Senior IAM Engineer

About the Role

The Identity & Access Management (IAM) Senior Engineer will independently lead the development and enhancement of IAM products like SailPoint, Saviynt, and Okta, and influences stakeholders on future improvements. Implements role management, lifecycle management, and access certifications, while solving business problems and coaching peers. Stays updated on industry trends, solves technical issues, supports IAM applications, and trains users. Manages identity lifecycle with Active Directory, troubleshoots with SIEM tools, implements IAM policies, integrates with cloud platforms, automates processes, and enhances security initiatives.

Responsibilities

• Plans, designs, develops, redesigns, and implements various technology IAM products, such as Sailpoint, Saviynt, Okta and recommendations to influence key stakeholders on additional/future enhancements.
• Performs the analyzing and implementation of authorization methods such as, RBAC/ABAC/PBAC role management, Lifecycle Management, Separation of Duties (SOD), Access Certifications, etc.
• Develops the configuring, integrating, and tailoring of existing IAM products to solve identified business problems or to suit a client's requirements.
• Reviews IAM technical white papers and provides guidance to team on future offerings to help people better understand the technology behind them.
• Manages Identity Lifecycle Management with Microsoft Active Directory which includes developing and managing the Access Certifications lifecycle accounts (assign permissions, delete accounts, and complete appropriate modifications for role changes).
• Performs integrations with directories (both in the cloud and on-prem) and cloud platforms (ex. AWS, GCP, and Azure).
• Integrates the business needs with technology and standards related to identity creation, deletions, vaulting and password management.
• Creates and updates metrics, including automating data collection and aggregation.
• Builds automation through integrations using Powershell scripts, RPA, SQL, and other automation tools and Power Automate.
• Participates in information gathering meetings with clients to determine the client’s needs, business goals, and desired outcomes.
• Performs other duties as assigned.

Qualifications

• Minimum of 6 years’ experience with Identity and Access Management.
• Minimum of 4 years’ experience with SailPoint engineering and/or architecting.
• Experience with SailPoint IdentityNow (IDN) or SailPoint Identity Security Cloud (ISC).
• Advanced understanding of IAM platforms (SailPoint, Saviynt, Okta) to develop and scale with the organization.
• Experience with creating and updating scripts and code.
• Experience with API’s (REST, JSON) and cloud infrastructure.

Requirements

• Bachelor’s degree in Computer Science, Information Technology, Cybersecurity preferred.
• Expert knowledge of access management frameworks (RBAC/ABAC/PBAC).
• Deep understanding of Microsoft Active Directory and cloud platforms (AWS, GCP, Azure).
• Comprehensive understanding of security and access certification processes.
• Proficiency in automation tools (PowerShell, RPA, SQL, Power Automate).
• Experience with cloud and on-premises directory integrations.
• Expertise in access certification and SOD implementation.
• Strong leadership capabilities in technical project implementation.
• Strong analytical and problem-solving skills.
• Able to translate complex technical concepts for various audiences.
• Able to generate and interpret metrics and reports.
• Experience with Privileged Access Management tools (eg. Delinea Secret Server).