Workforce IAM Engineer

This is a fully remote position, open to applicants in United States.

📋 Description

• Oversee IAM technical initiatives associated with Mergers, Acquisitions, and Divestitures.

• Integrate various identity providers into a cohesive enterprise SSO platform.

• Design and implement strategies for cross-domain authentication and federation.

• Create, deploy, and manage SSO, Identity Lifecycle Management, IGA, and PAM solutions.

• Develop automated workflows and API-driven integrations to streamline onboarding, transitions, and offboarding processes.

• Apply infrastructure-as-code methodologies for managing IAM platform configurations.

• Craft and enforce SSO security policies, encompassing phishing-resistant MFA, least privilege, conditional access, and RBAC.

• Perform access reviews and assist in IT compliance audits.

• Ensure adherence to GDPR, HIPAA, and SOX regulations.

• Diagnose and resolve intricate identity and access challenges.

• Provide Tier 3 engineering support for internal teams and end-users.

• Manage and enhance hybrid Active Directory and Microsoft Entra ID environments.

• Collaborate with Information Security, IT Operations, HR, and Application Development teams.

• Create and maintain technical documentation, architecture diagrams, runbooks, and configurations.

• Engage in complex, large-scale projects and may mentor junior colleagues.

⛳️ Requirements

• Bachelor’s degree in Computer Science, Information Technology, Information Security, or a related discipline, or equivalent hands-on experience.

• Over 5 years of progressive experience as an IAM Engineer.

• Preferably significant experience with M&A integration projects.

• Strong expertise in Active Directory (AD), Microsoft Entra ID, LDAP, and Group Policy management.

• In-depth knowledge of SAML, OAuth, OIDC, and SCIM.

• Practical experience with enterprise IdPs and governance solutions such as Okta, Ping Identity, Microsoft Entra ID, CyberArk, SailPoint, or ForgeRock.

• Proficient in PowerShell, Python, or Bash scripting.

• Understanding of Zero Trust architecture, Least Privilege, RBAC, and modern DevOps practices/SDLC.

• Familiarity with AI/ML concepts and their relevance to risk-based authentication, user behavior analytics, and contemporary IAM scenarios.

• Capacity to troubleshoot complex access integration issues.

• Ability to communicate intricate security concepts to both technical and non-technical audiences.

🏝️ Benefits

• Comprehensive medical, dental, and vision coverage.

• Paid time off plan.

• Health savings account (HSA).

• 401k savings plan.

• Early access to wages before payday with myFlexPay.

• Flexible spending accounts (FSAs).

• Short- and long-term disability coverage.

• Work-Life resources.

• Paid parental leave.

• Healthy lifestyle programs.