Apply now: ICAM Engineer, Remote. Start date is ASAP for this Contract through end of 2027 position.

Job Title:

ICAM Engineer Location-Type:

Remote Start Date:

ASAP Duration:

Contract through end of 2027 (potential for full-time conversion based on performance, organizational need, and available funding)

Compensation Range:

$80-88/hr on W2

Benefits:

Eligible for Health, Dental, Vision, and 401

K Visa Sponsorship:

Not eligible for visa sponsorship The client is seeking a senior-level ICAM Engineer to build, integrate, and automate identity and access governance processes that scale with growing application and compliance demands. Job Summary

• Design and implement access-review and access-certification workflows, ensuring compliant, evidence-supported outcomes
• Integrate applications with the client's access-review platform and ServiceNow, reducing manual effort through scripting, APIs, and workflow automation
• Perform identity correlation and authoritative-source alignment across enterprise identity systems
• Develop and maintain technical documentation, runbooks, and operational handoff materials
• Collaborate with access-review, platform, and identity-data SMEs to translate governance gaps into sustainable technical solutions
• Contribute longer-term to Joiner-Mover-Leaver automation, authentication modernization (passwordless, phishing-resistant MFA), privileged access management, and IGA evaluation
• Support platform and process testing, evidence enablement, and data-quality improvements across identity integrations

Minimum Requirements:

• 3-5 years of hands-on identity engineering experience, with demonstrated focus on access reviews and identity governance
• Experience with Microsoft Entra ID, Active Directory, Okta, RSA, ServiceNow, or comparable enterprise identity platforms
• Practical scripting, API, automation, workflow, and data-reconciliation skills applied in an enterprise environment
• Familiarity with IGA, access certification, PAM, authentication, and identity lifecycle processes
• Strong troubleshooting, testing, documentation, and operational-handoff discipline

Preferred Qualifications:

• Experience onboarding and integrating multiple applications into an identity governance or access-review platform
• Background supporting identity engineering at a Managed Service Provider (MSP)
• Exposure to Varonis or broader data-security automation tooling
• Experience with Conditional Access policies, passwordless authentication, or phishing-resistant MFA implementations