Sr. Security Engineer - IAM
Listed on 2026-01-12
-
IT/Tech
Cybersecurity, IT Consultant, Information Security, Data Security
Overview
Position Overview: The Sr. Security Engineer – IAM is a mid to senior-level role responsible for driving the design, development, and advancement of SECU’s IAM program.
This individual will serve as a subject matter expert (SME) and technical lead, providing support as well as participating in the strategic direction, implementation, and continuous improvement of IAM solutions, including Privileged Access Management (PAM), Single Sign-On (SSO), Identity Governance and Administration (IGA), Multi-Factor Authentication (MFA), Active Directory (AD), Customer Identity and Access Management (CIAM), and other IAM technologies.
This role will be instrumental in designing and optimizing IAM frameworks, automating identity processes, and ensuring compliance with security policies and regulatory requirements. The engineer will collaborate with cybersecurity, IT, and business stakeholders to enhance security posture, mitigate identity-related risks, and drive IAM adoption.
Additionally, they will mentor junior engineers, lead complex IAM projects, and provide technical guidance to strengthen the overall cybersecurity strategy.
Essential Responsibilities- Assist with implementation and maintenance of technical security solutions including planning, deployment coordination, change management, documentation, and training to enhance SECU’s security posture.
- Configure and tune security tools, integrate them with enterprise controls, and evaluate vendor offerings and new tools to improve security responsiveness.
- Identify and recommend opportunities for documentation enhancements, cost savings, service quality improvements, and operational efficiency.
- Support governance and compliance efforts by participating in assessments and remediation activities to ensure adherence to security standards and regulations.
- Participate in on-call rotation and serve as a resource for technical support of information security technologies and mentor junior engineers.
- Pursue and maintain skills and certifications to stay current with advancing cybersecurity trends and best practices.
Responsibilities will include participation in special assignments and cross-functional initiatives as required.
Required Education & Experience (Knowledge, Skills, & Abilities)- Candidate MUST live in North Carolina or contiguous state.
- Bachelors degree in Computer Science, Information Technology, Cyber Security, or related field. Additional 3 years of relevant experience can be considered in lieu of degree.
- Minimum 5 year of experience in related field.
- Primary IAM Solution Experience — Proficient with SailPoint Identity Now (IDN) architecture, administration, and configurations; knowledge of Identity Profiles and Source configurations; hands-on experience with Access Profiles, Roles, Policies, and Certifications; experience configuring SaaS-based Identity Governance (IG) solutions; expertise in Joiner-Mover-Leaver (JML) workflows; experience implementing access request, approval workflows, and certification campaigns; experience with Segregation of Duties (SoD) and compliance enforcement;
demonstrated experience with most common IGA and SailPoint connectors including Active Directory (AD), Entra
ID, JDBC, Exchange, mainframe, web service, and authoritative sources integration (such as Workday). - General IAM Solutions — Proficient in implementing or supporting two or more IAM solutions such as PAM, SSO, Directory Services, IGA, CIAM, and MFA; experience in implementing integrations between multiple IAM solutions; knowledge of cloud directories such as Entra , AWS Directory Service, and Google Cloud Identity; knowledge of hybrid IAM environments and cloud-to-cloud identity integration; understanding of APIs how they are used to integrate IAM systems with other applications.
- Authentication and Authorization Protocols — Understanding of OAuth
2.0, OIDC (OpenID Connect), SAML (Security Assertion Markup Language), LDAP (Lightweight Directory Access Protocol), Kerberos, and XACML (eXtensible Access Control Markup Language). - IAM Governance and Compliance — Familiarity with IAM governance frameworks and standards such as NIST, ISO 27001, SOX, and GDPR; experience…
(If this job is in fact in your jurisdiction, then you may be using a Proxy or VPN to access this site, and to progress further, you should change your connectivity to another mobile device or PC).