IAM Security Engineer
The Identity Engineer provides technical expertise and support for the company’s on-premises and cloud-based Identity and Access Management (IAM) solutions. Systems include Microsoft Active Directory, Microsoft EntraID, SSO (Single Sign On), and Multi-Factor Authentication (MFA), Identity Governance (SailPoint Identity Now), CyberArk PAM and Conjur key vault. The analyst will be a member of the Identity Management team that also manages DNS/DHCP, IP address management, PKI, Application Delivery controllers, Web Application Firewalls and various other automation and monitoring tools. This is a highly collaborative team that interfaces with all support teams across Enterprise. We are closely integrated with IT Security to implement security improvements and controls for the company.
Responsibilities for this role include:
• Support and manage day to day SailPoint IdentityNow operations.
• Support sources and access profiles/roles, provisioning, workflows, and forms.
• Document and track system controls and compliance requirements.
• Manage the identity lifecycle for joiners, movers, and leavers.
• Manage user certifications, setup, preview, activation, and tracking.
• Oversee operational tasks including system health checks, regular updates, and troubleshooting to ensure optimal system performance.
Qualifications
Basic/Required:
• Legally authorized to work in the United States
• 3+ years of experience as SailPoint IdentityNow or IIQ administrator
• 3+ years of experience with Identity lifecycle processes (Movers, Leavers, Joiners)
• 3+years of experience scripting: PowerShell, BeanShell, Java, Python
• Basic experience integrating applications with APIs
• Basic knowledge of Identity and Access Management systems (IDP, PAM, PIM, Secrets Management)
• Being available to perform tasks outside normal business hours and on weekends as well as being on call.
• Bachelor’s degree in computer science, MIS or other IT/IS related discipline.
• Experience with SailPoint CIEM, Access Insights, and RBAC design.
• Experience with other IAM tools, CyberArk PAM, PSM, Conjur, AD, Entra ID,
• Knowledge in federation, SAML, OpenID, OAuth and other industry standard authentication/ authorization solutions
• Professional certifications such as CISSP, CIAM, Security+ or similar industry certifications
