> Markdown version of [/jobs/ext/3895274-identity-operations-engineer-consultant-access-lifecycle-automation](https://www.wearedevelopers.com/jobs/ext/3895274-identity-operations-engineer-consultant-access-lifecycle-automation). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Identity Operations Engineer Consultant - Access Lifecycle & Automation

- **Company:** Greenhouse Software, Inc.
- **Location:** Seattle, WA, United States
- **Experience:** Experienced
- **Salary:** $120,000.0 - $140,000.0
- **Contract:** Permanent contract
- **Skills:** Microsoft Access, Application Programming Interfaces (APIs), Audit Trail, Cloud Computing, Cyber Security, Human Resources Information System (HRIS), Identity and Access Management, Python (Programming Language), OAuth, OpenID, Windows PowerShell, Security Assertion Markup Language (SAML), Data Logging, Azure Automation, Microsoft Power Automate, Software Troubleshooting, Production Code, Bicep, Low-code, Graphql, SailPoint, Restful APIs, Terraform, Software Version Control, Serverless Computing, Workday, Servicenow
- **Published:** October 23, 2026
- **Apply:** https://job-boards.greenhouse.io/kallesgroup/jobs/8910100002

## About the Role

* Bachelor's/master's in CS, Cybersecurity, IT, or equivalent experience.
 * 3+ years in IAM, IAM operations, or systems/security engineering, including hands-on JML processes.
 * Hands-on Entra ID user/group/app admin; working knowledge of Conditional Access, PIM, and Entra ID Governance (Lifecycle Workflows, Entitlement Management, Access Reviews).
 * Hands-on enterprise IGA operations - SailPoint ISC/IdentityNow preferred (comparable IGA considered): access requests, provisioning, source connectors, troubleshooting.
 * PowerShell and Microsoft Graph API / Graph PowerShell SDK required; Python and REST API integration strongly valued.
 * Working knowledge of SAML, OAuth 2.0, OIDC, SCIM sufficient to troubleshoot SSO/provisioning.
 * Hybrid identity - on-prem AD, Entra Connect / Cloud Sync; sync and attribute troubleshooting.
 * ITSM ticketing (e.g., ServiceNow), managing queues against SLAs, documenting to audit standards.
 * Strong troubleshooting, attention to detail, clear communication with technical and non-technical partners., * Certifications: SC-300, SailPoint ISC, AZ-500, Security+, or CISSP.
 * ITSM-integrated automation (e.g., ServiceNow * SailPoint or Entra fulfillment).
 * Low-code automation (Power Automate, Logic Apps) and IaC/config-as-code (Terraform, Bicep).
 * HRIS-driven provisioning (e.g., Workday) and source-of-truth data quality.
 * PAM familiarity (e.g., BeyondTrust) and PAM/PIM interplay.
 * Audit/compliance support (SOX, PCI) for access controls and evidence.

## Description

IDENTITY LIFECYCLE OPERATIONS (Joiner / Mover / Leaver)

 * Fulfill JML requests from the ITSM queue within SLA - account creation, baseline/role-based access, transfers & promotions, timely deprovisioning (terms, contractors, leaves).
 * Operate SailPoint ISC day to day - access requests, provisioning failures, aggregations & identity refreshes, attribute/source-data fixes, role & access profile assignments.
 * Administer Entra ID - users, groups (incl. dynamic), licensing, enterprise app role assignments, guests, Lifecycle Workflows and Entitlement Management requests.
 * Troubleshoot HR-to-identity provisioning and hybrid sync (Entra Connect / Cloud Sync) - attribute mismatches, duplicate/conflicting accounts.
 * Handle privileged/elevated access (PIM eligible assignments, role-assignable groups) with approvals and audit trail.
 * Support app access - SSO (SAML/OIDC) assignments, SCIM errors, onboarding apps/connectors to established patterns.
 * Run access certification / review campaigns operationally and produce audit evidence (SOX, PCI).
 * Ongoing account hygiene - orphaned/dormant/stale accounts, guest cleanup, service account inventory, Entra/SailPoint/AD reconciliation.
AUTOMATION & CONTINUOUS IMPROVEMENT

 * Build lifecycle/access automation with PowerShell, Graph API / Graph PowerShell SDK, Python, SailPoint ISC APIs, workflows and rules.
 * Event-driven/scheduled workflows (Azure Automation, Logic Apps, Power Automate, Azure Functions) with ITSM ticket auto-fulfillment and closure.
 * Analyze ticket volume, SLAs and failure patterns to target automation; track tickets eliminated, time saved, error reduction.
 * Treat automation as production code - source control, peer review, testing, logging, error handling. Use AI tooling to speed scripting and troubleshooting.
ACROSS THE ROLE

 * Write runbooks, SOPs and KB articles; serve as escalation point for service desk and app teams.
 * Partner with HR/HRIS, ITSM and SecOps on data quality, lifecycle timing and identity signals.
 * Participate in identity incident response, including after-hours support as needed., + Integrity: You believe in doing the right thing, even when it's uncomfortable, seemingly inefficient, or costly.
 + Purposefulness: You have a desire to serve others with your skillset and an openness to continuous learning and growth.
 + Ownership: You stick to your commitments, follow up with action, and seek clarity in communication & expectations.