> Markdown version of [/jobs/ext/3853101-senior-identity-access-management-iam-engineer-iga](https://www.wearedevelopers.com/jobs/ext/3853101-senior-identity-access-management-iam-engineer-iga). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Senior Identity & Access Management (IAM) Engineer, IGA

- **Company:** IDEXX Laboratories, Inc
- **Location:** Westbrook, ME, United States
- **Experience:** Expert
- **Salary:** $100,000.0 - $125,000.0
- **Contract:** Permanent contract
- **Skills:** Java (Programming Language), Active Directory, Application Programming Interfaces (APIs), User Authentication, Build Automation, Microsoft Azure, Cloud Engineering, CompTIA Security+, Identity and Access Management, Key Management, Automation of Marketing, Microsoft Software, Windows PowerShell, Role-Based Access Control, Azure Active Directory, Systems Integration, User Provisioning Software, Scripting, Google Cloud, Enterprise Software Applications, Okta, Cyberark, Agentic-AI, HR Software, Deployment Automation, Bots, Graphql, SailPoint, Restful APIs, Servicenow
- **Published:** October 21, 2026
- **Apply:** https://jobs.localjobnetwork.com/apply/add/87866384/1

## About the Role

* Direct, hands-on experience personally implementing and/or administering an enterprise IGA platform (SailPoint IdentityNow/IdentityIQ, Saviynt, Okta Identity Governance, or Microsoft Entra ID Governance) - able to clearly describe individual technical ownership: what you configured, built, scripted, migrated, or automated

 * For this role, it is good to have broad general IAM experience or advanced Microsoft Entra ID expertise, but required would be hands-on experience with IGA platform implementation, configuration, or automation experience.

 * Experience developing provisioning/deprovisioning workflows, access request and approval processes, RBAC, entitlement mapping, and access certifications within an IGA platform
 * Scripting and automation experience (Java is particularly valuable in SailPoint/Saviynt environments; other vendor-specific or general-purpose scripting also considered)
 * 5+ years of experience in Identity and Access Management, Identity Governance, or Security Engineering
 * Experience with Microsoft Entra ID, Active Directory, Azure, AWS IAM, or Google Cloud IAM
 * Proficiency with PowerShell, REST APIs, and automation scripting

Preferred Qualifications

 * Experience with Privileged Access Management (CyberArk, BeyondTrust, Delinea, Microsoft PAM, etc.)
 * Experience governing AI agents, automation platforms, and machine identities
 * Knowledge of cloud-native authentication methods and secrets management
 * Experience integrating IAM/IGA solutions with HR, ITSM, and enterprise application ecosystems
 * SailPoint, Saviynt, Microsoft, CISSP, Security+, or other relevant IAM/IGA certifications

## Description

IT accelerates the success of IDEXX employees and customers by providing scalable and innovative solutions and leadership. We are a global organization that supports all technology needed to deliver products and solutions to customers enabling them to focus on delivering high quality patient care. We strive to provide exceptional customer service and experience in the most efficient means possible, requiring alignment and cross-functional communication.

We are seeking a Senior IAM Engineer with direct, hands-on experience implementing and/or administering an enterprise Identity Governance and Administration (IGA) platform - such as SailPoint IdentityNow/IdentityIQ, Saviynt, Okta Identity Governance, or Microsoft Entra ID Governance. This is IDEXX's lead technical hire for a planned enterprise IGA implementation: IDEXX expects to select a platform (most likely SailPoint or Saviynt) by the end of 2026 and carry out an approximately year-long implementation to replace today's largely manual access provisioning with automated, governed identity lifecycle management.

This is a technical, hands-on engineering role where you have personally built, configured, scripted, migrated, or automated within an IGA platform.

In this role, you will be responsible for...

Identity Governance & Administration (IGA) - primary focus

 * Personally implement, configure, and administer the enterprise IGA platform (SailPoint, Saviynt, or equivalent)
 * Build and automate joiner, mover, and leaver (JML) workflows
 * Configure access requests, approval workflows, and access certification/attestation processes
 * Map entitlements and integrate applications into the IGA platform
 * Design and implement role-based access control (RBAC) and access governance models
 * Develop scripting and orchestration to automate provisioning, deprovisioning, and governance workflows (Java is particularly relevant within SailPoint/Saviynt environments; other vendor-specific scripting languages may also apply)
 * Support audit, compliance, and regulatory reporting and attestation

Service Account, Managed Identity, and Workload Identity Governance

 * Establish governance standards, inventory, ownership, and lifecycle processes for service accounts across on-prem and cloud
 * Design and govern Azure Managed Identities and other cloud-native workload identities
 * Reduce interactive use of service accounts; implement secure authentication and credential rotation
 * Partner with application teams to eliminate embedded credentials/secrets
 * Conduct periodic reviews to identify orphaned, stale, or over-privileged accounts

AI Agents & Non-Human Identity Management

 * Define governance frameworks for AI agents, automation platforms, bots, APIs, and machine identities
 * Establish identity creation, ownership, access review, and lifecycle controls for non-human identities
 * Ensure visibility and traceability of non-human activity across enterprise systems

Automation & Engineering

 * Build automation using PowerShell, Graph API, REST APIs, and cloud-native tooling
 * Build integrations between the IGA platform, cloud providers, HR systems, ServiceNow, and enterprise applications

Security & Compliance

 * Enforce least privilege and separation-of-duties controls
 * Support security assessments, audits, and identity-related incident investigations
 * Maintain alignment with NIST, ISO 27001, SOC 2, and CIS frameworks