IAM Engineer

Hands-on Senior Identity and Access Management Engineer to join a growing cybersecurity team supporting a large enterprise environment. This individual will serve as the dedicated owner of the organization s Identity Governance and Administration program and play a key role in strengthening access governance, identity lifecycle management, and application security. This is a highly visible position that will partner with IT, cybersecurity, compliance, application owners, and business leadership. The ideal candidate is technically strong, comfortable working in a fast-paced environment, and able to clearly communicate identity initiatives, risks, and recommendations to senior leaders. Key Responsibilities:

•     Serve as the primary owner of the company s Identity Governance and Administration platform and processes.Administer and support enterprise IGA and IAM technologies, including CyberArk, Saviynt, ObserveIT, and OKTA.
•     Manage user provisioning, de-provisioning, and access changes throughout the employee lifecycle.Design, implement, and improve Joiner, Mover, and Leaver workflows.
•     Develop and maintain Role-Based Access Control models and access governance standards.Support OKTA Lifecycle Management and integrations with enterprise applications.
•     Participate in periodic access reviews, access certifications, and entitlement remediation.Support Segregation of Duties controls and identify potentially conflicting access.
•     Integrate IAM and IGA platforms with enterprise applications using REST APIs, SCIM, SAML, and related protocols.Use Postman and similar tools for API testing, troubleshooting, and validation.
•     Develop scripts and automation using PowerShell, Python, or equivalent technologies.Identify opportunities to replace manual access management processes with scalable automated solutions.
•     Support access control audits, risk remediation, compliance reviews, and governance initiatives.Work with application owners, security teams, infrastructure teams, and business stakeholders to implement secure access solutions.
•     Develop and maintain technical documentation, procedures, standards, and operational runbooks.Troubleshoot complex IAM, application-integration, provisioning, and authentication issues.
•     Communicate project progress, technical challenges, risks, and recommendations to senior leadership.Mentor junior team members and provide technical guidance when needed.
•     Contribute to the continuous improvement of the company s cybersecurity and identity governance programs. Required Qualifications:Bachelor s degree or equivalent professional experience.
•     At least six years of direct Identity and Access Management, cybersecurity, or information security experience.At least two years of hands-on experience administering an enterprise IGA platform.
•     Hands-on experience with one or more of the following:CyberArk
•     SaviyntObserveIT
•     Hands-on experience administering OKTA, including OKTA Lifecycle Management.Strong understanding of identity governance, access controls, and identity lifecycle management.
•     Experience creating or improving Joiner, Mover, and Leaver workflows.Experience designing, implementing, or supporting Role-Based Access Control.
•     Experience with access certifications, access reviews, and entitlement governance.At least two years of scripting and automation experience using PowerShell, Python, or an equivalent language.
•     Experience integrating identity platforms and enterprise applications using REST APIs.Knowledge of SCIM, SAML, API-based provisioning, and identity federation concepts.
•     Experience using Postman or similar tools for API testing and validation.Strong troubleshooting, analytical, documentation, and problem-solving skills.
•     Excellent communication skills, including the ability to explain technical work to business stakeholders and senior leadership.Ability to operate effectively in a fast-paced environment, manage changing priorities, and adjust course when needed.
•     Strong team-oriented mindset and willingness to collaborate across technical and business groups. Preferred Qualifications:Experience supporting large-scale enterprise identity programs.
•     Experience working in healthcare or another highly regulated industry.Knowledge of identity governance and security frameworks, including:
•     NIST 800-63ISO 27001HITRUST Clearance not required but preferred.#CJ