Identity and Access Management Engineer I

This is a fully remote position, open to applicants in United States.

📋 Description

• Operate and manage the Python-based JML application, Azure Functions, Logic Apps, telemetry, troubleshooting portal, and associated provisioning components.

• Process and resolve issues related to ADP-driven onboarding, job changes, transfers, terminations, BPO guest-account workflows, and other identity lifecycle activities.

• Administer and enhance Entra ID Lifecycle Workflows, Access Packages, groups, access assignments, service principals, managed identities, and related identity management controls.

• Maintain custom API integrations and screen-automation sequences for systems lacking SCIM or supported provisioning APIs.

• Oversee Git repositories, pull-request controls, GitHub Actions pipelines, deployment configurations, secrets, environment settings, and release documentation.

• Diagnose provisioning failures, trace events and telemetry, resolve user-impacting issues, and document sustainable solutions.

• Create IAM/JML execution tasks for Desktop Support Analysts, Systems Administrators, and other support personnel; validate task completion and offer technical guidance.

• Support IAM governance and access-control standards, including entitlement cleanup, access reviews, privileged-access audits, and service-principal evaluations.

• Provide identity-related audit evidence for GLBA, NIST CSF, SOC 1, PCI DSS, and relevant state lending regulations.

• Assist in security investigations concerning accounts, access, identity risk, and vulnerabilities in IAM applications or Azure resources.

• Evaluate new integrations for identity and access-control requirements and propose secure implementation strategies.

• Collaborate with Information Security, Desktop Support, HR, Systems Administration, Cloud Security, and application owners to enhance lifecycle reliability and minimize risk.

• Contribute to incident response and vulnerability remediation processes involving the IAM platform, Entra ID, Azure Functions, Logic Apps, and interconnected systems.

⛳️ Requirements

• Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related discipline, or equivalent professional experience.

• 3+ years of experience in IAM, identity engineering, systems integration, security automation, cloud engineering, or application operations.

• Proficient in Python development and troubleshooting, particularly with event-driven applications and API integrations.

• Hands-on experience with Entra ID, Active Directory, Lifecycle Workflows, Access Packages, groups, service principals, managed identities, and access controls.

• Familiarity with Azure Functions, Logic Apps, Azure Monitor or similar telemetry solutions, and cloud application configuration.

• Experience in managing Git repositories, pull requests, CI/CD pipelines, secrets, deployment controls, and release processes.

• Proven experience in integrating systems via REST APIs, webhooks, SCIM, or reliable screen automation when APIs are not available.

• Understanding of JML lifecycle controls, least privilege principles, access reviews, privileged access, identity governance, and audit evidence requirements.

• Ability to decompose complex operational tasks into clear assignments for support teams and coordinate execution across technical groups.

• Security certification or Azure/Entra certification is preferred.

• Strong troubleshooting, documentation, communication, and cross-functional collaboration capabilities.

• Must reside in one of the employer’s approved locations by the start date.

🏝️ Benefits

• Comprehensive medical, dental, and vision coverage.

• Health Savings Account (HSA) contributions.

• Employee Assistance Program (EAP).

• 401(k) Safe Harbor Match: 100% of the first 3% and 50% of the next 2%.

• Accrued time off.

• Company holidays.

• Sick leave.

• 3 floating holidays.

• 12-week Paid Parental Leave.

• Bonus opportunities.

• Robust tech package.

• Fully remote work arrangement.

• Regular virtual meetings and team events.