Sr. IAM Engineer | Remote, USA

Role overview Design, implement, and support identity governance and administration (IGA) and related access management services for client environments. As part of a continuously staffed security operations team, you’ll work with technical colleagues and clients on platform engineering, complex incidents, and improvements that make access processes more automated, resilient, and secure.

Responsibilities - Review IGA strategies and multi-year plans covering access requests, identity lifecycle events, provisioning, role-based access, separation of duties, and access certifications. - Design, develop, troubleshoot, and document IGA solutions, including architecture, specifications, use cases, requirements, and test cases. - Build automation, self-service, and resiliency into identity solutions; tailor implementations to client requirements. - Support complex and recurring IAM incidents, investigate root causes, and coordinate resolution with infrastructure and application teams. - Maintain and provide technical expertise for platforms such as SailPoint, CyberArk, BeyondTrust, and related environments. - Collaborate with client, IT, security, and business stakeholders on IAM initiatives and security strategy.

Requirements - Professional information security experience; the listing specifies 2–4 years, typically gained in at least 3 years. - Knowledge of identity technologies and protocols such as SSO, SCIM, OAuth, SAML, encryption, and PKI. - Experience with Microsoft identity and directory technologies, including Active Directory, Entra ID, DNS, Group Policy, and Microsoft 365 or Exchange. - Understanding of RBAC in large distributed environments, cybersecurity principles, and best practices. - Experience with privileged access management (PAM) and multifactor authentication. - Strong analytical and troubleshooting skills, with clear written and verbal communication.

Nice to have - Three to five years of senior-level identity and access management engineering experience. - Bachelor’s degree in a related technical discipline; Microsoft, CISSP, or other relevant certifications. - Experience with AWS or Google Cloud environments.

Benefits and work setup - Fully remote within the continental United States. - Professional training resources, work-life balance support, and opportunities to volunteer. - Employee resource groups and technology to support remote work.