Identity and Access Management; IAM Engineer

The Identity and Access (IAM) Engineer will help mature Clark’s security posture. The role will be responsible for administering the IAM platforms (Saviynt, Entra , and Okta) and onboarding applications to these platforms. The role requires working closely with the business to facilitate application onboarding, develop access control, and perform other IAM activities. This includes all phases from discovery through long‑term support.

The role will also work with our security and internal audit teams to provide proper access controls and auditing of our solutions.

This position will be based in the office 5 days/week.

• Identity and Access Governance (IGA) Administration
• Administer and maintain the IGA platform (Saviynt)
• Onboard new applications to the platform
• Resolve IAM‑related issues
• Authentication and Authorization Administration
• Configure and maintain single sign‑on (SSO) integrations
• Administer and maintain SSO platforms
• Identity Lifecycle Management
• Automate user provisioning and de‑provisioning processes.
• Develop and maintain role and attribute‑based access controls.
• Troubleshoot, identify, and resolve technical IAM‑related issues
• Improve IAM solutions and systems for protection against evolving threats and efficiency
• Coach other organization members on the best practices that should be followed in IAM
• Develop reporting for IT, Business Application Owners, and SMEs
• Drive planning and execution of IAM roadmaps and technology enhancements
• Create and maintain standards surrounding documentation related to IAM processes, procedures, and infrastructure
• Provide engineering support to automate and administer IAM and compliance requirements across all enterprise information systems
• Perform day‑to‑day IAM operations and support
• Participate in bimonthly maintenance days when required

• 5+ years of experience in the information technology field
• 3+ years of experience of IAM‑related experience
• Strong oral communication and writing skills
• Ability to collaborate across business units and engage with stakeholders
• Proficient knowledge of IAM concepts
• Authentication Methods
• Least Privilege Access
• Experience integrating with account and access management technologies
• APIs
• SCIM
• IGA Platform Management
• Experience with role and attribute‑based access controls
• Experience with federation protocols such as SAML, OAuth, and OIDC
• Experience with access certifications
• Alignment to Clark Standards of Excellence:
  Self‑Motivated, Results‑Oriented, Adaptable, Team Player, Accountable, Ethical, Innovative, Resilient, Builds Relationships, Builds People / Teams & Followership, Sets Direction & Executes

• Saviynt (or similar, ex., Sailpoint) administration and integrations
• SQL
• Entra
• Okta
• Service Now
• Scripting
• Cyberark

Given that a good portion of your day will be spent at a desk, you should be comfortable with prolonged periods of focused work, whether it’s collaborating with colleagues, analyzing data, or developing strategies. The role demands effective communication and sharp visual acuity for reviewing complex documents and performing detailed computer work. While there are times for quiet concentration, you’ll also be expected to move actively throughout the office and travel occasionally to various locations, including dynamic construction sites, utilizing different modes of transportation.

The ability to lift and move objects up to 10 pounds regularly, and up to 25 pounds on occasion (think a box of files or small office equipment), is also required.

Your primary workspace will be in our professional office, which has a typical, quiet‑to‑moderate noise and light levels. As part of your work, you may also be required to visit active construction sites. These environments are naturally more dynamic and can include exposure to outdoor weather conditions, louder noise, and moving equipment. Your safety is our top priority, and you’ll be expected to follow Clark Construction’s safety policies and procedures, and all applicable laws, at all locations.

This is a demanding, high‑performance environment. We are looking for…