IAM Engineer

About the role

The IAM Engineer will manage the enterprise Identity and Access Management (IAM) ecosystem for the Texas Department of Public Safety, focusing on designing, implementing, and maintaining IAM solutions including privileged access management, identity provider frameworks, and application lifecycle workflows.

Responsibilities

• Design and implement a centralized identity provider framework using SAML 2.0 and OIDC for SSO and MFA
• Develop lifecycle workflows and onboard applications via REST APIs
• Establish Role-Based Access Control (RBAC) models
• Integrate IAM solutions across platforms, supporting IGA, Access Management, and Privileged Access Services
• Collaborate with security and IT teams to maintain consistent IAM practices
• Regularly assess IAM technologies and maintain technical documentation
• Provide support for Directory, IAM services, servers, and databases
• Deploy a privileged access management solution featuring secure credential vaulting, automated password rotation, and just‑in‑time provisioning
• Perform long‑term system maintenance: performance tuning, troubleshooting provisioning errors and connection failures
• Continue onboarding of business applications

Requirements

• IAM Platform governance, engineering, lifecycle automation, and scripting
• Application onboarding and integration of business applications with IAM systems
• Design and implement RBAC models, enforce separation of duties, and design certification campaigns
• Manage Centralized Identity Provider and configure SSO/MFA
• Experience with SailPoint Identity Security Cloud: implementing user access reviews and integrating applications
• Experience with Privileged Access Management solutions
• Automate user provisioning and reporting using PowerShell and Python
• Prior experience working with a state government agency
• Candidates must be local to the State of Texas
• Merit‑position candidates are highly preferred
• GC or USC status required

Schedule

• Anticipated start date: 10/01/2026
• Duration: 12 months, with possible extension
• Total estimated hours per candidate: ≤ 2080 hours
• Expected completion: 08/31/2027
• Service may be amended, renewed, or extended by mutual written agreement