Identity and Access Management Engineer

Overview

We are a values driven organization putting Relationships FIRST
. Eagle Bank (NASDAQ – EGBN) is focused on being Flexible, Involved, Responsive, Strong, and Trusted
. By prioritizing meaningful connections with our customers, employees, and shareholders, we relentlessly deliver the most compelling, valuable service to our customers. Eagle Bank is committed to inclusion, equity, and respect. We celebrate diversity and intentionally seek out opportunities to learn from one another’s experience. We believe employees are essential to the building of relationships and we prioritize investing in employee growth and wellbeing.

Employee involvement is fostered through resource groups, mentorship programs, community service, and scholarship opportunities for continued education. With features including maternity and parental leaves, wellness discounts, healthcare premium sharing, employer funding in your HSA account, and 100% 401(k) matching up to 4%, we pride ourselves in the ways we support our internal relationships. The minimum and maximum projected annualized salary for this position is: $ to $.

Additional compensation may be possible based on experience and skills.

We understand the need to be creative and flexible when it comes to telecommuting and other alternative work arrangements. This position is eligible for our hybrid remote work and will work in the
Silver Spring, MD office four days per week.

Eagle Bank is seeking a motivated and technically strong IAM Engineer to join our Identity and Access management team within Information Security and contribute to the advancement of our enterprise identity program. Our IAM function is actively evolving from manual, process-heavy access controls toward a scalable, automated, and architecture-driven identity model. This role offers hands‑on exposure to federation, governance, automation, and IAM architecture within a regulated banking environment.

You will play a direct role in strengthening authentication controls, modernizing manual identity processes, and helping shape a more mature, system‑enforced governance framework. This is an opportunity for an emerging IAM professional who wants to build engineering depth while contributing to a meaningful security transformation initiative.

Responsibilities:

• Lead Federation & SSO: Implement and support enterprise integrations using SAML, OAuth 2.0, and OpenID Connect.
• Secure Authentication: Configure MFA, trust relationships, and secure authentication flows to protect identity perimeters.
• Modernize IAM Architecture: Design scalable workflows and target‑state architectures to transition manual processes toward automation.
• Automate Workflows: Develop scripts (Power Shell, Python, Power Automate) and utilize APIs/SCIM to streamline identity lifecycle management.
• Lifecycle Management: Lead and enhance Joiner/Mover/Leaver (JML) processes to ensure seamless user transitions.
• Role Engineering: Refine RBAC models and lead structured role engineering initiatives to align with business needs.
• Governance & Compliance: Drive access certification campaigns, remediation tracking, and policy enforcement.
• Enforce Security Controls: Implement least‑privilege access and Segregation of Duties (SoD) to mitigate organizational risk.
• Standardize Onboarding: Create reusable integration patterns and frameworks for onboarding new enterprise applications.
• Incident Response: Troubleshoot complex token, claims, and federation issues while responding to IAM‑related control exceptions.
• Risk Management: Monitor IAM control effectiveness and participate in regular risk assessments and audits.
• Technical Documentation: Maintain comprehensive current‑state and future‑state process flows, control mappings, and technical designs.
• Strategic Road mapping: Support long‑term initiatives focused on reducing manual overhead and increasing system‑enforced governance.

Required skills:

• Experience & Identity Core: 3+ years of IAM engineering experience with deep knowledge of Lifecycle Management, RBAC, SSO, MFA, and IGA
  .
• Authentication Protocols: Expert-level understanding of SAML, OAuth 2.0, and OpenID Connect for secure…