> Markdown version of [/jobs/ext/2580830-senior-iam-specialist](https://www.wearedevelopers.com/jobs/ext/2580830-senior-iam-specialist). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Senior IAM Specialist - **Company:** Zip Staff Inc. - **Location:** United States (Remote available) - **Experience:** Expert - **Salary:** $112,320.0 - $116,480.0 - **Contract:** Permanent contract - **Skills:** Active Directory, User Authentication, Authentication Protocols, CompTIA Security+, Cyber Security, Identity and Access Management, Python (Programming Language), Kerberos (Protocol), Lightweight Directory Access Protocols (LDAP), OAuth, OpenID, Windows PowerShell, Role-Based Access Control, Azure Active Directory, Zero Trust Network Access, Security Assertion Markup Language (SAML), Scripting, Google Cloud, Cyberark, Software Troubleshooting, Hashicorp, Terraform - **Published:** August 5, 2026 - **Apply:** https://www.indeed.com/viewjob?jk=69eaf74c00e8a63c ## About the Role * 5+ years of progressive experience in Identity and Access Management, Directory Services, or Information Security * Strong hands-on expertise with Microsoft Active Directory and Microsoft Entra ID in enterprise environments * Proven experience supporting hybrid identity architectures, federation, and modern authentication * Hands-on experience with GCP IAM (or equivalent cloud identity platforms) * Experience implementing and supporting Privileged Access Management (PAM) controls and processes * Deep understanding of identity lifecycle management, RBAC, access governance, and least-privilege principles * Working knowledge of authentication protocols (SAML, OAuth, OIDC, LDAP, Kerberos) * Experience supporting compliance and audit requirements in regulated environments * Strong troubleshooting, documentation, and stakeholder communication skills * Ability to contribute at a senior level with minimal ramp-up time * Must be legally authorized to work in the United States without sponsorship now or in the future, * Hands-on experience with CyberArk, HashiCorp Vault, Delinea, BeyondTrust, or similar PAM platforms * Experience with Identity Governance and Administration (IGA) tools * Automation/scripting skills (PowerShell, Python, Terraform, or Infrastructure-as-Code) * Relevant certifications (SC-300, AZ-500, CISSP, CISM, Security+, or GCP Security Engineer) * Prior experience in healthcare or other highly regulated industries, * Are you legally authorized to work in the United States? * Will you now or in the future require employer sponsorship for employment authorization? * Do you have experience supporting hybrid identity environments, federation services, and modern authentication protocols (SAML, OAuth, OIDC, etc.)? * Do you have hands-on experience with Privileged Access Management (PAM) solutions or privileged access controls? * Do you have experience with Google Cloud Platform (GCP) IAM or other cloud identity platforms? * Do you have at least 5 years of hands-on Identity and Access Management experience, including administration of Microsoft Active Directory and Microsoft Entra ID? ## Description ZipStaff is seeking a Senior Identity and Access Management (IAM) Specialist to support enterprise identity platforms at a large, leading healthcare and pharmacy services organization. This is a senior, hands-on role focused on designing, implementing, and operating hybrid identity, privileged access, and cloud IAM solutions in a highly regulated environment. You will serve as a technical subject matter expert, partnering with Security, Infrastructure, Compliance, and Application teams to strengthen access controls, support audit readiness, and reduce identity-related risk. What You'll Do * Design, implement, and support IAM solutions across hybrid identity environments and GCP landing zones * Administer and optimize Microsoft Entra ID and Active Directory, including federation, synchronization, authentication, GPOs, and delegated administration * Configure and manage Privileged Access Management (PAM) for administrative and elevated access * Define and enforce IAM standards, RBAC models, group strategies, and least-privilege / Zero Trust principles * Lead identity lifecycle processes (joiner/mover/leaver), access reviews, and entitlement remediation * Troubleshoot complex authentication, authorization, provisioning, and federation issues across platforms * Support compliance and audit activities (HIPAA, SOX) by providing evidence, documentation, and remediation support * Provide advanced operational support, including on-call response for critical identity services * Develop and maintain technical documentation, runbooks, and operational procedures * Mentor junior IAM engineers and contribute to standards, automation, and continuous improvement initiatives ## Related Videos - [Keeping applications secure by evolving OAuth 2.0 and OpenID Connect](https://www.wearedevelopers.com/videos/100152-keeping-applications-secure-by-evolving-oauth-2-0-and-openid-connect) - [Checkmate: 5 Real Incidents That Can End a Software Company](https://www.wearedevelopers.com/videos/100126-checkmate-5-real-incidents-that-can-end-a-software-company) - [Delegating the chores of authenticating users to Keycloak](https://www.wearedevelopers.com/videos/1558-delegating-the-chores-of-authenticating-users-to-keycloak) - [Going Beyond Passwords: The Future of User Authentication](https://www.wearedevelopers.com/videos/714-going-beyond-passwords-the-future-of-user-authentication) - [Get started with securing your cloud-native Java microservices applications](https://www.wearedevelopers.com/videos/123-get-started-with-securing-your-cloud-native-java-microservices-applications) - [Delay the AI Overlords: How OAuth and OpenFGA Can Keep Your AI Agents from Going Rogue](https://www.wearedevelopers.com/videos/1637-delay-the-ai-overlords-how-oauth-and-openfga-can-keep-your-ai-agents-from-going-rogue) ## Related Articles - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Why Upskilling And Reskilling is Important For Developers](https://www.wearedevelopers.com/magazine/428-why-upskilling-and-reskilling-is-important-for-developers) - [The Best Job Search Websites of 2025](https://www.wearedevelopers.com/magazine/368-the-best-job-search-websites-of-2025) - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)