> Markdown version of [/jobs/ext/4689790-manager-identity-access-management-iam-engineering](https://www.wearedevelopers.com/jobs/ext/4689790-manager-identity-access-management-iam-engineering). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Manager - Identity & Access Management (IAM) Engineering - **Company:** Ernst & Young LLP - **Location:** Woodbridge Township, NJ, United States - **Experience:** Expert - **Salary:** $173,900 - $290,100 - **Contract:** Permanent contract - **Skills:** Active Directory, Application Programming Interfaces (APIs), Artificial Intelligence, Amazon Web Services, User Authentication, Microsoft Azure, Software as a Service, Cloud Computing, Cyber Security, Github, Identity and Access Management, Intrusion Detection and Prevention, Python (Programming Language), Key Management, Lightweight Directory Access Protocols (LDAP), Microsoft Software, OAuth, Public Key Infrastructure, Windows PowerShell, Role-Based Access Control, Openid Connect, Azure Active Directory, Cloud Services, Ping Identity, Zero Trust Network Access, Security Assertion Markup Language (SAML), Systems Integration, Scripting, Google Cloud, Enterprise Software Applications, Cloud Platform System, Okta, Cyberark, Agentic-AI, Hashicorp, SailPoint, Restful APIs, Terraform, Devsecops - **Published:** November 12, 2026 - **Apply:** https://dejobs.org/x/x/99B00262EFB84F9DA69B91FD3A13684A/job/ ## About the Role * 5-8+ years of experience in IAM engineering, security engineering, DevSecOps, or cybersecurity. * Experience implementing, integrating, and supporting enterprise IAM platforms. * Strong understanding of authentication, authorization, federation, access governance, PAM, secrets management, and identity lifecycle management. * Experience integrating enterprise applications, APIs, and cloud services with identity platforms. * Strong automation, scripting, troubleshooting, delivery leadership, and stakeholder management skills. Preferred Skills & Technologies * IAM Platforms: SailPoint, Saviynt, Microsoft Entra ID, Okta, Ping Identity, and ForgeRock. * PAM & Secrets: CyberArk, Delinea, BeyondTrust, and HashiCorp Vault. * Cloud & Infrastructure: Microsoft Azure, AWS, Google Cloud, Active Directory, LDAP, PKI, SCIM, OAuth 2.0, OpenID Connect, and SAML. * Modern Identity: Non-Human Identity management, machine identity security, service account governance, ITDR, CIEM, and workload identity. * AI & Emerging Identity: AI-agent identity management, agent-to-agent authentication, delegated authority, and autonomous-agent security controls. * Automation & DevSecOps: PowerShell, Python, Terraform, GitHub, Azure DevOps, REST APIs, Infrastructure-as-Code, and CI/CD pipelines. Preferred Certifications CISSP, CISM, and relevant Microsoft, SailPoint, CyberArk, Okta, AWS, or Azure security certifications. What You'll Bring A builder's mindset and passion for engineering secure, automated, and scalable identity solutions. You will help modernize identity platforms, strengthen security controls, and enable secure access for employees, applications, machines, APIs, and AI agents. Differentiator: Experience with PAM automation, secrets vaulting, machine identity management, AI-agent identity controls, RBAC/ABAC engineering, ITDR, CIEM, and cloud-native IAM platforms is highly desirable. ## Description We are seeking a Manager, IAM Engineering to lead the implementation, automation, and operational engineering of enterprise identity platforms. This role will modernize identity services across Identity Governance & Administration (IGA), Privileged Access Management (PAM), cloud identity, machine identities, and AI-agent identities while advancing Zero Trust and identity security capabilities., * Implement and support IAM capabilities including IGA, PAM, SSO, MFA, directory services, federation, and identity lifecycle management. * Design and integrate IAM and PAM platforms with cloud, SaaS, and enterprise applications. * Automate identity provisioning, credential management, access governance, certification, and secrets-vaulting processes. * Engineer role-based, attribute-based, and policy-based authorization solutions across enterprise and cloud environments. * Implement controls for machine identities, service accounts, APIs, workloads, and other non-human identities. * Engineer AI-agent identity controls, including authentication, authorization, delegated permissions, credential management, least privilege, and lifecycle governance. * Develop automation using APIs, scripting, Infrastructure-as-Code, and CI/CD pipelines. * Support Identity Threat Detection & Response (ITDR), Cloud Infrastructure Entitlement Management (CIEM), and Zero Trust initiatives. * Lead project workstreams, coordinate technical delivery, troubleshoot complex issues, and mentor junior engineers and developers.