Lead IAM Engineer

Robert Half
Amherst, MA, United States
5 days ago
Apply on dejobs.org
Prepare application

Role details

Contract type
Permanent contract
Employment type
Full-time (> 32 hours)
Experience level
Expert
Experience required
7 years minimum
Working hours
Regular working hours
Job source

Tech stack

Active Directory Application Services Cyber Security Multi-Factor Authentication Identity and Access Management Kerberos (Protocol) Lightweight Directory Access Protocols (LDAP) OAuth Oracle (Applications) PCI Data Security Standards Openid Connect Azure Active Directory
+4 more
Zero Trust Network Access Security Assertion Markup Language (SAML) Single Sign-On Cloud Platform System

Job description

Description We are looking for an experienced Lead IAM Engineer to guide identity and access management strategy and execution for a complex education environment in Massachusetts. This contract opportunity with potential for a permanent role combines architecture leadership with hands-on engineering across authentication, authorization, provisioning, and governance services. The role partners closely with security, infrastructure, application, and business stakeholders to strengthen access controls, improve user lifecycle management, and support compliance objectives. The ideal candidate brings deep expertise in enterprise IAM platforms, directory services, federation, and modern access security practices., * Direct the technical strategy for enterprise identity and access management services, ensuring secure and reliable access to institutional systems, applications, and data.

  • Design and enhance IAM architecture spanning on-premises and cloud environments, including integration patterns for both established and emerging platforms.

  • Administer and optimize identity governance solutions with a focus on lifecycle workflows, automated onboarding and offboarding, access requests, approvals, and entitlement controls.

  • Build and support core access technologies such as single sign-on, multi-factor authentication, federation services, and automated account provisioning processes.

  • Investigate complex access and authentication issues, develop scalable solutions, and provide expert guidance on high-impact technical decisions.

  • Partner with system owners, security teams, administrators, vendors, and other stakeholders to implement IAM standards, strengthen controls, and improve service adoption.

  • Oversee access review and certification activities, track remediation efforts, and maintain appropriate audit and monitoring practices across identity-related systems.

  • Review and refine access policies in response to evolving compliance obligations, security risks, and organizational requirements.

  • Maintain supporting infrastructure components, application services, and integrations required for dependable IAM operations.

Requirements

  • Communicate technical recommendations clearly to customers and stakeholders while gathering requirements, resolving issues, and advancing continuous improvement initiatives. Requirements * 7+ years of experience in identity and access management, including architecture, engineering, and operational support in enterprise environments.

  • Strong background with IAM provisioning, identity governance, and authentication technologies such as Single Sign-On, MFA, and federation.

  • Hands-on experience with platforms and protocols such as Active Directory, Azure Active Directory or Microsoft Entra ID, LDAP, SAML, OAuth2, OpenID Connect, and Kerberos.

  • Knowledge of IAM and security frameworks, including Zero Trust principles and compliance standards such as NIST, FERPA, HIPAA, and PCI-DSS.

  • Ability to lead cross-functional IAM initiatives and translate security, business, and technical requirements into practical solutions.

  • Experience supporting IT security operations, cyber security policy alignment, auditing, monitoring, and incident response collaboration.

  • Familiarity with Oracle Identity or similar enterprise identity governance platforms is highly valued.

  • Certifications such as CISSP or CISA are preferred. Technology Doesn’t Change the World, People Do.®

About the company

Robert Half is the world’s first and largest specialized talent solutions firm that connects highly qualified job seekers to opportunities at great companies. We offer contract, temporary and permanent placement solutions for finance and accounting, technology, marketing and creative, legal, and administrative and customer support roles.

Apply for this position

This job is hosted externally. Click below to view the full posting and apply.

Apply on dejobs.org
Prepare application

Good distractions

Loading talks and stories from around this role…