Systems Engineer – Identity & Access Management, IAM

This is a fully remote position, open to applicants in United States.

📋 Description

• Design and manage identity infrastructure, which includes Active Directory, Microsoft Entra ID, LDAP, authentication services, service accounts, certificates, DNS, as well as Windows or Linux components.

• Implement and provide support for the SPHEREboard application, including its database, scan-server components, connectors, schedules, services, access, and operational transition.

• Integrate directories, servers, databases, PAM platforms, HR sources, and various other systems utilizing native connectors, SQL, PowerShell, REST APIs, and structured data formats.

• Develop and sustain PowerShell automation for tasks related to data collection, transformation, validation, monitoring, and operational support.

• Create and troubleshoot SQL queries, views, stored procedures, and data mappings; reconcile inventories and verify data accuracy.

• Identify and resolve end-to-end issues spanning identity, operating systems, networks, permissions, certificates, application services, databases, connectors, and source data.

• Collaborate with clients to comprehend business requirements, articulate technical concepts, and address system administration inquiries.

• Produce runbooks, configuration records, test evidence, support procedures, and training materials.

• Implement practices such as least privilege, controlled change, secure credential handling, logging, validation, and escalation.

• Work together with Engineering, Product, Support, and Services teams to enhance defect resolution, documentation, deployment patterns, and product feedback.

⛳️ Requirements

• 3–5+ years of practical experience in systems administration, systems engineering, infrastructure engineering, IAM engineering, or a related field.

• Extensive administration and troubleshooting expertise with Windows Server and Active Directory.

• Knowledge of Linux/Unix administration.

• Solid understanding of DNS, TCP/IP, firewalls, ports, proxies, certificates, service accounts, permissions, scheduled services, and remote connectivity.

• Proficient in PowerShell for both administration and automation tasks.

• Competent SQL skills, including joins, filtering, data validation, and troubleshooting.

• Capability to advance into stored procedures, views, indexing, and performance analysis.

• Experience in supporting production applications or infrastructure and diagnosing multi-system issues from symptoms to root cause.

• Familiarity with directory services, group membership, role-based access, SSO, MFA, SAML, OAuth/OIDC, or Kerberos.

• Proven customer-facing experience with the ability to explain technical findings, manage expectations, and maintain professionalism under pressure.

• Security-focused approach to privileged access, credentials, change control, data handling, and operational reliability.

• Preferred familiarity with Microsoft Entra ID, hybrid identity, Group Policy, federation, enterprise SSO, Microsoft SQL Server, IAM/IGA/PAM platforms, cloud platforms, REST APIs, JSON, XML, Python, Bash, Git, infrastructure-as-code, enterprise software deployment, and relevant certifications.

• Candidates must be eligible to work in the United States of America; visa sponsorship may be needed to continue employment in the United States.

🏝️ Benefits

• Competitive salary and benefits package.

• Opportunities for professional development.

• A collaborative culture that values innovation, transparency, and teamwork.

• A dynamic environment working alongside talented colleagues, customers, and industry partners.