Senior IAM Engineer

This is a fully remote position, open to applicants in California, +2 more states.

📋 Description

• Design, develop, configure, test, implement, and support sophisticated IAM capabilities, such as identity lifecycle management, identity governance, provisioning, SSO, MFA, PAM, RBAC, access certification, and policy enforcement.

• Analyze, troubleshoot, and modify application or integration code as required.

• Create scripts, APIs, connectors, workflows, and automation solutions.

• Oversee technical integrations between IAM platforms and enterprise applications, directories, cloud services, infrastructure, and security tools.

• Identify and resolve complex IAM engineering challenges across code, configuration, data, APIs, connectors, workflows, and dependent systems.

• Establish and enforce IAM engineering standards, technical procedures, deployment practices, and controls.

• Generate technical requirements, solution designs, test plans, implementation plans, support documentation, and operational runbooks.

• Act as a senior escalation point and mentor the team through technical guidance, code reviews, troubleshooting, and hands-on problem-solving.

• Collaborate with security architects, application owners, developers, system administrators, infrastructure teams, risk partners, and business stakeholders.

• Assess system performance, reliability, security, and supportability; recommend and implement enhancements.

• Contribute to IAM strategy, platform roadmaps, future-state architecture, cloud IAM, Zero Trust, DevSecOps, and automation initiatives.

• Ensure that solutions adhere to corporate policies, security requirements, and relevant regulatory obligations, including SOX, HIPAA, PCI-DSS, and privacy requirements.

• Lead or participate in cross-functional implementations from requirements and design through testing, deployment, stabilization, and transition to support.

• Perform additional duties as assigned and comply with all policies and standards.

⛳️ Requirements

• Must be authorized to work in the U.S. without the necessity for employment-based visa sponsorship now or in the future.

• Bachelor's degree in a quantitative or business discipline (e.g., statistics, mathematics, engineering, computer science).

• 4–6 years of relevant experience.

• Equivalent experience may be considered based on applicable knowledge, duties, scope, and skills reflective of the position level.

• Practical IAM engineering experience with SailPoint IdentityIQ or a similar identity governance platform.

• Familiarity with Active Directory and Microsoft Entra ID.

• Experience with REST/SOAP APIs.

• Background in scripting or software development.

• Experience with source control, testing, troubleshooting, and production support.

• Strongly preferred: Development experience with SailPoint IdentityIQ using Java, BeanShell, connector and workflow development, Python, PowerShell, SQL, JSON/XML, CI/CD, cloud identity, Okta or Ping, CyberArk or other PAM platforms, and experience in healthcare or highly regulated industries.

• Ability to work independently while managing multiple complex priorities.

• Clear communication skills with both technical and non-technical partners.

• Capability to make sound decisions under pressure and deliver accurate work within deadlines.

• Certification is not mandatory.

• Preferred certifications include SailPoint, CyberArk, Microsoft Identity and Access Administrator, Okta, CISSP, CIAM, CIST, or CAMS.

🏝️ Benefits

• Competitive salary.

• Health insurance.

• 401K plan.

• Stock purchase options.

• Tuition reimbursement program.

• Paid time off plus holidays.

• Flexible work arrangements with options for remote, hybrid, field, or office schedules.

• Total compensation may include additional forms of incentives.