Identity & Access Management Engineer

The responsibility of this position includes supporting, enhancing, and leading the design, implementation, and ongoing operation of the Identity Governance and Administration (IGA) program, with responsibilities aligned to experience level. This role supports application onboarding, workflow configuration, identity lifecycle management, and the reliability of IGA systems to ensure effective access governance. The position contributes to protecting the confidentiality, integrity, and availability of organizational data by implementing and maintaining controls for access provisioning, deprovisioning, certification, and access reviews.

As proficiency increases, the Identity and Access Management (IAM) Engineer assumes greater accountability for solution architecture, technical leadership, and strategic advancement of the IAM program.

• Support SailPoint Identity Security through configuration, maintenance and application onboarding, including connector configuration and testing.
• Assist in implementing identity lifecycle processes, including joiner, mover, and leaver events.
• Support RBAC models, access certifications, and separation-of-duties configurations to ensure effective access governance.
• Execute access provisioning, deprovisioning, and role changes according to defined standards.
• Perform integrations with on-prem and cloud directories and supported cloud platforms.
• Assist with reporting, metrics, and audit evidence collection for access reviews and compliance activities.
• Contribute to IAM automation efforts using Power Shell, Python, SQL, RPA, or Power Automate.
• Troubleshoot access and integration issues with support from senior engineers.
• Develop foundational knowledge of IAM architecture, standards, and compliance requirements.
• Configure, integrate, and tailor IAM solutions to align business needs with identity creation, deletion, vaulting, and password management standards.
• Associates are expected to perform all additional duties as assigned.

• Bachelor's Degree or equivalent combination of education and experience
• 2 years Supporting IAM or IGA solutions with Sail Point
• Working knowledge of SailPoint Identify Security, including application onboarding and configuration
• Understanding of identity lifecycle management and access governance concepts
• Ability to build workflows, RBAC models, and support user access lifecycle management
• Exposure to Java, REST APIs, and scripting or automation tools
• Familiarity with Active Directory and Entra
• Experience integrating systems via APIs, including building custom integrations
• Debug complex issues, analyze logs, and resolve production incidents efficiently
• Strong communication skills with the ability to explain technical concepts clearly
• Experience connecting "disconnected" or legacy applications to identity platforms using JSON, CSV parsing, or automated UI interaction techniques
• Ability to communicate technical concepts clearly and work effectively in a team environment
• Strong analytical and problem-solving skills with the ability to exercise sound judgment in high-pressure situations, while managing competing priorities and deadlines
• Relevant certifications such as SailPoint Certified Identity Security Engineer, CIMP (Certified Identity Management Professional) preferred

Must be able to sit for long periods of time and use computer keyboard and/or mouse requiring hand and wrist manipulation, while viewing computer screens.

Trustmark exemplifies the strength and possibilities that come with a diverse and inclusive team. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, age, marital status, genetic information, pregnancy, national origin, protected veteran, disability status, or any other characteristic protected under applicable law. Trustmark is committed to providing access, equal opportunity and reasonable accommodation for individuals with disabilities in employment.