IAM Engineer

Hands-on Senior Identity and Access Management Engineer to join a growing cybersecurity team supporting a large enterprise environment. This individual will serve as the dedicated owner of the organization s Identity Governance and Administration program and play a key role in strengthening access governance, identity lifecycle management, and application security.

This is a highly visible position that will partner with IT, cybersecurity, compliance, application owners, and business leadership. The ideal candidate is technically strong, comfortable working in a fast-paced environment, and able to clearly communicate identity initiatives, risks, and recommendations to senior leaders.

Key Responsibilities:

•    Serve as the primary owner of the company s Identity Governance and Administration platform and processes.

•    Administer and support enterprise IGA and IAM technologies, including CyberArk, Saviynt, ObserveIT, and OKTA.

•    Manage user provisioning, de-provisioning, and access changes throughout the employee lifecycle.

•    Design, implement, and improve Joiner, Mover, and Leaver workflows.

•    Develop and maintain Role-Based Access Control models and access governance standards.

•    Support OKTA Lifecycle Management and integrations with enterprise applications.

•    Participate in periodic access reviews, access certifications, and entitlement remediation.

•    Support Segregation of Duties controls and identify potentially conflicting access.

•    Integrate IAM and IGA platforms with enterprise applications using REST APIs, SCIM, SAML, and related protocols.

•    Use Postman and similar tools for API testing, troubleshooting, and validation.

•    Develop scripts and automation using PowerShell, Python, or equivalent technologies.

•    Identify opportunities to replace manual access management processes with scalable automated solutions.

•    Support access control audits, risk remediation, compliance reviews, and governance initiatives.

•    Work with application owners, security teams, infrastructure teams, and business stakeholders to implement secure access solutions.

•    Develop and maintain technical documentation, procedures, standards, and operational runbooks.

•    Troubleshoot complex IAM, application-integration, provisioning, and authentication issues.

•    Communicate project progress, technical challenges, risks, and recommendations to senior leadership.

•    Mentor junior team members and provide technical guidance when needed.

•    Contribute to the continuous improvement of the company s cybersecurity and identity governance programs.

Required Qualifications:

•    Bachelor s degree or equivalent professional experience.

•    At least six years of direct Identity and Access Management, cybersecurity, or information security experience.

•    At least two years of hands-on experience administering an enterprise IGA platform.

•    Hands-on experience with one or more of the following:

•    CyberArk

•    Saviynt

•    ObserveIT

•    Hands-on experience administering OKTA, including OKTA Lifecycle Management.

•    Strong understanding of identity governance, access controls, and identity lifecycle management.

•    Experience creating or improving Joiner, Mover, and Leaver workflows.

•    Experience designing, implementing, or supporting Role-Based Access Control.

•    Experience with access certifications, access reviews, and entitlement governance.

•    At least two years of scripting and automation experience using PowerShell, Python, or an equivalent language.

•    Experience integrating identity platforms and enterprise applications using REST APIs.

•    Knowledge of SCIM, SAML, API-based provisioning, and identity federation concepts.

•    Experience using Postman or similar tools for API testing and validation.

•    Strong troubleshooting, analytical, documentation, and problem-solving skills.

•    Excellent communication skills, including the ability to explain technical work to business stakeholders and senior leadership.

•    Ability to operate effectively in a fast-paced environment, manage changing priorities, and adjust course when needed.

•    Strong team-oriented mindset and willingness to collaborate across technical and business groups.

Preferred Qualifications:

•    Experience supporting large-scale enterprise identity programs.

•    Experience working in healthcare or another highly regulated industry.

•    Knowledge of identity governance and security frameworks, including:

•    NIST 800-63

•    ISO 27001

•    HITRUST

Clearance not required but preferred.