DirectJobHub
Jobs · Information Technology · Massachusetts

Lead IAM Engineer

Blue Cross Blue Shield of Massachusetts · Boston, MA · 1 wk ago
Information Technology$164k–$200k/yrFull-time

About the role

We are seeking a highly experienced Lead IAM Engineer to serve as the senior technical authority for enterprise Identity and Access Management. This role will lead the design, engineering, automation, and operational maturity of IAM capabilities across workforce, privileged, machine, application, and cloud identities.

Responsibilities

  • Design and implement IAM solutions across SSO, MFA, IGA, PAM, and cloud identity platforms.
  • Build integrations between IAM platforms and enterprise applications.
  • Support onboarding applications into IAM services.
  • Create reference architectures and design patterns.
  • Review application architectures and provide IAM guidance.
  • Develop enterprise standards for authentication, authorization, and privileged access.
  • Support Zero Trust initiatives.
  • Develop automation using Python, PowerShell, Terraform, APIs, and workflow engines.
  • Act as escalation point for IAM production issues.
  • Lead troubleshooting of complex authentication and provisioning failures.
  • Perform root cause analysis and remediation.
  • Improve platform resiliency and automation.
  • Mentor IAM engineers and administrators.
  • Conduct design reviews and code reviews.
  • Establish engineering standards and best practices.
  • Guide teams on IAM implementation patterns.
  • Support audits and compliance initiatives.
  • Evaluate emerging IAM technologies and develop IAM roadmaps.
  • Identify automation opportunities and drive modernization efforts.

Requirements

Bachelor’s in CS/Engineering preferred, with 8+ years of dedicated IAM engineering experience.

Demonstrated experience leading complex IAM initiatives supporting hybrid, multi-cloud, and SaaS environments.

Expert-level knowledge of modern identity protocols (SAML, OAuth 2.0, OpenID Connect).

Advanced, hands-on experience engineering leading platforms (e.g., Ping, Delinea, SailPoint, Entra ID) for enterprise-wide scale.

Deep expertise in automating Identity Governance (JML processes) and deploying modern PAM controls (credential vaulting, Just-in-Time access).

Strong proficiency in scripting/automation (Python, PowerShell, Terraform).

Relevant industry certifications (e.g., CISSP, CISM, CCSP, or vendor-specific IAM certs) are strongly preferred.

Qualifications

High school degree or equivalent required unless otherwise noted above.

Pay

$163,530.00 - $199,870.00

Schedule

Full time

Similar jobs