Senior IAM Engineer

Experteer Overview In this Senior IAM Engineer role, you design, implement, and maintain enterprise IAM solutions to secure and streamline access to corporate systems. You will partner with IT, Security, and Applications teams to enforce secure access patterns and automate identity lifecycles. You’ll lead cross-functional initiatives, influence architecture without direct reports, and push for continuous IAM improvements. This position offers growth, exposure to cutting-edge technologies, and a hybrid work setup in Cincinnati with relocation options. Compensation / Benefits * Design and implement access governance processes, RBAC roles, workflows, and certifications for IAM and PAM. * Oversee user provisioning, modification, and de-provisioning based on joiner/mover/leaver status and automate related workflows. * Implement and maintain authentication/authorization mechanisms (SSO, MFA, password policies) and integrate with applications. * Configure connectors and develop custom connectors for the IAM system; set up SAML for third-party integrations. * Support PAM operations, including vault management, session monitoring, and policy enforcement. * Collaborate with Security Operations, Application Security, and IT to meet security and business requirements; provide guidance on secure access patterns. * Document processes and generate reports for access recertification, regulatory requests, and stakeholder needs. * Identify and implement automation to reduce manual steps and operational risk. * Provide training and support on IAM tools; mentor other IAM engineers and analysts. * Assist in risk management by controlling privileged access and defining access boundaries. Tasks * 5 years with an IGA solution (SailPoint, Saviynt, Okta) * 5 years administering Active Directory and/or Entra ID * 2 years object-oriented programming (Java, C#, Python) or scripting (PowerShell) * 2 years with Privileged Access Management suite (e.g., Entra PIM, CyberArk, PAM 360) * 2 years developing API integrations (SOAP/REST) * 2 years of customer-facing IT service experience (preferred) * Strong understanding of IAM principles, authentication, authorization, provisioning, and workflows * Excellent written, verbal, and presentation skills Key requirements * Competitive base salary and bonuses * Hybrid work environment (remote option) * Relocation assistance * Health, dental and vision coverage * 401(k) with company match * Tuition reimbursement and employee discounts

for for the IAM system; set up SAML for third-party integrations. * Support PAM operations, including vault management, session monitoring, and policy enforcement. * Collaborate with Security Operations, Application Security, and IT to meet security and business requirements; provide guidance on secure access patterns. * Document processes and generate reports for access recertification, regulatory requests, and stakeholder needs. * Identify and implement automation to reduce manual steps and operational risk. * Provide training and support on IAM tools; mentor other IAM engineers and analysts. * Assist in risk management by controlling privileged access and defining access boundaries. Tasks * 5 years with an IGA solution (SailPoint, Saviynt, Okta) * 5 years administering Active Directory and/or Entra ID * 2 years object-oriented programming (Java, C#, Python) or scripting (PowerShell) * 2 years with Privileged Access Management suite (e.g., Entra PIM, CyberArk, PAM 360) * 2 years aa Document API integrations (SOAP/REST) * 2 years of customer-facing IT service experience (preferred) * Strong understanding of IAM principles, authentication, authorization, provisioning, and workflows * Excellent written, verbal, and presentation skills Key requirements * Competitive base salary and bonuses * Hybrid work environment (remote option) * Relocation assistance * Health, dental and vision coverage * 401(k) with company match * Tuition reimbursement and employee discounts