> Markdown version of [/jobs/ext/4675105-iam-engineer](https://www.wearedevelopers.com/jobs/ext/4675105-iam-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# IAM Engineer

- **Company:** Aston Carter
- **Location:** Boston, MA, United States (Remote available)
- **Salary:** $166,400 - $249,600
- **Contract:** Temporary contract
- **Skills:** Application Programming Interfaces (APIs), User Authentication, Authentication Protocols, System Configuration, Identity and Access Management, OAuth, OpenID, Role-Based Access Control, Openid Connect, Azure Active Directory, Systems Integration, User Provisioning Software, Cyberark, Cloud Migration, SailPoint, Restful APIs
- **Published:** November 11, 2026
- **Apply:** https://www.careercircle.com/jobs/all/all/usa/ma/boston/04a8c2f3-8252-4552-bc13-6c92ad025e7c

## About the Role

* Hands-on CyberArk administration experience (REQUIRED).
 * Experience administering CyberArk components such as:
 + PVWA
 + CPM
 + PSM
 + CyberArk Safes
 + Privileged Accounts
 * Strong Identity & Access Management (IAM) background.
 * Experience with user provisioning, access management, and role-based access controls (RBAC).
 * Excellent troubleshooting and problem-solving skills.
 * Strong verbal and written communication skills.
 * Customer-focused mindset with the ability to understand and resolve user access challenges efficiently.

Preferred Qualifications

 * CyberArk cloud migration experience.
 * Experience with SailPoint Identity Governance solutions.
 * Microsoft Entra ID administration.
 * Experience with SCIM provisioning.
 * Knowledge of OpenID Connect (OIDC) and OAuth authentication protocols.
 * Experience working with REST APIs and system integrations.
 * background in healthcare, higher education, academic institutions, or large enterprise environments.

Technical Keywords

CyberArk, PAM, Privileged Access Management, CyberArk Safes, PVWA, CPM, PSM, IAM, Identity & Access Management, SailPoint, Identity Governance, Entra ID, SCIM, OAuth, OIDC, OpenID Connect, RBAC, User Provisioning, Access Management.

Schedule

 * Fully Remote
 * Must be able to work Eastern Time hours.
 * Daily start time of 9:15 AM ET.

What Makes Someone Successful in This Role

 * Proven CyberArk administration experience, not simply end-user exposure.
 * Ability to clearly explain CyberArk administration tasks such as managing Safes, configuring permissions, onboarding privileged accounts, and provisioning users.
 * Strong IAM troubleshooting skills and a commitment to delivering an excellent user experience.
 * Ability to work independently while partnering effectively with security, infrastructure, and application teams., Individual compensation offered for this position within this range will depend on many factors, including qualifications, skills, relevant experience, job knowledge, geographic location, internal equity, and other pertinent job-related factors.

## Description

OpenID
Writing
Finance
CyberArk
Management
Governance
Accounting
IdentityIQ
Procurement
RESTful API
Supply Chain
Authentications
Problem Solving
Access Controls
Cloud Migration
Higher Education
Security Policies
User Provisioning
Infrastructure Security
Privileged Access Management
Role-Based Access Control (RBAC)
Troubleshooting (Problem Solving)
Application Programming Interface (API)
$166,400 - $249,600 / yr
Posted yesterday, Our client is seeking an experienced IAM Engineer to join their Identity & Access Management team. This individual will play a key role in supporting and administering the organization's IAM environment, with a strong focus on CyberArk Privileged Access Management (PAM). The ideal candidate has hands-on CyberArk administration experience, excels at troubleshooting access issues, and can effectively partner with end users and technical teams to ensure secure and efficient access management., * Administer and maintain the CyberArk PAM environment, including privileged accounts, Safes, permissions, and user access.

 * Support ongoing initiatives to migrate CyberArk infrastructure from on-premises environments to the cloud.
 * Manage user provisioning, deprovisioning, and access requests across enterprise systems.
 * Investigate and resolve IAM-related tickets, access issues, and authentication challenges.
 * Support Identity Governance initiatives and assist with SailPoint administration and operations.
 * Configure and maintain integrations utilizing SCIM, OpenID Connect (OIDC), OAuth, APIs, and Microsoft Entra ID.
 * Collaborate with business users, security teams, and IT stakeholders to troubleshoot complex access-related issues.
 * Ensure adherence to security policies, least-privilege principles, and access governance standards.