identity-related incidents and service requests.
• Work with cross-functional teams to implement IAM best practices.
• Provide technical guidance on IAM strategies and solutions.

• Hands-on experience with IGA platforms (e.g., SailPoint Identity Now/Identity
  
  IQ, Saviynt, Okta Identity Governance, Microsoft Entra , One Identity, etc.).
• Strong knowledge of authentication protocols and technologies (LDAP, SAML, OAuth, OpenID Connect, Kerberos).
• Experience with PAM solutions (e.g., Cyber Ark, Beyond Trust, Hashi Corp Vault, Thycotic/Delinea).
• Familiarity with Active Directory (AD), Azure AD (Entra ), SCIM, and API-based integrations.
• Scripting skills in Power Shell, Python, or similar languages for automation.
• Understanding of regulatory requirements related to IAM (e.g., SOX, HIPAA, NIST, ISO 27001).

• Experience with Cloud IAM (AWS, Azure, GCP).
• Knowledge of Zero Trust Architecture (ZTA) principles.
• Relevant certifications: CISSP, CISM, GIAC, Microsoft SC-300, SailPoint Certified Engineer, Okta Certified Professional/Administrator, Cyber Ark Defender/Guardian, etc.

• Bachelor’s degree in Computer Science, Information Technology, or a related field (or equivalent experience).
• Minimum of 5 years of experience managing Microsoft Exchange Server and Active Directory in a large enterprise environment.
• Experience administering Office 365 / Exchange Online environments.

Bayview is an Equal Employment Opportunity employer. All aspects of employment with the Company are based on merit, qualifications, and business needs without regard to race, color, religion, sex, national origin, age, disability, veteran status, sexual orientation, or any other category protected by federal, state, or local law.