Identity & Access Management (IAM) Engineer

Gravity Hair Salon, LLC

Cincinnati, OH, United States

about 1 month ago

Apply on www.gravityitresources.com

Prepare application

Role details

Contract type

Temporary to permanent

Employment type

Full-time (> 32 hours)

Experience level

Expert

Experience required

3 years minimum

Compensation

$125,000.0 - $150,000.0

Working hours

Regular working hours

Job source

www.gravityitresources.com

Tech stack

Microsoft Windows Active Directory Cloud Computing Multi-Factor Authentication Identity and Access Management OAuth Windows PowerShell Role-Based Access Control Openid Connect Azure Active Directory Security Assertion Markup Language (SAML) Single Sign-On

+6 more

Systems Integration HR Software Deployment Automation SailPoint Restful APIs Workday

Job description

Seeking a senior-level Identity & Access Management (IAM) Engineer to support and mature the enterprise identity security program. This engineer will serve as a key technical resource responsible for identity governance, access lifecycle automation, SailPoint administration, Active Directory integration, and enterprise access controls., * Serve as a SailPoint SME and platform administrator.

Onboard enterprise applications into SailPoint.
Design and maintain IAM workflows and automation.
Support joiner/mover/leaver processes.
Manage access certification campaigns.
Validate and improve RBAC models.
Partner with HR and application owners to automate provisioning.
Support SOX, audit, and compliance activities.
Assist with PAM, MFA, and SSO initiatives.
Maintain documentation and operational procedures.
Act as a backup SME for critical identity infrastructure and services.

Requirements

Ability to work closely with Security, Infrastructure, HR Systems, and Application Engineering teams., * 5+ years of Identity & Access Management experience.
3+ years supporting a major IAM/IGA platform (preferably SailPoint IdentityNow/ISC or IdentityIQ).
Experience managing enterprise Active Directory and Microsoft Entra ID environments.
Experience implementing and supporting:
Automated provisioning/deprovisioning
Role-based access control (RBAC)
Access certifications / attestation campaigns
Single Sign-On (SSO)
Multi-Factor Authentication (MFA)
Privileged Access Management (PAM)
Experience onboarding applications into IAM platforms.
Strong troubleshooting and operational support experience.

Preferred Technical Skills

SailPoint IdentityNow / Identity Security Cloud (strong preference)
Microsoft Active Directory
Microsoft Entra ID (Azure AD)
PowerShell scripting
REST APIs and system integrations
LDAP, SAML, OAuth, OpenID Connect, SCIM
Microsoft 365 identity services
Workday-to-IAM integrations
Security group and entitlement management, * Strong communication and stakeholder management abilities.
Can operate independently with minimal oversight.
Comfortable engaging with security leadership, auditors, HR, and application owners.
Process improvement mindset.