Senior IAM Engineer

Senior Identity & Access Management (IAM) Engineer

The Senior IAM Engineer is responsible for the implementation, operation, and continuous improvement of identity and access management capabilities across the enterprise. This role leads the design and enforcement of identity controls to ensure secure, efficient, and compliant access to systems and data. The position works closely with security leadership, IT teams, and application owners to implement scalable identity solutions, strengthen authentication and access controls, and support evolving business and security requirements.

• Identity & Access Management Engineering
  • Design, implement, and maintain IAM solutions, including SSO, MFA, and identity federation.
  • Configure and manage identity platforms (e.g., Microsoft Entra , Okta).
  • Implement and maintain Conditional Access policies aligned to organizational security requirements.
  • Integrate applications with identity providers using standard protocols (SAML, OAuth, OpenID Connect).
• Access Control & Authentication
  • Establish and enforce authentication and access control standards across the environment.
  • Manage and continuously improve MFA strategy, including enforcement, exclusions, and user experience considerations.
  • Support secure onboarding of applications and services into centralized identity systems.
  • Review and improve role‑based and attribute‑based access models where applicable.
• Privileged Access & Non-Human Identity Management
  • Establish and maintain controls for privileged access, including administrative roles and elevated permissions.
  • Support the implementation and ongoing improvement of Privileged Access Management (PAM) capabilities.
  • Develop and enforce standards for service accounts and other non-human identities, including credential management and access restrictions.
  • Identify opportunities to reduce standing privilege and improve least privilege across systems and platforms.
  • Partner with infrastructure and application teams to improve visibility and governance of non-human identities.
• Identity Lifecycle & Governance
  • Support identity lifecycle processes for both human and non-human identities, including provisioning, deprovisioning, and access changes.
  • Identify opportunities to improve automation and consistency in access management workflows.
  • Partner with IT and business teams to ensure appropriate access controls are implemented and maintained.
  • Contribute to the maturation of identity governance and privileged access capabilities over time.
• Operational Support & Troubleshooting
  • Troubleshoot and resolve identity-related issues, including authentication failures and access inconsistencies.
  • Support incident response efforts involving identity or access‑related events.
  • Monitor IAM systems for reliability, performance, and security issues.
• Collaboration & Continuous Improvement
  • Work with cross‑functional teams to ensure identity services are integrated into new and existing systems.
  • Evaluate and recommend improvements to IAM tools, configurations, and processes.
  • Support ongoing maturation of identity capabilities, including privileged access and identity governance.
  • Stay current with evolving identity threats, technologies, and best practices.
• Practice Ownership and Project Oversight
  • Own and maintain security standards, control requirements, and guidance within the assigned security practice domain.
  • Lead security scoping activities for enterprise initiatives involving controls within the assigned practice area.
  • Define security requirements, deliverables, and acceptance criteria for initiatives impacting the practice domain.
  • Oversee alignment of implementation plans to established security standards.
  • Collaborate with project managers and business stakeholders to ensure security milestones are defined, tracked, and documented.
  • Escalate material deviations from established standards and support formal risk documentation where appropriate.
• Metrics & Reporting
  • Develop and maintain key performance indicators and metrics related to the assigned security practice domain.
  • Provide periodic reporting on control maturity, risk posture, and initiative progress.
  • Communicate practice‑level performance…