> Markdown version of [/jobs/ext/1428738-senior-identity-and-access-engineer](https://www.wearedevelopers.com/jobs/ext/1428738-senior-identity-and-access-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Senior Identity and Access Engineer - **Company:** Morgan, Lewis & Bockius LLP - **Location:** Philadelphia, PA, United States (Remote available) - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** Active Directory, Microsoft Azure, Cloud Computing, Identity and Access Management, JSON, Lightweight Directory Access Protocols (LDAP), OAuth, Object-Oriented Software Development, Windows PowerShell, Role-Based Access Control, Openid Connect, Zero Trust Network Access, Security Assertion Markup Language (SAML), Software Systems, SQL Databases, Systems Integration, Enterprise Software Applications, Cyberark, Multi-Cloud, HybridCloud, SailPoint - **Published:** July 24, 2026 - **Apply:** https://diversityjobs.com/main/sendform/8/8/28176/1/17694772?backUrl=%2Fcareer%2F17694772%2FSenior-Identity-Access-Engineer-Pennsylvania-Philadelphia ## About the Role * A bachelor's degree from a four-year college or university. * 5 years of hands-on experience in Identity and Access Management / Identity Governance engineering roles. * 5 years of experience with Cloud technologies (Azure, AWS, GCE) in a hybrid/multi-cloud identity environment. * Solid understanding of identity federation protocols (SAML, OAuth, OpenID Connect) and access governance concepts. * Problem-solving and analytical skills; ability to handle complex, time-sensitive incidents. * Excellent communication skills and ability to collaborate across technical and non-technical stakeholders., * Expertise in MS Active Directory (design, administration, Group Policy, replication, trusts, privileged access). * Proficiency with MS Entra ID (conditional access, PIM, hybrid identity, SSO/MFA, entitlement management, access reviews). * Advanced PowerShell scripting skills for automation, reporting, integrating, and administration of AD/Entra ID/SailPoint environments. * Experience implementing and supporting SailPoint (Identity Now, IdentityIQ, or Identity Security Cloud), including custom workflows, rules, transforms, connectors, certifications, and integrations. * SailPoint Certified IdentityIQ Engineer / IdentityNow Administrator is preferred. * Familiarity with security frameworks (NIST, Zero Trust, ISO 27001); compliance requirements (SOX, GDPR, HIPAA, etc.); PAM tools (e.g., CyberArk, Delinea) are a plus. * Core back-end technologies (Microsoft Windows 2019 Server and above, Varonis, LDAP, Cloud Identity solutions, and related IAM software solutions), ISO 27001 principles. ## Description * Respond to strategies provided by the Architecture and Engineering team and its management for implementation and oversight and will be called upon to resolve the highest-level technical issues. In addition, this person will partner with applicable teams to ensure secure, scalable, and compliant identity services. * Develop innovative IAM strategies and take ownership of these through all phases. * Deliver enterprise-wide IAM, identity governance, and authentication solutions in a hybrid cloud capacity. * Design and implement lifecycle management automation for joiner, mover and leaver scenarios. * Implement role-based access control (RBAC) and apply the concept of least-privilege. * Provide programmatic solutions to include PowerShell, JSON, SQL, LDAP, and object-oriented languages for IAM systems. * Collaborate with other IAM team members on system design, architecture, and strategies to provide high levels of customer satisfaction. * Integrate enterprise applications for SSO and set up provisioning/offboarding. * Lead key meetings including technical, cross-functional, and stakeholder meetings. * Ensure Enterprise services and servers remain operational and monitor Active Directory, EntraID, and IAM services. * Provide after-hours support as needed to address incidents, system maintenance. * Create and maintain architecture and documentation for IAM systems. * Represents the team during the audit and ISO 27001 certification process. * Participate in on-call support rotation. ## Related Videos - [Keeping applications secure by evolving OAuth 2.0 and OpenID Connect](https://www.wearedevelopers.com/videos/100152-keeping-applications-secure-by-evolving-oauth-2-0-and-openid-connect) - [Tips and Tricks for Working with JSON](https://www.wearedevelopers.com/videos/1229-tips-and-tricks-for-working-with-json) - [Develop enterprise-ready applications for Microsoft Teams with Azure resources on modern web technologies](https://www.wearedevelopers.com/videos/187-develop-enterprise-ready-applications-for-microsoft-teams-with-azure-resources-on-modern-web-technologies) - [Introducing JSON Structure](https://www.wearedevelopers.com/videos/100219-introducing-json-structure) - [Delegating the chores of authenticating users to Keycloak](https://www.wearedevelopers.com/videos/1558-delegating-the-chores-of-authenticating-users-to-keycloak) - [Delay the AI Overlords: How OAuth and OpenFGA Can Keep Your AI Agents from Going Rogue](https://www.wearedevelopers.com/videos/1637-delay-the-ai-overlords-how-oauth-and-openfga-can-keep-your-ai-agents-from-going-rogue) ## Related Articles - [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs) - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [Everything a Developer Needs to Know About MCP with Neo4j](https://www.wearedevelopers.com/magazine/604-everything-a-developer-needs-to-know-about-mcp-with-neo4j) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Best Companies to work for in London: Top 25 Companies in 2023](https://www.wearedevelopers.com/magazine/187-best-companies-to-work-for-in-london-top-25-companies-in-2023) - [The Best X (Twitter) Accounts for Developers](https://www.wearedevelopers.com/magazine/294-the-best-x-twitter-accounts-for-developers)