Identity & Access Management (IAM) Engineer

Seeking an experienced Senior Identity & Access Management (IAM) Engineer to design, implement, and maintain an enterprise Identity and Access Management ecosystem. The consultant will lead SailPoint Identity Security Cloud (ISC) implementation, identity lifecycle automation, application onboarding, Single Sign-On (SSO), Multi-Factor Authentication (MFA), Role-Based Access Control (RBAC), and Privileged Access Management (PAM) initiatives., * Design, implement, and maintain enterprise IAM solutions using SailPoint Identity Security Cloud (ISC).

• Develop and manage Joiner, Mover, and Leaver (JML) lifecycle workflows.
• Implement centralized Identity Provider (IdP) architecture.
• Configure and manage Single Sign-On (SSO) and Multi-Factor Authentication (MFA).
• Implement federation protocols including SAML 2.0 and OpenID Connect (OIDC).
• Integrate enterprise applications using REST APIs.
• Design and implement Role-Based Access Control (RBAC) models.
• Develop and maintain access certification campaigns and segregation of duties (SoD) controls.
• Deploy and support Privileged Access Management (PAM) solutions.
• Configure secure credential vaulting, password rotation, and Just-In-Time (JIT) provisioning.
• Troubleshoot provisioning failures, synchronization issues, and connector problems.
• Perform system performance tuning and operational maintenance.
• Onboard new enterprise applications into the IAM platform.
• Develop automation scripts supporting IAM processes.
• Collaborate with security, infrastructure, and application teams.
• Produce technical documentation, architecture diagrams, and operational procedures.

The ideal candidate will have extensive experience with SailPoint ISC, identity governance, federation protocols, REST API integrations, lifecycle automation, and enterprise security architectures., * SailPoint Identity Security Cloud (ISC)

• Identity & Access Management (IAM)
• Identity Governance & Administration (IGA)
• Identity Lifecycle Management
• Joiner-Mover-Leaver (JML)
• Single Sign-On (SSO)
• Multi-Factor Authentication (MFA)
• SAML 2.0
• OpenID Connect (OIDC)
• REST API Integration
• Role-Based Access Control (RBAC)
• Identity Provider (IdP)
• Federation
• Privileged Access Management (PAM)
• Credential Vaulting
• Password Rotation
• Just-In-Time (JIT) Provisioning
• Access Certification
• Segregation of Duties (SoD)
• Scripting

Preferred Skills:

• OAuth 2.0
• SCIM
• LDAP
• Active Directory
• Microsoft Entra ID (Azure AD)
• Okta
• PowerShell
• Java
• Python
• Cloud Identity Security
• Zero Trust Security
• NIST Security Framework
• Enterprise Security Architecture

Required Qualifications:

• Minimum 1214 years of IT experience.
• Extensive experience implementing and supporting SailPoint Identity Security Cloud (ISC).
• Strong experience with IAM governance, engineering, lifecycle automation, and scripting.
• Experience onboarding enterprise applications into IAM platforms.
• Experience integrating applications using REST APIs.
• Experience designing and implementing RBAC models.
• Experience managing identity governance, access reviews, and certification campaigns.
• Experience configuring centralized Identity Providers, SSO, MFA, and federation protocols.
• Experience troubleshooting IAM provisioning and authentication issues.
• Strong analytical, troubleshooting, and communication skills.

Preferred Qualifications:

• Experience with Privileged Access Management (PAM) platforms.
• Experience implementing Zero Trust security models.
• Experience with enterprise cloud identity platforms.
• Experience supporting large-scale enterprise IAM environments.
• Relevant SailPoint, IAM, or cloud security certifications.

Deliverables:

• SailPoint ISC Implementation
• IAM Architecture Documentation
• Identity Lifecycle Workflows
• Application Integrations
• RBAC Models
• SSO & MFA Configuration
• Federation Configuration
• REST API Integrations
• Access Certification Campaigns
• PAM Configuration
• Technical Documentation
• Operational Runbooks
• Knowledge Transfer Documentation

Education:

• Bachelor's Degree in Computer Science, Information Systems, Cybersecurity, or related field (or equivalent work experience).