> Markdown version of [/jobs/ext/1319315-lead-identity-access-management](https://www.wearedevelopers.com/jobs/ext/1319315-lead-identity-access-management). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Lead, Identity & Access Management - **Company:** Cardworks Servicing, LLC - **Location:** Woodbury, NY, United States (Remote available) - **Experience:** Expert - **Salary:** $154,564.0 - $171,738.0 - **Contract:** Permanent contract - **Skills:** Microsoft Access, Active Directory, Application Programming Interfaces (APIs), Software System Penetration Testing, Audit Trail, User Authentication, Client Server Models, Cloud Computing Security, Cyber Security, Information Systems, Relational Databases, Identity and Access Management, Python (Programming Language), Kerberos (Protocol), Lightweight Directory Access Protocols (LDAP), Microsoft Software, Windows Servers, OAuth, OpenID, Windows PowerShell, Role-Based Access Control, Azure Active Directory, Workday Integrations, Security Assertion Markup Language (SAML), Single Sign-On, Systems Integration, Web Applications, Data Logging, Scripting, Information Technology, Api Design, SailPoint, Data Inconsistencies - **Published:** July 17, 2026 - **Apply:** https://www.indeed.com/viewjob?jk=a8c72e59bde556b6 ## About the Role * 8+ years of experience in Identity & Access Management, Information Security, Cybersecurity Engineering * Hands-on experience architecting and engineering IAM solutions in large, complex environments. * Technical knowledge of IAM concepts including authentication, authorization, federation, directory services, identity lifecycle, access governance, and privileged access. * Strong experience with at least several of the following technologies/tools: * Delinea / Thycotic / Centrify * Azure AD / Entra ID * Active Directory, Group Policy, Kerberos, LDAP, Windows Server * SSO, SAML, OAuth, OIDC * Automation/Scripting: PowerShell, Python * Experience with the following preferred but not required: * SailPoint Identity Security Cloud (ISC) * Microsoft Identity Products (MIM PAM, PIM, etc.) * Experience working in regulated industries preferred (financial services, healthcare, etc.). * Bachelor's degree in Computer Science, Information Systems, or related field preferred. * Preferred certifications: CISSP, CISM, Microsoft Identity certifications, or vendor certifications (SailPoint, Delinea)., * Ability to support integrations into Delinea, SailPoint, and Azure AD/Entra ID with a strong skill set for API development and integration. * Ability to analyze, interpret, and correct data inconsistencies, errors, gaps, and inaccuracies for impact. * Strong understanding of IAM principles, including details for least privileged, joiner, mover, and leaver operations. * Strong understanding of workflows from systems of record through many different layers of IAM to application use. * Strong understanding of Azure AD, including lifecycle management for all account types. * Strong knowledge of AWS. * Knowledge of client-server applications, multi-tier web applications, relational databases, and cloud IAM and security tools. * Strong understanding of SSO, OAuth, OpenID, and SAML. * Experience with Workday integrations. Ideally, the qualified candidate will work at the following location(s): Woodbury, NY; Pittsburgh, PA. A hybrid work model or fully remote model can be considered based on hiring manager decision and priorities of the role. The salary range for this position, if located in NY Metro/NY State is $154,564 to $171,738. However, please note that the salary range will vary for other geographic areas. ## Description The Identity and Access Management (IAM) Lead Engineer will work in the Merrick Bank and CardWorks security team. They will responsible for day-to-day activities regarding identity and access creation, risk-based access control, attribute-based access control, role-based access control, privileged access management, access modifications, and access terminations. They will be the primary contact for support of tools within the information security team from an IAM perspective. The IAM Lead Engineer will design solutions, engineer integrations, set up processes, provide reporting, instruct other teams on said processes and integrations, and manage tools and data. They implement, operate, monitor, and improve information security processes and systems that protect the companies' data, customers, and computer systems from business disruption, data/identity compromise, cyber fraud, and regulatory criticism. Essential Functions: Privileged Access Management (PAM) Tool Ownership & Administration Expectation: Serves as the primary engineer responsible for the PAM platform's daily function, configuration, and reliability. * Administer access to the PAM platforms, including onboarding users, roles, and entitlements within the tools * Configure privileged access workflows, credential vaulting, rotation, session controls, and integrations * Monitor PAM system performance, availability, errors, and audit logs * Troubleshoot and remediate PAM-related issues affecting access, automation, or integrations * Partner with business and infrastructure teams to onboard new privileged use cases into PAM IAM Platform Support & Engineering Enablement Expectation: Serves as the primary engineer responsible for the PAM platform's daily function, configuration, and reliability. * Be the day to day technology owner of identity governance, lifecycle, and authentication platforms by leading: * Troubleshooting * Integration validation * Operational execution * Execute IAM tasks according to established processes and approvals * Lead application and service integrations with IAM tooling * Utilize scripting, APIs, and automation to improve IAM operational efficiency * Assist with configuration changes and platform enhancements under established governance Detective IAM Controls & Security Operations Support Expectation: Actively supports monitoring, investigation, and response activities related to IAM security signals. * Support detective IAM controls, including logging, alerting, and access review evidence collection * Configure and monitor IAM and PAM log activity for anomalous or unauthorized behavior * Lead identity-related investigations, incidents, and penetration testing efforts * Gather and analyze IAM and PAM data for audits, incident response, and forensic activities * Collaborate with security teams during access-related security events to assess impact and remediate issues Collaboration, Documentation & Continuous Improvement Expectation: Operates as a dependable engineering partner who improves IAM services through execution and feedback. * Collaborate with application, infrastructure, and security teams and drive projects to implement standardized IAM and PAM practices * Provide IAM and PAM design input as part of discussions based on operational experience * Document configurations, procedures, troubleshooting steps, and known issues * Create and disseminate operational metrics, observations, and improvement recommendations * Identify recurring issues and propose pragmatic improvements to tooling or processes ## Related Videos - [Keeping applications secure by evolving OAuth 2.0 and OpenID Connect](https://www.wearedevelopers.com/videos/100152-keeping-applications-secure-by-evolving-oauth-2-0-and-openid-connect) - [Develop enterprise-ready applications for Microsoft Teams with Azure resources on modern web technologies](https://www.wearedevelopers.com/videos/187-develop-enterprise-ready-applications-for-microsoft-teams-with-azure-resources-on-modern-web-technologies) - [Delegating the chores of authenticating users to Keycloak](https://www.wearedevelopers.com/videos/1558-delegating-the-chores-of-authenticating-users-to-keycloak) - [Get started with securing your cloud-native Java microservices applications](https://www.wearedevelopers.com/videos/123-get-started-with-securing-your-cloud-native-java-microservices-applications) - [Delay the AI Overlords: How OAuth and OpenFGA Can Keep Your AI Agents from Going Rogue](https://www.wearedevelopers.com/videos/1637-delay-the-ai-overlords-how-oauth-and-openfga-can-keep-your-ai-agents-from-going-rogue) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) ## Related Articles - [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs) - [Highest Paying Tech Companies for Developers](https://www.wearedevelopers.com/magazine/220-highest-paying-tech-companies-for-developers) - [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology) - [Data Analyst Salary in the UK](https://www.wearedevelopers.com/magazine/278-data-analyst-salary-in-the-uk) - [Why Attend a Developer Event in 2026?](https://www.wearedevelopers.com/magazine/688-why-attend-a-developer-event-in-2026) - [The Most Popular IT Jobs on the Market](https://www.wearedevelopers.com/magazine/376-the-most-popular-it-jobs-on-the-market)