IAM Engineer

Designs and builds identity provisioning workflows, access models, and integration logic between source and target identity systems for each acquisition, ensuring secure and auditable account lifecycle management.
Key Responsibilities
• Design the identity migration and provisioning approach for each acquired entity• Build and configure automated provisioning/deprovisioning workflows (e.g., SailPoint, Azure AD Connect, Entra ID)• Define role-based access control (RBAC) models and group structures for target systems• Lead technical execution of identity cutovers, including account matching/merging logic• Troubleshoot complex access and synchronization issues• Partner with security/compliance teams on access certification and audit requirements• Mentor and direct IAM Analysts during integration waves
Required Qualifications
• 4+ years experience in IAM engineering, with hands-on IAM platform configuration• Strong knowledge of Active Directory, Azure AD/Entra ID, and directory synchronization tools• Experience designing provisioning workflows for mergers, acquisitions, or large-scale onboarding• Scripting experience (PowerShell, Python) for automation
Preferred Qualifications
• Experience with SailPoint IdentityIQ/IdentityNow, Okta, or CyberArk• Relevant security certification (e.g., CompTIA Security+, SC-300)