Senior Identity & Access Management Engineer

This is a fully remote position, open to applicants in United States.

📋 Description

• Design, configure, enhance, implement, and provide support for enterprise Identity and Access Management solutions.

• Develop both technical and functional designs to address complex business requirements, application access needs, and security objectives.

• Configure, develop within, and maintain IAM platforms that facilitate authentication, authorization, SSO, federation, and access control.

• Collaborate with business stakeholders, security teams, infrastructure, application owners, and vendor support groups.

• Create, refine, and guide user stories for intricate features while coaching team members.

• Facilitate sessions for feature reviews, document decisions, and ensure alignment between business and technical teams.

• Plan, execute, and assess module, integration, and system testing.

• Manage issues, blockers, defects, and implementation risks until resolution.

• Review vendor releases, evaluate impact, and identify opportunities for platform enhancements.

• Troubleshoot issues utilizing vendor processes, support tools, documentation, and developer groups.

• Assess vendor products and enhancements in relation to corporate strategy, platform standards, and roadmaps.

• Resolve technology-related issues across various business areas and application processes.

• Act as a subject matter expert for access management processes, vendor IAM platforms, and application integrations.

• Provide training, mentoring, and knowledge sharing to team members.

• Maintain technical documentation, support procedures, and implementation guidance.

⛳️ Requirements

• A minimum of 5 years of experience in implementing, configuring, administering, or supporting enterprise Identity and Access Management (IAM) solutions.

• Hands-on experience with enterprise web access management or IAM platforms such as IBM Verify Identity Access, IBM Verify Access, IBM Security Access Manager, Okta, ForgeRock, PingOne Advanced Identity Cloud, Ping Access, PingFederate, PingAM, or similar tools.

• Experience in configuring or developing vendor software for access management, as well as application authentication, authorization, and secure application access.

• Proven experience in implementing and supporting single sign-on (SSO), federation, and access management solutions.

• Experience in writing automation scripts using JavaScript, Python, Groovy, YAML, or PowerShell.

• Knowledge of SAML, OAuth, OpenID Connect (OIDC), and federation concepts.

• Experience in gathering complex business requirements and translating them into functional and technical designs.

• Experience in supporting module testing, integration testing, issue resolution, and production troubleshooting.

• Ability to lead technical discussions, organize feature review sessions, and document decisions effectively.

• Familiarity with vendor support processes, product documentation, defect resolution protocols, or developer support groups.

• Strong ability to manage priorities, identify blockers, drive issue resolution, and support project delivery.

• Excellent analytical, troubleshooting, problem-solving, communication, and stakeholder partnership skills.

• Capability to mentor, coach, or train team members.

• Equivalent combinations of technical training, certifications, and relevant work experience will be considered.

• Background investigation is required.

• Employment-based visa sponsorship is generally not available.

• A dedicated private workspace, appropriate desk and seating, along with reliable internet service with minimum speeds of 50 MB download and 5 MB upload is required for remote work.

🏝️ Benefits

• Comprehensive technology setup, including a laptop, monitors, headset, keyboard, and mouse.

• Monthly connectivity reimbursement for employees eligible to work from home.

• Remote work arrangement available.

• Opportunities to engage in meaningful causes and influence the future of protection.