Identity and Access Management (IAM) Engineer

Job Description

We are seeking a highly motivated Identity & Access Management (IAM) Engineer to join our cybersecurity team. The IAM Engineer will be responsible for designing, implementing, managing, and optimizing identity and access management solutions across enterprise environments. This role plays a critical part in protecting organizational systems, applications, and sensitive data by ensuring that the right individuals have appropriate access to resources while maintaining security, compliance, and operational efficiency.

The ideal candidate will have experience with identity governance, authentication technologies, privileged access management, single sign-on (SSO), multi-factor authentication (MFA), and cloud identity platforms.

Key Responsibilities

Identity & Access Management

• Design, implement, and maintain enterprise IAM solutions.
• Manage user lifecycle processes including provisioning, deprovisioning, and access modifications.
• Configure and maintain role-based access control (RBAC) and least-privilege access models.
• Ensure secure user authentication and authorization processes.

Authentication & Access Control

• Implement and support Single Sign-On (SSO) solutions.
• Deploy and manage Multi-Factor Authentication (MFA) technologies.
• Integrate applications with identity providers using SAML, OAuth, OpenID Connect, and LDAP.
• Troubleshoot authentication and access-related issues.

Privileged Access Management (PAM)

• Manage privileged accounts and administrative access.
• Implement PAM solutions to secure critical systems and infrastructure.
• Monitor privileged account activities and enforce security policies.
• Conduct periodic privileged access reviews.

Cloud Identity Security

• Manage identity services in AWS, Azure, and Google Cloud environments.
• Configure cloud access controls and identity governance policies.
• Secure cloud workloads through identity-based security controls.
• Support Zero Trust security initiatives.

Governance, Risk & Compliance

• Conduct access certification and user access reviews.
• Support compliance initiatives including SOX, HIPAA, PCI DSS, ISO 27001, and NIST.
• Maintain IAM documentation, policies, and procedures.
• Participate in security audits and risk assessments.

Monitoring & Incident Response

• Monitor IAM systems for suspicious activities.
• Investigate identity-related security incidents.
• Support incident response and remediation efforts.
• Generate IAM reports and security metrics.

Required Qualifications

• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or related field.
• 3+ years of experience in Identity & Access Management, Cybersecurity, or Information Security.
• Experience with IAM platforms such as Okta, Microsoft Entra ID (Azure AD), Ping Identity, SailPoint, CyberArk, or ForgeRock.
• Strong understanding of authentication protocols including SAML, OAuth 2.0, OpenID Connect, LDAP, and Kerberos.
• Experience with Active Directory and cloud identity management.
• Knowledge of security best practices and access control frameworks.

Preferred Qualifications

• Experience with Privileged Access Management (PAM) solutions.
• Knowledge of Zero Trust Architecture.
• Familiarity with cloud security and identity governance.
• Experience with automation and scripting using PowerShell, Python, or Bash.
• Experience in large enterprise environments.

Preferred Certifications

• Certified Information Systems Security Professional (CISSP)
• Certified Identity and Access Manager (CIAM)
• Microsoft Certified: Identity and Access Administrator Associate
• Certified Information Security Manager (CISM)
• CompTIA Security+
• Certified Cloud Security Professional (CCSP)

Technical Skills

IAM Platforms

• Okta
• Microsoft Entra ID (Azure AD)
• SailPoint
• CyberArk
• Ping Identity
• ForgeRock

Authentication Technologies

• SAML
• OAuth 2.0
• OpenID Connect
• LDAP
• Kerberos
• Single Sign-On (SSO)
• Multi-Factor Authentication (MFA)

Cloud Platforms

• AWS IAM
• Microsoft Azure
• Google Cloud Platform (GCP)

Programming & Automation

• PowerShell
• Python
• Bash
• REST APIs

Benefits

• Competitive Salary
• Medical, Dental, and Vision Insurance
• Paid Time Off (PTO)
• Flexible Remote/Hybrid Work Options
• Professional Development & Certification Reimbursement
• Performance Bonuses
• Employee Wellness Programs