Identity and Access Management Engineer

Responsibilities

• Administers and configures core IAM platforms and technologies, such as (e.g., Clear Skye, Veza, Entra , Okta, Ping Identity), or similar enterprise-grade solutions.
• Engineers and supports integration between the IAM platform and target applications using standard protocols like SAML 2.0, OAuth 2.0, OpenID Connect (OIDC), and SCIM.
• Develops custom connectors and workflows to integrate non-standard, legacy, or homegrown applications into the centralized IAM framework.
• Manages and secures the organization’s directory services, including Active Directory and LDAP, ensuring data integrity, synchronization, and replication health.
• Develops and maintains automation scripts (using Power Shell, Python, etc.) to streamline repetitive IAM tasks, such as user provisioning, report generation, and system health checks.
• Looks ahead, and contributes to the development and refinement of the organization’s broader cybersecurity strategy and technology roadmap, specifically within the identity domain.
• Architects, designs, deploys, and maintains the enterprise-wide Identity and Access Management (IAM) infrastructure, including core platforms for Identity Governance (IGA), Access Management (AM), and Privileged Access Management (PAM).

• Bachelor’s degree required, equivalent years of experience in this specific field may be substituted for a degree.
• Minimum of 6 years of experience in IT/Cybersecurity, with at least 4-years heavily focused on IAM administration, directory services, and federation protocols (SAML, OIDC, OAuth).
• Certifications such as CISSP, CompTIA Security+, and/or vendor-specific credentials (e.g., Okta Certified Professional, Microsoft Certified: Identity and Access Administrator Associate) preferred.
• Demonstrated experience writing technical documentation, standard operating procedures (SOPs), and runbooks for identity management.
• Hands-on experience managing enterprise directory services, particularly Microsoft Active Directory (AD) and LDAP.
• Experience in integrating IAM solutions with a wide range of applications, including SaaS (e.g., Salesforce, Workday, Office 365) and on-premises systems.