Senior Identity & Access Management Engineer

We need to output HTML fragment with sections: About the role? The posting includes description. We need headings: About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule. Only include sections where there is real specific content. We must not repeat job title. No Job ID etc. Remove boilerplate. We need to parse content: The posting includes: - Intro about GreatAmerica (company description) maybe part of About the role? Could be "About the role" includes description of role responsibilities? Actually "About the role" could be a brief description of the role. The posting includes: "The Senior Identity & Access Management (IAM) Engineer is responsible for designing, implementing, and continuously enhancing GreatAmerica's identity governance, access management, and privileged access capabilities. This role serves as a senior technical specialist, ensuring identity and access controls are secure, scalable, automated, and aligned with regulatory, audit, and risk management requirements. Working across SailPoint, CyberArk, Okta, and related technologies, the Senior IAM Engineer develops and maintains enterprise identity lifecycle processes, role-based access controls, privileged access solutions, and authentication services. The role partners closely with Security, Audit, Compliance, Infrastructure, and Application teams to translate security and control requirements into effective technical solutions while advancing automation, operational efficiency, and governance maturity. The Senior IAM Engineer plays a key role in strengthening GreatAmerica's identity security program by improving access governance, supporting regulatory compliance, reducing access-related risk, and ensuring the reliability and effectiveness of identity services across the organization." That's a good overview. Could be placed under "About the role". Then "Responsibilities" list: bullet points after "As a Senior IAM Engineer, You Will ..." includes many bullet-like sentences. We need to extract each as list items. Then "Required" section: list of required qualifications. Could be under "Requirements". Then "Preferred" section: list of preferred qualifications. Could be under "Qualifications" or "Skills". The instruction: Use headings for section headings (e.g. About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule). We need to decide mapping. We have "Required" and "Preferred". Could combine into Requirements (required) and Qualifications (preferred) or Skills. Usually "Requirements" = required, "Qualifications" = preferred or education. "Skills" could be technical skills. But we have specific required experience list and preferred list. We'll put required under "Requirements". Preferred under "Qualifications". Education and Certifications could be under "Qualifications" as well, but we might separate? However we should avoid too many thin sections. Could combine Education and Certifications into Qualifications. Benefits: The posting includes "Financial Benefits Sharing rewards..." then list of benefits: Competitive Compensation, Monthly Bonuses, 401(k) and Company Match, Annual Profit Sharing, Paid Time Off, Health, Wellbeing, And Family Planning Benefits (list), Education And Career Planning Benefits, Perks. So we have benefits content. Pay: Not explicitly stated; only "Competitive Compensation" but no numbers. The instruction: never create Pay/Schedule/Benefits sections unless the posting actually states them. It does state benefits, but not specific pay numbers. However "Competitive Compensation" is vague but still a statement about pay. The rule: "never create Pay/Schedule/Benefits sections unless the posting actually states them." It does state "Competitive Compensation" as part of benefits. That is a statement about pay, albeit not specific. Should we include Pay section? The rule says include a section ONLY when the posting has real, specific content for it — never emit a heading followed by filler/placeholder text (e.g. "commensurate with experience", "not specified", "N/A", "varies", "TBD") and never create Pay/Schedule/Benefits sections unless the posting actually states them. "Competitive Compensation" is not a specific number but it's a statement. Is that considered filler? It's vague but it's still a statement. The examples of filler include "commensurate with experience", "not specified", "N/A", "varies", "TBD". "Competitive Compensation" is similar to vague but not exactly those. Might be considered filler? Safer to not create Pay section because it's not specific. The instruction says "never create Pay/Schedule/Benefits sections unless the posting actually states them." It does state benefits, so Benefits section is okay. For Pay, it's ambiguous. I'd omit Pay section. Schedule: Not mentioned; omit. Thus sections: About the role, Responsibilities, Requirements, Qualifications, Benefits. We need to use

for each section heading. Use

• for any list of duties/requirements/benefits. Use

  for prose. We must preserve ALL substantive information; do not invent or summarize away detail. So we need to include all bullet points from responsibilities, required, preferred, benefits, etc. Also include education and certifications under Qualifications. We must not repeat job title. Not include Job ID etc. We need to strip boilerplate: cookie/navigation/legal/EEO/equal-opportunity/scam-warning boilerplate, duplicated lines, and application instructions. At end there is: "If your experience aligns closely, please apply. We value diverse backgrounds and adding new perspectives. We encourage you to apply if you can make a strong impact in this role at www.greatamerica.com/careers. Please note, applicants must be authorized to work for any employer in the U.S. We are unable to sponsor or take over sponsorship of an employment visa." That's application instructions and EEO-ish; we should remove. Also earlier: "GreatAmerica is a highly successful entrepreneurial company providing equipment financing to businesses across the United States. Our exemplary customer service, our principle-centered business philosophy and our team-based operating approach are key to our success and growth. We have also recently become a bank! We are looking to add a key member to our Identity & Access Management Team!" That's company intro; could be part of About the role? Might be considered "About the role" or maybe we could include as part of About the role (company description). It's substantive; we should keep. Thus About the role paragraph could combine company intro and role overview. Now let's extract responsibilities bullet points: From "As a Senior IAM Engineer, You Will" list: - Build and maintain automated identity lifecycle workflows, certification campaigns, and connectors within SailPoint IdentityNow, including connector development and integration with enterprise applications (ServiceNow, ILS). - Design, build, and roll out role-based access control (RBAC) models, including role mining, role engineering, and ongoing role lifecycle governance. - Integrate and administer Okta as the enterprise identity provider, including single sign-on (SSO), multi-factor authentication (MFA), and lifecycle management through SCIM provisioning. - Implement and support CyberArk privileged access management (PAM), including credential vaulting, session isolation and monitoring, just-in-time (JIT) elevation policy administration, elimination of standing privileges, and privileged account onboarding. - Support the migration from self-hosted CyberArk PAS to CyberArk Privilege Cloud, report and integration transition, and updates to operational procedures. - Develop self-service and automated access request workflows spanning request intake, approval routing, and fulfillment. - Automate joiner, mover, and leaver (JML) provisioning and deprovisioning processes across enterprise systems to ensure timely and accurate access changes. - Execute recurring access certification campaigns and quarterly configuration reviews (privileged access, password and authentication settings), producing audit-ready evidence for ICFR logical access controls. - Support SOX-related access controls, segregation of duties (SoD) enforcement, and the generation of audit evidence for Internal Control over Financial Reporting (ICFR). - Develop PowerShell and REST API automation for entitlement extracts, reconciliation, reporting, and audit evidence generation. - Apply FFIEC IT examination handbook guidance to identity governance, access control design, and third-party access risk. - Partner with security, audit, compliance, and application teams to translate control requirements into engineered, testable technical solutions. - Troubleshoot, tune, and document IAM integrations and workflows to ensure reliability, performance, and auditability. That's a lot; we need to keep all. Now Required qualifications: - 5+ years of hands-on experience in Identity and Access Management engineering or administration roles. - 3+ years of direct, hands-on experience with SailPoint (IdentityIQ and/or IdentityNow), including lifecycle workflows, certification campaigns, and connector development or integration. - Demonstrated experience designing and deploying RBAC models, including role mining, role engineering, and role lifecycle governance. - Working experience with CyberArk PAM, including vaulting, session isolation and monitoring, and privileged account onboarding. - Strong PowerShell scripting and REST API experience for automation, entitlement extracts, reconciliation, and audit evidence generation. - Proven ability to build access request automation covering requests, approvals, and fulfillment. - Experience automating JML provisioning and deprovisioning across multiple enterprise systems. Preferred: - Practical experience integrating and administering Okta as an identity provider, including SSO, MFA, and SCIM-based lifecycle provisioning (depth in two of SailPoint / CyberArk / Okta required; ability to develop depth in the third). - Experience in a financial services environment, with a solid understanding of the regulatory and control landscape applicable to banking or financial institutions. - Experience supporting ICFR and SOX access controls, including segregation of duties and audit evidence preparation. - Familiarity with FFIEC IT examination guidance as it relates to identity governance and logical access. - Education: Bachelor's degree with a major in cybersecurity, computer science or related field preferred, but not required. Information security experience may be substituted for requisite education. - Certifications Preferred, not required: SailPoint Certified IdentityNow/IdentityIQ Engineer; CyberArk Defender or Sentry; Okta Certified Professional or Administrator; CISSP or equivalent. We need to include Education and Certifications under Qualifications (maybe as sub-bullets). We'll keep them as list items. Benefits: From "Financial Benefits Sharing rewards is an integral part of our culture. We believe in the value of hard work and reward our employees beyond the paycheck. Our total rewards package is based on eligibility and includes: Competitive CompensationMonthly Bonuses for Eligible Employees401(k) and Company MatchAnnual Profit SharingPaid Time Off Health, Wellbeing, And Family Planning Benefits Paid VacationPaid Sick DaysPaid HolidaysGym ReimbursementHealth InsuranceDental InsuranceVision InsuranceShort-Term and Long-Term DisabilityCompany Paid Life InsuranceFlexible Spending Accounts (FSA)Health Savings Accounts (HSA)Employee Assistance ProgramParental Leave Education And Career Planning Benefits Tuition AssistanceNetworking OpportunitiesLeadership Development Opportunities Perks Paid ParkingService AwardsHybrid work arrangementsBusiness casual environmentA strong organizational culture focused on our greatest asset: you!" We need to parse into list items. The text is jammed without spaces; we need to separate. Let's manually split: - Competitive Compensation - Monthly Bonuses for Eligible Employees - 401(k) and Company Match - Annual Profit Sharing - Paid Time Off - Health, Wellbeing, And Family Planning Benefits - Paid Vacation - Paid Sick Days - Paid Holidays - Gym Reimbursement - Health Insurance - Dental Insurance - Vision Insurance - Short-Term and Long-Term Disability - Company Paid Life Insurance - Flexible Spending Accounts (FSA) - Health Savings Accounts (HSA) - Employee Assistance Program - Parental Leave - Education And Career Planning Benefits - Tuition Assistance - Networking Opportunities - Leadership Development Opportunities - Perks - Paid Parking - Service Awards - Hybrid work arrangements - Business casual environment - A strong organizational culture focused on our greatest asset: