IAM Security Specialist

Our client, a leading media & entertainment company, is seeking an IAM Security Specialist to support the design, integration, automation, and ongoing operation of enterprise-scale IAM services.

About the role

This role focuses heavily on SailPoint, Okta, identity lifecycle management, access provisioning, and API-based integrations. You will partner with application teams, architects, software engineers, and operations to onboard applications and deliver secure, scalable solutions. The ideal candidate brings strong hands-on experience with enterprise IAM platforms, cloud/SaaS IAM environments, protocols such as SCIM, SAML, OAuth2, OIDC, and LDAP, and automation using Python, JavaScript, or PowerShell. This position also requires strong technical leadership, documentation, communication, security/compliance awareness, and the ability to troubleshoot and support IAM services in a large, complex enterprise environment.

This position is W-2 only.

Responsibilities

• Designs, builds, maintains and automates an IAM security solution within a vendor-provided enterprise IAM service/platform protecting thousands of internal applications and data of hundreds of thousands of users.
• Recommends and implements solutions for the technical integration and implementation of IAM services in coordination with IAM domain architects, team lead, service leads, software engineers, and operations teams.
• In collaboration with domain architects and team, leads to define/maintains all aspects of the platform engineering process including service/product technical evaluation process, lab testing, and service solution design.
• Accountable for ensuring all security and compliance standards are upheld as the service delivery team including remediating vulnerabilities, driving compliance evidence collection, and following all change management processes while also providing on call support and incident response and RCA.
• Evaluates capabilities of new security services/functionality and crafts solutions to deliver technology-current and business-aligned platform offerings that evolve cybersecurity defense and upgrade security posture.
• Collaborates closely with software engineering teams in support of their custom developed solutions and products that integrate with vendor platforms.
• Maintains strong knowledge of emerging technologies and trends.

Requirements

• 5+ years of experience in IT Enterprise Technology, supporting identity and access (IAM), enterprise platforms, and/or collaboration ecosystems within diverse enterprises.
• 3+ years providing technical leadership and mentorship to other engineers.
• 3+ years of confirmed running Okta at scale within a medium-to-large enterprise environment.
• 3+ years of consistent record with implementing or maintaining large-scale identity and access management solutions, experienced in:
  • Products/Vendors: SailPoint, SGNL, Okta, Active Directory, Entra ID
  • Identity Lifecycle Management, HCM (e.g., SAP, Workday) and IAM Data Integration
  • Protocols/Standards such as SCIM, OAuth2, SAML, OIDC, LDAP
• 2+ years’ experience working with suppliers in an outsourced environment.
• Experience automating access provisioning and deprovisioning.
• Familiarity with zero standing access concepts and policy-based access management.
• Experience automating common operational tasks, web service/API integration, and deployment activities in scripting/programming languages (Python, JavaScript, PowerShell).
• Understand security concerns within application (password hashing, SSL/TLS, encryption at rest, XSS, XSRF).
• Expertise with Agile methodologies and delivering solutions through sprint planning activities.

Qualifications

• BS or BA degree in Information Technology, Information Security, Computer Science, or equivalent work experience.
• Solid grasp with critical data handling such as SOX, PCI and PII, Safe Harbor (preferred).
• SailPoint Certifications (preferred).
• SGNL Practitioner Certification (preferred).
• Professional certifications in other identity and access management platforms and products (Active Directory, Okta) (preferred).
• CISSP/Security Certifications (preferred).

Schedule

Hybrid – locations in Orlando, FL or Burbank/Glendale, CA.

Contract: 12 months.

Pay

The approximate pay range for this position is between $56.00/hr and $80.00/hr. Final compensation may vary based on factors including but not limited to background, knowledge, skills, and location.

Benefits

• Medical, Dental, & Vision Insurance Plans.
• Employee Stock Ownership Plan.
• 401K offered.