Sr. Identity & Access Management (IAM) Engineer

The Senior IAM (Identity and Access Management) Engineer is responsible for the design, implementation, and ongoing maintenance of the organization's IAM systems. This role ensures that employees, vendors, and partners have appropriate access to systems and data, in alignment with business needs and security requirements. The Senior IAM Engineer collaborates with cross-functional IT teams, leads IAM-related projects, and develops standards and best practices for identity lifecycle management and must be prepared to respond to security incidents outside of regular business hours. This position demands a deep understanding of authentication, authorization, and privileged access concepts, as well as regulatory frameworks and compliance standards.

Duties and responsibilities include:

Design and Architecture:

Leads the design and architecture of IAM solutions, including SSO, MFA, PAM, and federation services.

Implementation and Integration:

Deploys and integrates identity provider platforms such as Azure AD, MS Entra, Imprivata with enterprise applications and cloud services.

IAM Operations:

Manages identity lifecycle processes, access reviews, and provisioning/deprovisioning automation.

Monitor, Incident Response & Threat Mitigation:

Monitor sign-in activity, threats, vulnerabilities, and anomalies using security analytics and reporting tools. Investigate and remediate security incidents related to identities. Collaborate with the SOC and IT support teams for escalation and rapid response.

Security and Compliance:

Enforce policies, audit configurations, remediate vulnerabilities, and ensure compliance (e.g., SOX, GDPR, HIPAA).

Troubleshooting and Support:

Provides advanced troubleshooting and support for IAM-related issues, working with IT teams and end users.

Documentation:

Develops and maintains technical documentation, standards, and procedures for IAM systems and processes.

Guidelines:

Provides guidance to application owners and administrators, and adherence to best practices.

Continuous Improvement:

Monitors emerging technologies, evaluate new tools, and recommends enhancements to IAM architecture and workflows.

Specific experience and skills include:

• Bachelor's degree in Computer Science, Information Systems, or related field
• 5+ years' experience in Identity and Access Management engineering
• Expertise with IAM platforms including cloud (Azure, AWS, GCP).
• In-depth knowledge of authentication, authorization, and directory services (LDAP, AD, SAML, OAuth, OIDC)
• Strong scripting and automation skills (PowerShell, Python, etc.)
• Knowledge of Zero Trust architecture
• Experience with regulatory compliance frameworks and audit processes
• Excellent communication, documentation, and mentoring abilities

LICENSURE/CERTIFICATIONS

Preferred:

CISSP (Certified Information Systems Security Professional), Microsoft Identity & Access Management Administrator (SC-300), or similar

EDUCATION

Required:

Bachelors - Computer Science