Identity and Access Management Engineer

Job Description

An Identity Engineer (or IAM Engineer) designs, builds, and maintains the systems that control user access to sensitive information. They ensure that the right people and devices have the correct permissions to access technology resources while keeping unauthorized users out.

• Access Control:
  Establishing Role-Based Access Control (RBAC) and Attribute-Based Access Control (ABAC) to implement the "principle of least privilege".
• Identity Lifecycle:
  Managing the "joiner/mover/leaver" processes to automatically provision and de-provision user accounts.
• Authentication & Federation:
  Implementing Single Sign-On (SSO), Multi-Factor Authentication (MFA), and secure protocols like SAML and OAuth.
• Governance & Auditing:
  Running access certification campaigns and generating reports to maintain regulatory compliance.
• Privileged Access Management (PAM):
  Securing highly sensitive administrative accounts and managing Just-In-Time (JIT) access.

• Identity Providers (IdPs):
  Microsoft Entra  (formerly Azure AD), Okta, Ping Identity, and Auth
  0.
• Identity Governance & Administration (IGA):
  SailPoint, Saviynt, or Forge Rock.
• Privileged Access Management (PAM):
  Cyber Ark, Beyond Trust, or Delinea.
• Automation & Scripting:
  Python, Go, Power Shell, and Terraform