IAM Engineer

Position Details

• Work Arrangement: 100% Remote
• Business Hours: 8:00 AM to 5:00 PM (local time)
• Extension and/or Conversion Opportunity: To be determined

• Top Skills Required:
  • Identity and Access Management (IAM)
  • AI Management
• Minimum Education Requirement: High School Diploma required; Bachelor's degree preferred but not required
• Minimum Experience Requirement: 3+ years of relevant experience

• Deal Breakers: Candidates whose experience is heavily focused on operations rather than engineering will not be considered a strong fit for this role.
• Interview Process: One interview round conducted via Zoom or Microsoft Teams.

Summary:
The IAM Engineer is responsible for executing daily identity and access management operations across the identity management platforms. This role supports user onboarding/offboarding, Single Sign On (SSO) integrations, access requests, entitlement administration, and basic privileged access functions.

The IAM Engineer ensures that identity controls are applied consistently and securely, enabling reliable access for users while reducing risk to the organization. This position will report to the Head of IAM and Network Security Eng & Ops.

Education Requirements:

• Bachelor's degree preferred.

• High school diploma (or equivalent) in combination with significant experience will be considered in lieu of degree.

• Minimum of high school diploma or equivalent is required.

Responsibilities:

• Onboard applications to identity platforms using REST APIs and JSON field mapping.

• Onboard applications for SSO using standard SAML/OIDC templates.

• Ensure adherence to least privilege and separation of duties (SoD) requirements.

• Collect and maintain evidence for audits and identity reviews.

• Follow established change management, documentation, and incident management processes.

• Use PowerShell or basic REST API calls for simple identity queries or repeatable tasks.

• Maintain runbooks, knowledge base articles, and user facing guides.

• Participate in identity related incident handling and troubleshooting.

• Automate Joiner/Mover/Leaver (JML) processes, including provisioning, de-provisioning, access requests, and access reviews.

• Ensure group based and role-based access is assigned accurately and timely.

• Troubleshoot identity issues such as failed provisioning tasks, directory sync, and entitlement assignments.

• Process access requests and approvals; maintain entitlement catalogs and birthright access definitions.

• Assist in quarterly and ad hoc access certification campaigns.

• All other duties as assigned.

Basic Requirements:

• 1–3 years of experience in IT, security operations, or identity administration.

• Strong understanding of identity security concepts, including authentication, authorization, federation, credential management, and account lifecycle management.

• Familiarity with SAML, OIDC, and basic authentication/authorization principles.

• Understanding of IAM concepts such as MFA, RBAC, provisioning, and JML workflows.

• Basic scripting experience (PowerShell, Python, JavaScript or similar).

• Strong analytical and troubleshooting skills; attention to detail.

• Ability to follow documented procedures and maintain accurate records.

Preferred Requirements:

• Experience with an IAM platform (provisioning, access requests, access reviews, connectors).

• Experience with onboarding applications for SSO.

• Exposure to PAM (Privileged Access Management) tools and workflows.

• Understanding of security frameworks and controls (least privilege, SoD, zero trust).

• Ability to read logs and debug authentication or provisioning errors.

• CompTIA Security +, Microsoft SC-900, Microsoft SC-300, (ISC)² CC or SSCP.