IAM Engineer

IAM EngineerDenver, CO (Hybrid)Duration: initial 12-month contractPay: $65-70/hr The IAM Engineer is responsible for designing, implementing, and supporting enterprise Identity and Access Management (IAM) services. This role combines hands-on engineering with operational execution, including active participation in Joiner, Mover, Leaver (JML) ticket processing. The engineer will also drive automation, standardization, and continuous improvement across identity lifecycle processes. This role partners closely with Identity Governance, Security, Infrastructure, and HR teams to ensure identity services are secure, scalable, and audit-compliant, aligned with least privilege and Zero Trust principles. Key Responsibilities IAM Engineering & Platform Ownership Design, implement, and support IAM solutions across:Microsoft Entra ID (SSO, MFA, Conditional Access)Active Directory (on-premises and hybrid environments)SailPoint (IdentityIQ / Identity Security Cloud)ServiceNow (access request and fulfillment workflows)Privileged Access Management (PAM) solutionsLead or support:Application onboarding into IAM platformsIdentity lifecycle design and provisioning standardsIntegration patterns for new applications (APIs, connectors, etc.)Troubleshoot and resolve:Provisioning and synchronization failuresAuthentication and access issuesIdentity-related integration defects JML Operations & Ticket Management Actively manage IAM ticket queues, including:Access requests and modificationsJoiner, mover, and leaver processingExceptions and escalationsEnsure:Service Level Agreements (SLAs) are consistently metAccurate execution and complete audit documentationProper approvals are captured for all access changesIdentify recurring operational issues and:Escalate upstream process gaps (HR, application owners)Recommend and support process improvementsIdentify automation opportunities within workflows Automation & Process Improvement Support redesign and automation of JML workflows to reduce manual effort and error ratesEliminate manual steps identified through operational ticket handlingContribute to development of:Role-Based Access Control (RBAC) and Attribute-Based Access Control (ABAC) modelsStandardized access patterns and birthright access frameworksPartner with HR/People teams to:Improve identity data qualityEnable HR-driven lifecycle automation and integrations Security, Controls & Compliance Ensure IAM processes align with regulatory and audit requirements, including:SOX, ISO 27001, SOC 2, and ISAE standardsEnforce:Least privilege access principlesTimely deprovisioning and access revocationStrong identity lifecycle controlsSupport audit requests with accurate and complete evidence Collaboration & Governance Partner with:Application Owners for access models and onboardingInfrastructure teams for directory and platform dependenciesHR/People teams for identity lifecycle triggersAudit and Compliance teams for control design and remediationReinforce governance model:IAM enables enforcement of access controlsBusiness/application owners remain accountable for access approvals Required Skills & Experience Technical Strong IAM engineering experience with:Microsoft Entra ID / Azure ADActive Directory (hybrid and on-prem)SailPoint IdentityIQ or Identity Security CloudServiceNow IAM workflows and integrationsSolid understanding of:SSO protocols (SAML, OpenID Connect)Identity lifecycle management and provisioning modelsPrivileged Access Management (PAM) concepts and controls Functional Experience in IAM operational environments with ticket-based workflowsStrong understanding of:Joiner/Mover/Leaver (JML) lifecycle processesAccess request and fulfillment processesIdentity governance frameworks (RBAC, ABAC) Soft Skills Strong attention to detail and execution disciplineAbility to balance:Operational workload (ticket queue management)Strategic improvement (automation and standardization)Strong communication skills across technical and business stakeholders What Success Looks Like IAM ticket queue is stable, controlled, and consistently meeting SLA targetsJML processes are standardized, predictable, and increasingly automatedReduced manual IAM effort through automation and process optimizationImproved audit outcomes and stronger compliance postureConsistent access control enforcement across enterprise applications ...