Identity & Access Management (IAM) Engineer III

Summary
We are seeking a Senior Identity & Access Management (IAM) Engineer to design, implement, and manage enterprise identity solutions across on premises and cloud environments. This role will serve as a technical authority for IAM architecture, leading initiatives across Identity Governance & Administration (IGA), Privileged Access Management (PAM), Single Sign On (SSO), and Multi Factor Authentication (MFA), while ensuring secure, scalable, and compliant identity services. The ideal candidate combines deep, hands on engineering experience with strong architectural skills and can partner closely with security, infrastructure, cloud, and application teams.

Visa Sponsorship Available
No

Minimum Requirements
Combination of Education and Experience will be considered. Must be authorized to work in the US as defined by the Immigration Act of 1986. Must pass a Criminal Background Check.
Education: Bachelor’s Degree in cybersecurity or Computer Science.
Certification: IAM or Cyber related certifications.
Years of Experience: Minimum seven (7) years of experience in related field.

Preferred Requirements

• Strong hands on experience implementing and supporting IGA, PAM, SSO, MFA, and identity federation solutions.
• Experience implementing Conditional Access, adaptive authentication, and Zero Trust identity controls.
• Experience securing machine identities, service accounts, and workload identities.
• Familiarity with Identity Threat Detection & Response (ITDR) concepts and tooling.
• Strong understanding of Active Directory, LDAP, Kerberos, and enterprise directory services.
• Experience designing and implementing enterprise IAM architectures.
• Solid understanding of authentication and authorization protocols (SAML, OAuth 2.0, OpenID Connect, LDAP).
• Experience managing cloud identity services (Azure AD / Entra ID, AWS IAM, GCP IAM).
• Strong scripting or automation skills (PowerShell, Python, Bash, or similar).
• Experience integrating IAM with SaaS, cloud, and custom applications.
• Strong understanding of Zero Trust and identity centric security principles.
• Ability to translate business requirements into secure technical solutions.
• Experience with common IAM platforms (e.g., SailPoint, Saviynt, Okta, Ping, CyberArk, BeyondTrust, Delinea).
• Experience supporting regulatory or compliance frameworks (SOX, PCI, HIPAA, SOC 2).
• Cloud security or IAM related certifications (e.g., CISSP, CCSP, Microsoft Identity certifications, AWS Security).
• Experience with access reviews, certification campaigns, segregation of duties (SoD), and audit remediation activities.