> Markdown version of [/jobs/ext/2454600-identity-access-management-iam-engineer](https://www.wearedevelopers.com/jobs/ext/2454600-identity-access-management-iam-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Identity & Access Management (IAM) Engineer - **Company:** Gravity Hair Salon, LLC - **Location:** Cincinnati, OH, United States - **Experience:** Expert - **Salary:** $125,000.0 - $150,000.0 - **Contract:** Temporary to permanent - **Skills:** Microsoft Windows, Active Directory, Cloud Computing, Multi-Factor Authentication, Identity and Access Management, OAuth, Windows PowerShell, Role-Based Access Control, Openid Connect, Azure Active Directory, Security Assertion Markup Language (SAML), Single Sign-On, Systems Integration, HR Software, Deployment Automation, SailPoint, Restful APIs, Workday - **Published:** August 5, 2026 - **Apply:** https://www.gravityitresources.com/job/9624 ## About the Role * Ability to work closely with Security, Infrastructure, HR Systems, and Application Engineering teams., * 5+ years of Identity & Access Management experience. * 3+ years supporting a major IAM/IGA platform (preferably SailPoint IdentityNow/ISC or IdentityIQ). * Experience managing enterprise Active Directory and Microsoft Entra ID environments. * Experience implementing and supporting: + Automated provisioning/deprovisioning + Role-based access control (RBAC) + Access certifications / attestation campaigns + Single Sign-On (SSO) + Multi-Factor Authentication (MFA) + Privileged Access Management (PAM) * Experience onboarding applications into IAM platforms. * Strong troubleshooting and operational support experience. Preferred Technical Skills * SailPoint IdentityNow / Identity Security Cloud (strong preference) * Microsoft Active Directory * Microsoft Entra ID (Azure AD) * PowerShell scripting * REST APIs and system integrations * LDAP, SAML, OAuth, OpenID Connect, SCIM * Microsoft 365 identity services * Workday-to-IAM integrations * Security group and entitlement management, * Strong communication and stakeholder management abilities. * Can operate independently with minimal oversight. * Comfortable engaging with security leadership, auditors, HR, and application owners. * Process improvement mindset. ## Description Seeking a senior-level Identity & Access Management (IAM) Engineer to support and mature the enterprise identity security program. This engineer will serve as a key technical resource responsible for identity governance, access lifecycle automation, SailPoint administration, Active Directory integration, and enterprise access controls., * Serve as a SailPoint SME and platform administrator. * Onboard enterprise applications into SailPoint. * Design and maintain IAM workflows and automation. * Support joiner/mover/leaver processes. * Manage access certification campaigns. * Validate and improve RBAC models. * Partner with HR and application owners to automate provisioning. * Support SOX, audit, and compliance activities. * Assist with PAM, MFA, and SSO initiatives. * Maintain documentation and operational procedures. * Act as a backup SME for critical identity infrastructure and services. ## Related Videos - [Keeping applications secure by evolving OAuth 2.0 and OpenID Connect](https://www.wearedevelopers.com/videos/100152-keeping-applications-secure-by-evolving-oauth-2-0-and-openid-connect) - [Our GitOps approach for deploying an Identity Provider and an API Gateway in a SaaS company](https://www.wearedevelopers.com/videos/776-our-gitops-approach-for-deploying-an-identity-provider-and-an-api-gateway-in-a-saas-company) - [Destigmatizing the Workplace: Building Real Inclusion](https://www.wearedevelopers.com/videos/1492-destigmatizing-the-workplace-building-real-inclusion) - [What if your HR software adapted to you, not the other way around?](https://www.wearedevelopers.com/videos/100259-what-if-your-hr-software-adapted-to-you-not-the-other-way-around) - [WeAreDevelopers LIVE - How DevRel Makes Tech More Human](https://www.wearedevelopers.com/videos/2149-wearedevelopers-live-how-devrel-makes-tech-more-human) - [Delay the AI Overlords: How OAuth and OpenFGA Can Keep Your AI Agents from Going Rogue](https://www.wearedevelopers.com/videos/1637-delay-the-ai-overlords-how-oauth-and-openfga-can-keep-your-ai-agents-from-going-rogue) ## Related Articles - [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again) - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [The Best X (Twitter) Accounts for Developers](https://www.wearedevelopers.com/magazine/294-the-best-x-twitter-accounts-for-developers) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Dev Digest 120 - Apple and peers](https://www.wearedevelopers.com/magazine/455-dev-digest-120-apple-and-peers) - [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs)