Full-Time IAM Security Engineer

Job Responsibilities:

• Configure, manage, and optimize IAM platforms such as Okta, sailpoint, or Microsoft Entra ID (Azure AD).
• Automate identity provisioning and deprovisioning processes.
• Define processes and implement role-based access control (RBAC), attribute-based access control (ABAC), and least privilege principles.
• Deploy and maintain privileged account management and single sign-on (SSO) solutions.
• Implement and maintain MFA solutions across enterprise applications.
• Develop and maintain identity analytics dashboards to monitor access behaviors and detect anomalies.
• Ensure IAM processes align with industry standards (e.g., NIST, CIS, ISO 27001) and regulatory requirements (e.g., GDPR, SOX).
• Use Python, powershell, or javascript to automate identity workflows and integrations.
• Support security incident investigations related to identity and access breaches and contribute to forensic analysis and response.
• Work closely with security operations, IT, and business stakeholders to ensure IAM solutions align with organizational needs.

Required Qualifications:

• 5+ years of experience in IAM engineering or a related cybersecurity role.
• Hands-on experience with IAM platforms (e.g., Okta, SailPoint, CyberArk, Azure AD).
• Strong understanding of authentication protocols (SAML, OAuth, OpenID Connect, LDAP, Kerberos).
• Experience with directory services (Active Directory, Azure AD, LDAP).
• Familiarity with Identity Governance & Administration (IGA) solutions for access review and certification.
• Knowledge of Privileged Access Management (PAM) solutions for securing privileged accounts.
• Basic scripting experience in Python, PowerShell, or JavaScript for IAM automation.
• Understanding of Zero Trust security models and IAM best practices.
• Experience with cloud IAM security in AWS, Azure, or Google Cloud Platform.
• Strong problem-solving skills and ability to troubleshoot IAM-related issues.
• CISSP, CISM or equivalent qualifications preferred
• Bachelor?s or equivalent degree required