IAM Engineer

Pentangle Tech
Palo Alto, United States of America
4 days ago

Role details

Contract type
Permanent contract
Employment type
Full-time (> 32 hours)
Working hours
Regular working hours
Languages
English

Job location

Palo Alto, United States of America

Tech stack

Amazon Web Services (AWS)
Azure
Cloud Computing
Configuration Management
Continuous Integration
Human Resources Information System (HRIS)
Identity and Access Management
Python
Lightweight Directory Access Protocols (LDAP)
OAuth
OpenID
Ping (Networking Utility)
Role-Based Access Control
Zero Trust Network Access
Security Assertion Markup Language (SAML)
Scripting (Bash/Python/Go/Ruby)
Okta
Power Platform Integration
Kubernetes
Infrastructure Automation Frameworks
SailPoint
Terraform
Workday

Job description

Key Responsibilities & Deliverables

  • Your primary focus will be the build, deployment, and configuration of the core IAM platform.
  • Platform Implementation: Complete baseline environment configuration for Ping Directory and Conductor One across Dev and Prod tiers using Terraform for configuration management.
  • Workforce Automation: Integrate HRIS (Workday) with the IGA platform to automate Joiner-Mover-Leaver (JML) processes.
  • Technical Connectivity: Build and validate production-ready connectors for the core ecosystem, such as: Okta, AWS, Google, Slack, and custom connectors.
  • Define Access Reviews, provisioning flows, approval workflow etc.
  • Operational Readiness: Define and execute technical test plans, draft formal procedural documentation for audits, and create system runbooks for the operations team.

Requirements

  • Identity Expertise: Expert-level knowledge of at least one major Cloud Identity Provider (AWS IAM, Azure) and core protocols including SAML, OAuth 2.0, OIDC, SCIM, and LDAP.
  • Modern Principles: Deep understanding of Zero Trust principles and access models such as RBAC, ABAC, and PBAC.
  • Ability to develop code in either Python or Go.

Technical Skills (Must-Have)

  • IGA/PAM: Experience with Conductor One, SailPoint, Saviynt or similar platforms.
  • Directory Services: Hands-on experience with Ping Directory or similar LDAP solutions.
  • Cloud Infrastructure: Understanding of AWS cloud infrastructure and security concepts. Comfortable with Kubernetes and Infrastructure-as-Code (IaC) such as Terraform and Helm and CI/CD platforms such as ArgoCD.
  • Experience with scripting and development of tooling in Python or Go.

Apply for this position