IAM Provisioning Engineer

Location: Malvern, PA (Hybrid — 3 days onsite per week; candidates willing to relocate are accepted). Experience: 5+ years. Client: Randstad/Vanguard.

About the role

Our client is seeking an IAM Provisioning Engineer to support access management across its global enterprise, including approximately 30 banking-related applications. The role involves working directly with business teams, external banking partners, service providers, risk and control teams, and technology stakeholders to ensure appropriate user access. These applications support sensitive activities such as financial transactions, payroll, trading, and investor services.

Key Hiring Priority: Strong hands-on user provisioning experience, direct client/business partner engagement, and the ability to explain how you collaborate across teams to resolve issues and deliver results.

Responsibilities

• Manage IAM processes, including role design, provisioning, deprovisioning, and access governance.
• Partner with banking teams, third-party vendors, external banks, technology teams, and senior leaders on access requirements.
• Translate business needs into appropriate roles, permissions, and technical access solutions.
• Resolve complex access issues, identify root causes, and implement sustainable solutions.
• Administer access to third-party financial applications while ensuring proper approvals and security controls.
• Follow enterprise IAM standards, security policies, and risk management practices.
• Use Jira and ServiceNow to manage incidents, requests, tasks, and project deliverables.
• Maintain operating procedures, onboarding materials, and process documentation.
• Identify opportunities for automation, process improvement, and operational efficiency.
• Analyze performance metrics to support vendor management and operational effectiveness.
• Support audits, remediation activities, and security reviews as an IAM process and controls subject matter expert.
• Collaborate with geographically dispersed teams, including colleagues in the UK.

Requirements

• 3+ years of experience in IAM, security administration, information security, or a related field.
• Hands-on experience with user provisioning and access management.
• Strong troubleshooting, analytical, and problem-solving skills.
• Ability to understand access requirements and determine appropriate roles and permissions.
• Strong client-service, stakeholder management, and communication skills.
• Demonstrated ability to build relationships across business and technology teams.
• Strong understanding of enterprise security controls and risk management.
• Ability to work independently, take ownership, and learn new technologies.
• Undergraduate degree or an equivalent combination of training and experience.
• Flexibility to support global operations, including occasional schedule adjustments and after-hours or weekend on-call coverage.

Skills

• ServiceNow and SailPoint IdentityIQ experience (strong experience in one platform, with willingness to learn the other, will be considered).
• Experience with Jira, Active Directory, AWS, Azure, PowerShell, Linux, or Windows.
• Banking application support or financial services access-management experience.
• Workflow automation and process optimization.
• Exposure to Microsoft Copilot, Claude, or similar AI and automation tools.

Schedule

Hybrid — 3 days onsite per week in Malvern, PA. Additional hiring notes state full-time onsite in Malvern; please confirm the onsite requirement before submission. Flexibility for occasional schedule adjustments and after-hours or weekend on-call coverage to support global operations.

Pay

$40/hr on W2.