iam engineer

Openkyber

<div><p><b>Title:</b> IAM Engineer(PingOne)</p>
<p><b>Location:</b> - Bethesda, MD, (Remote)</p>
<p><b>Hire Type:</b> Contract</p>
<p>Job Description: Leads the Identity &amp; Access Management (IAM) function in Global Information Security organization through subject matter expertise (L3) on multi-factor authentication (MFA), Web Access Management (WAM) technologies. Functions as the Security Engineer in the team providing engineering support for MFA and SSO service offerings, daily operations, and continuous improvements. Hands-on MFA implementation experience with PingOne SaaS products (DaVinci, Protect, Verify, Directory) including integrations with Ping Federate for SSO services. Analyzes and implements changes to the MFA and SSO infrastructure including configurations and customizations to address application, security, and performance requirements. Works with stakeholders to integrate and onboard new applications and helps troubleshoot integrations with existing applications and systems. Responsible for directing L2/L1 technical staff to address application security issues.</p>
<p><b>Core Work Activities :</b></p>
<ul><li>Functions as an MFA and WAM point of contact for IT system administrators, Service Desk, service providers and application owners.</li>
<li>Works closely with senior engineers and other team members for MFA and SSO services and operational needs.</li>
<li>Routinely collaborates with different security team members including, but not limited to architecture, infrastructure, network, compliance, and incident response</li>
<li>Manages the MFA and WAM services including requirements gathering, design, building, testing, deployment, and operationalization.</li>
<li>Collaborates with multiple stakeholders to support implementation of new applications and services.</li>
<li>Defines and documents MFA and WAM policies and procedures</li>
<li>Creates test cases to ensure cross platform interoperability.</li>
<li>Implements and validates security controls for the MFA and WAM solution.</li>
<li>Designs security solutions to address risks throughout the SDLC process and confirm that the level of risk is acceptable in accordance with policies.</li>
<li>Provides guidance and oversight for L2/L1 troubleshooting of operational issues.</li>
<li>Leads the identification and remediation of relative security events</li>
</ul><p><b>Maintaining Goals:</b> Submits reports in a timely manner, ensuring delivery deadlines are met. Promotes the documenting of project progress accurately. Provides input and assistance to other teams regarding projects.</p>
<p><b>Managing Work, Projects, and Policies:</b> Manages and implements work and projects as assigned. Generates and provides accurate and timely results in the form of reports, presentations, etc. Analyzes information and evaluates results to choose the best solution and solve problems. Provides timely, accurate, and detailed status reports as requested.</p>
<p><b>Demonstrating and Applying Discipline Knowledge:</b> Provides technical expertise and support to persons inside and outside of the department. Demonstrates knowledge of job-relevant issues, products, systems, and processes. Demonstrates knowledge of function-specific procedures. Keeps up-to-date technically and applies new knowledge to job. Uses computers and computer systems (including hardware and software) to enter data and/ or process information.</p>
<p><b>Delivering on the Needs of Key Stakeholders:</b> Understands and meets the needs of key stakeholders. Develops specific goals and plans to prioritize, organize, and accomplish work. Determines priorities, schedules, plans and necessary resources to ensure completion of any projects on schedule. Collaborates with internal partners and stakeholders to support business/initiative strategies Communicates concepts in a clear and persuasive manner that is easy to understand. Generates and provides accurate and timely results in the form of reports, presentations, etc. Demonstrates an understanding of business priorities</p>
<p><b>Additional Responsibilities:</b> Provides information to supervisors and co-workers by telephone, in written form, e-mail, or in person in a timely manner. Demonstrates self-confidence, energy and enthusiasm. Informs and/or updates leaders on relevant information in a timely manner. Manages time effectively and conducts activities in an organized manner. Presents ideas, expectations and information in a concise, organized manner. Uses problem solving methodology for decision making and follow up. Performs other reasonable duties as assigned by manager.</p>
<p><b>Candidate Profile :</b></p>
<ul><li>Required Education and Experience: Undergraduate degree in Computer Sciences or related field or equivalent work experience and certifications</li>
<li>Minimum 5+ years of information security or infrastructure engineering experience including - 4+ years of experience in managing MFA offerings - Passkeys, Biometrics, FIDO tokens, various authenticators, Implementation experience of PingOne products like DaVinci, Verify, Protect, Neo</li>
<li>4+ years' experience of Federation/SSO services, protocols, and technologies - OAuth/OIDC, SAML, WS-FED, Browsers, MDM/MAM, X509 cert-based authentication (user &amp; device)</li>
<li>2+ years' experience with Ping Access and Ping Federate architecture, design, and implementation - Policy design and implementation, Ping Fed custom adapter development, Integration of custom applications</li>
<li>2+ years of experience in Development - JAVA, HTML/JavaScript/JSON, scripting (Ansible, Shell, Perl, Expect)</li>
<li>2+ years of experience translating business requirements to technical requirements with strong written and verbal communication skills</li>
<li>2+ years of experience with LDAP and directory Services using Radiant logic or Ping Directory</li>
</ul><ul><li>Preferred: 5+ years of experience with integrating IAM solutions with infrastructure and applications</li>
<li>2+ years of experience in designing &amp; implementing API services and data transformation layers</li>
<li>2+ years of experience on containerized deployment environments</li>
<li>Current information security certification, including Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), Certified SCADA Security Architect (CSSA) or Certified Secure Software Lifecycle Professional (CSSLP)</li>
<li>Technical knowledge of industry best practices pertaining to MFA/WAM services</li>
<li>Experience with defining &amp; fulfilling Key Performance Indicators for MFA infrastructure</li>
<li>Experience in the IAM domain with user lifecycle management, authentication, authorization, federation, and privileged access management</li>
<li>Experience in implementing the capabilities such as Passwordless or adaptive authentication</li>
<li>Experience with cloud/SaaS IAM/WAM services</li>
<li>Experience with Zero-Trust Framework</li>
<li>Experience with CASB and WAF technologies.</li>
<li>Experience doing business analysis and requirements gathering for complex business systems</li>
<li>Responsible for identifying, evaluating, and participating in decision making around new and emerging IAM/MFA technologies and should be able to support other areas of Information Security as needed</li>
<li>Strong understanding of PKI, certificate management, security, and provisioning of identity data.</li>
</ul><p><b>For applications and inquiries, contact:</b> hirings@openkyber.com</p></div>

OCI IAM Engineer

Paramount Assure

<div><div>RSA G&amp;L Engineer - Qty 2</div><div>
Experience - 5+ years experience</div><div>
Qualification - Bachelors Degree in IT or computer science</div><div>
Certification - RSA Governance &amp; Lifecycle Certified Implementor</div><div>
Target Region - Riyadh Saudi</div><div>
Budget - 24 LPA INR / Take Home+Per Diem of approx 14k to 15k SAR</div><div></div><div><br>
Job Summary -</div><div>
The role involves activities such as configuration; development of rules or workflows; integration with applications; enhancements; administration and managing support / operations of RSA G&amp;L Solution. It is expected the candidate has experience delivering such activities for multiple clients.</div><div></div><div><br>
Job Responsibility -</div><div>
Configure RSA G&amp;L solution, ensuring alignment with customer requirements and seamless integration with diverse systems and applications while applying best practices and standards for secure coding, testing, and documentation.</div><div>
Assume leadership in the design, architecture, and end-to-end implementation of intricate IGA solutions, effectively addressing complex integration challenges.</div><div>
Oversee the comprehensive IGA implementation lifecycle, encompassing requirement analysis, design, development, testing, deployment, and documentation, adhering to industry best practices and methodologies.</div><div>
Customize IGA integrations with third-party applications, leveraging Java, SQL, REST APIs, and SCIM to tailor solutions to specific client needs.</div><div>
Engage with clients to meticulously gather requirements, conduct informative technical workshops, and ensure clear translation of client needs into robust technical solutions.</div><div>
Provide advanced technical support, troubleshoot complex issues, and collaborate effectively with product engineering and operations teams to facilitate efficient resolutions.</div><div>
Lead project quality assurance activities, including technical QA reviews</div><div></div><div><br>
Technical Skills -</div><div>
Hands-on experience in designing, developing, customizing, configuring, and deploying IGA solutions, delivering atleast 3 independent end to end projects including but not limited to use case documentation, design, defining the architecture, development, testing, deployment, and post-deployment support.</div><div>
Minimum 3 years experience of installation, configuration (rules, workflows, certifications, lifecycle, policies) &amp; integrations with RSA G&amp;L Products.</div><div>
Experience in supporting User acceptance testing, knowledge transfer activities &amp; documentation.</div><div>
Proficiency in Java/J2EE, BeanShell/JavaScript, XML, SQL, Web Services (REST/SOAP), Directories (LDAP) and Unix/Linux environments, with experience in scripting (Unix Shell/Perl) and automating batch jobs.</div><div>
Expertise in IGA, including User Lifecycle Management, Provisioning, Reconciliation, Auditing, Access Certification, and Segregation of Duties (SoD).</div><div>
Understanding of overall IAM concepts, technologies, and solutions such as Single Sign-On (SSO), Multi-Factor Authentication (MFA)and Privileged Access Management (PAM).</div><div></div><div><br>
Soft Skills -</div><div>
Verbal &amp; Written (Clear expression) fluency to deliver technical presentations and documentations. Active listening skills.</div><div>
Proven ability to engage directly with customers for requirement gathering and expectation management.</div><div>
Arabic is an added advantage.</div><div>
Adaptability: Adjusting to new situations. Open to take new tasks &amp; responsibilities. Self-motivated, detail-oriented, positive, collaborative, and organized individual with the capability to maintain flexibility and take ownership of projects and processes.</div><div>
Time Management: Prioritizing tasks and meeting deadlines.</div><div>
Learnability: Willingness to continuously learn, especially in the fast-evolving field of IT, Cybersecurity and IGA.</div><div>
Problem-solving: Critical thinking and creativity.</div><div>
Emotional Intelligence: Managing emotions effectively.</div><div>
Conflict Resolution: Handling disagreements constructively.</div><div>
Professionalism: Demonstrating responsibility and respect.</div></div><div></div>

Senior IAM Engineer

<div><p><b>Role Summary:</b> The IAM Integration Engineer is responsible for designing, developing, and delivering robust integrations that support the secure onboarding and lifecycle management of connected applications within the enterprise Identity and Access Management (IAM) ecosystem. This role requires deep hands on experience with IIQ connector engineering, aggregation pipelines, provisioning workflows, plugin/rule development, and enterprise grade data transformations supporting onboarding automation. You will collaborate closely with IAM engineering, IAM integration team, application teams, and security/compliance stakeholders to deliver high quality, audit ready identity services that meet enterprise regulatory and operational standards.</p>
<p><b>Key Responsibilities:</b></p>
<ul><li><b>Identity Integration &amp; Connector Engineering:</b> Develop and maintain integration components across IAM/IGA platforms, with current emphasis on SailPoint IdentityIQ. Build and tune aggregation connectors, including REST, SOAP, JDBC, AD/LDAP, and custom connector patterns. Implement schema discovery, entitlement modeling, correlation logic, and provisioning policies to ensure accurate identity lifecycle operations. Develop secure, reusable Java-based components including rules, plugins, workflows, and JAR modules leveraging SailPoint's object model and best practice coding standards. Drive connector enhancements, refactors, defect resolution, and performance optimization. Design onboarding patterns for new application integrations, including standardized templates for schemas, correlation, provisioning, and entitlement modeling. Implement connector-level error handling, retry logic, and reconciliation tuning to ensure reliability and auditability of identity operations. Develop extensible integration frameworks that support future connectors, custom endpoints, and reusable provisioning logic.</li>
<li><b>Data Engineering &amp; Transformation:</b> Build and maintain robust identity data flows across SQL Server and/or Oracle environments. Develop schema mapping logic, attribute transformation routines, and normalization rules for account, entitlement, and role data. Troubleshoot data integrity issues, reconcile inconsistencies, and ensure completeness/accuracy of identity data sources.</li>
<li><b>Application Onboarding Automation:</b> Engineer onboarding automation frameworks supporting metadata ingestion, entitlement cataloging, user-to-entitlement assignments, and lifecycle management. Build bulk-data workflows with rollback, validation, tracking, and audit evidence. Create standardized onboarding templates, scripts, and validation utilities to accelerate application integration efficiency.</li>
<li><b>CI/CD &amp; Environment Promotion:</b> Implement Git driven workflows for version control, code review, and artifact promotion across DEV, IT, UAT, and PROD environments. Package, test, and deploy rulesets, workflows, and integration modules using standardized release governance. Maintain environment configuration parity and support deployment verification during go live.</li>
<li><b>Testing &amp; Quality Assurance:</b> Write and execute unit tests, system integration tests (SIT), user acceptance tests (UAT), and production validation tests. Conduct root cause analysis for defects and coordinate with development, operations, and application teams for remediation. Ensure integration changes adhere to enterprise quality, reliability, and security expectations.</li>
<li><b>IAM Security, Governance &amp; Compliance:</b> Apply IAM governance principles including Segregation of Duties (SoD), auditability, certification processes, and evidence capture. Ensure integrations meet SOX, SOC, internal audit, and enterprise security standards. Create documentation supporting audit readiness design documents, test evidence, deployment runbooks, and compliance mappings.</li>
<li><b>Collaboration &amp; Technical Leadership:</b> Partner with application owners, IAM engineering teams, security architects, and platform admins to design scalable integration solutions. Translate requirements into technical designs and provide guidance on integration patterns and identity best practices. Deliver knowledge transfer sessions to operational teams and contribute to shared engineering standards.</li>
</ul><p><b>Required Skills &amp; Qualifications:</b></p>
<ul><li><b>Technical Skills:</b> 4 7+ years of experience in IAM/IGA engineering roles. Hands on experience with SailPoint IdentityIQ. Strong Java (JDK 8+) engineering background, including plugin, rule, and JAR development. Proficiency with SQL Server and/or Oracle; advanced understanding of relational identity data structures. Expertise in REST/SOAP APIs, schema mapping, ETL like transformations, and integration pipelines. Familiarity with IGA object models and identity data constructs (accounts, entitlements, roles, policies).</li>
<li><b>IAM &amp; Security Skills:</b> Solid understanding of identity lifecycle management, provisioning/deprovisioning processes, and governance workflows. Experience applying IAM controls such as SoD, recertification, audit trails, and privileged access standards. Knowledge of authentication and directory technologies (AD/LDAP, cloud identity providers, SCIM, SSO/MFA patterns).</li>
<li><b>DevOps &amp; Delivery Skills:</b> Experience with Git-based CI/CD workflows, environment promotion, and release governance. Strong testing discipline across unit, integration, and functional testing. Ability to build reusable, scalable integration frameworks and adhere to secure coding practices.</li>
<li><b>Soft Skills:</b> Excellent communication and documentation capabilities. Ability to lead discussions with technical and non technical users. Strong analytical problem solving skills and high accountability for quality and reliability.</li>
<li><b>Preferred Qualifications:</b> Experience with cloud-based identity systems (Azure AD/Entra ID, Okta, Saviynt, ForgeRock, etc.). Knowledge of scripting languages (Python, PowerShell, Groovy). Experience building identity integrations in highly regulated environments. Background in data engineering or API orchestration.</li>
</ul><p><b>Success Criteria:</b> Delivery of accurate, high performing identity integrations with minimal production defects. Reduction in onboarding cycle time through automation and reusable integration frameworks. Strong cross team collaboration enabling smooth onboarding of applications and identity data sources. Compliance with security, audit, and governance requirements across all integration activities.</p>
<p><b>For applications and inquiries, contact:</b> hirings@openkyber.com</p></div>

Okta IAM Engineer

IonQ

<div><div><p><b>About IonQ:</b></p><br>
<p>
IonQ, Inc. [NYSE: IONQ] is the world's leading quantum platform and merchant supplier - delivering integrated quantum solutions across computing, networking, sensing, and security. IonQ's newest generation of quantum computers, the IonQ Tempo, is the latest in a line of cutting-edge systems that have been helping customers and partners including Amazon Web Services, and AstraZeneca achieve 20x performance results and accelerate innovation in drug discovery, materials science, financial modeling, logistics, cybersecurity, and defense. In 2025, the company achieved 99.99% two-qubit gate fidelity, setting a world record in quantum computing performance.<br>
<br>
Headquartered in College Park, Maryland, IonQ has operations in California, Colorado, Massachusetts, Tennessee, Washington, Italy, South Korea, Sweden, Switzerland, Canada, and the United Kingdom. Our quantum computing services are available through all major cloud providers, while we also meet the needs of networking and sensing customers across land, sea, air, and space. IonQ is making quantum platforms more accessible and impactful than ever before.</p></div><p>
This Senior IAM Engineer will own the Okta for Government High (FedRAMP High) tenant, which serves as the enterprise Identity Provider and Identity Governance platform for a 1,500+ user organization. The role is the primary technical resource responsible for the build, enhancement, and operation of key functions, including SSO integrations, Identity Governance (OIG), Lifecycle Management, Workflows automation, and Adaptive MFA policy.</p>
<p>
In the first three months, you will help develop the core program documentation and workflows. You will collaborate with external teams like IT, Legal and People to integrate into company processes. You will work with our technical security experts to build Identity and Access management processes and procedures.</p><br>
<p><b>
Responsibilities</b></p>
<ul>
<li>Own the Okta for Government High (FedRAMP High) tenant &mdash; configuration, health, lifecycle, and security posture</li>
<li>Manage Universal Directory: on-prem AD Agent sync, HRIS attribute mastering, profile mappings, and group rules</li>
<li>Build and maintain all SSO app integrations via the Okta Integration Network (OIN) using SAML, OIDC, and SCIM</li>
<li>Own and maintain Okta Adaptive MFA policies: factor enrollment rules, risk-based step-up authentication, FIDO2/YubiKey/PIV/CAC configuration</li>
<li>Maintain the Okta System Log to Microsoft Sentinel log streaming pipeline and retention configuration</li>
<li>Own Okta Identity Governance (OIG): entitlement catalog, access certification campaign setup, SoD policy rules, and access request workflow design</li>
<li>Own, Build and Maintain Okta Lifecycle Management: JML automation rules, HRIS connector configuration, and auto-provisioning and deprovisioning into all connected applications, access review triggers, and automated remediation</li>
<li>Design, build, and document all Okta-side enhancements including new app onboarding, policy changes, and IGA configuration updates</li>
<li>Write test cases for all Okta-side changes; execute UAT jointly with the Identity Governance &amp; Operations Analyst before production promotion</li>
<li>Support Identity Operations Specialist on Tier 2 Okta escalations and Workflow troubleshooting</li>
<li>Assist Identity Governance &amp; Operations Analyst with OIG campaign configuration and certification reporting</li></ul><br>
<p><br>
<b>Requirements:</b></p>
<ul>
<li>4+ years of hands-on Okta administration and engineering experience</li>
<li>Demonstrated experience with Okta SSO app integrations via SAML 2.0 and OIDC</li>
<li>Experience with Okta Lifecycle Management and HRIS connector configuration</li>
<li>Experience building Okta Workflows for provisioning automation</li>
<li>Experience with Okta Adaptive MFA policy configuration including FIDO2/WebAuthn and hardware token enrollment</li>
<li>Experience with Okta Universal Directory including AD Agent deployment and profile mastering</li></ul><br>
<p></p>
<p><b>
Compliance Requirements</b>: this role will be subject to US Federal regulations, therefore:</p>
<ul>
<li>Must be a U.S. Citizen or Lawful Permanent Resident (Green Card holder) &mdash; U.S. Person</li>
<li>Ability to obtain and maintain a security clearance or pass a background investigation consistent with CUI access</li><br>
</ul>
<p><b>Preferred Qualifications:</b><b>
</b></p><ul><li>Experience with Okta for Government High (FedRAMP High) or FedRAMP Moderate environments &mdash; strong preference</li>
<li>Okta Identity Governance (OIG) experience &mdash; access certifications, SoD, entitlement management</li>
<li>Experience federating Okta to Microsoft Entra ID / GCCH as a SAML Service Provider</li>
<li>Familiarity with CMMC, ITAR, GDPR, SOX, SOC 2 compliance requirements</li>
<li>Experience with SCIM 2.0 provisioning to downstream applications</li>
<li>Okta Identity Governance certification (preferred)</li></ul><br>
<p><br>
The approximate base salary range for this position is $126,887 - $166,127. The total compensation package includes base, bonus, equity, and a range of benefit options found on our career site.</p><br>
<p></p>
<p><b>
Location:</b> This role is based out of our College Park, Boulder, CO, or Bothell, WA offices, or can be remote in the US.<br>
<b>Travel:</b> Up to 1 week per quarter<br>
<b>Job ID:</b> 1460</p><div><p>
Compensation will vary based on individual factors such as education, qualifications, and experience of the final candidate(s), specific office location, and calibration against relevant market data and internal team equity. Posted base salary figures are subject to change as new market data becomes available. Our benefits include comprehensive medical, dental, and vision plans, matching 401K, unlimited PTO and paid holidays, parental/adoption leave, legal insurance, and a home technology stipend. Details of participation in these benefit plans will be provided when a candidate receives an offer of employment.</p>
<p>
At IonQ, we believe in fair treatment, access, opportunity, and advancement for all while striving to identify and eliminate barriers. We empower employees to thrive by fostering a culture of autonomy, productivity, and respect. We are dedicated to creating an environment where individuals can feel welcomed, respected, supported, and valued.<br>
<br>
We are committed to equity and justice. We welcome different voices and viewpoints and do not discriminate on the basis of race, religion, ancestry, physical and/or mental disability, medical condition, genetic information, marital status, sex, gender, gender identity, gender expression, transgender status, age, sexual orientation, military or veteran status, or any other basis protected by law. We are proud to be an Equal Employment Opportunity employer.</p>
<p></p>
<p><b>US Technical Jobs. </b>The position you are applying for will require access to technology that is subject to U.S. export control and government contract restrictions. Employment with IonQ is contingent on either verifying &quot;U.S. Person&quot; (e.g., U.S. citizen, U.S. national, U.S. permanent resident, or lawfully admitted into the U.S. as a refugee or granted asylum) status for export controls and government contracts work, obtaining any necessary license, and/or confirming the availability of a license exception under U.S. export controls. Please note that in the absence of confirming you are a U.S. Person for export control and government contracts work purposes, IonQ may choose not to apply for a license or decline to use a license exception (if available) for you to access export-controlled technology that may require authorization, and similarly, you may not qualify for government contracts work that requires U.S. Persons, and IonQ may decline to proceed with your application on those bases alone. Accordingly, we will have some additional questions regarding your immigration status that will be used for export control and compliance purposes, and the answers will be reviewed by compliance personnel to ensure compliance with federal law.
</p><p><b>US Non-Technical Jobs. </b>Due to applicable export control laws and regulations, candidates must be a U.S. citizen or national, U.S. permanent resident (i.e., current Green Card holder), or lawfully admitted into the U.S. as a refugee or granted asylum. Accordingly, we will have some additional questions regarding your immigration status that will be used for export control and compliance purposes, and the answers will be reviewed by compliance personnel to ensure compliance with federal law.</p>
<p></p>
<p>If you are interested in being a part of our team and mission, we encourage you to apply!</p></div></div><p></p>

Senior IAM Engineer (Okta)

DailyPay Inc

<div><p><b>About Us:</b><br>
DailyPay is transforming the way people get paid. As a worktech company and the industry&rsquo;s leading on demand pay solution, DailyPay uses an award-winning technology platform to help America&rsquo;s top employers build stronger relationships with their employees. This voluntary employee benefit enables workers everywhere to feel more motivated to work harder and stay longer on the job while supporting their financial well-being outside of the workplace.<br>
DailyPay is headquartered in New York City, with operations throughout the United States as well as in Belfast. For more information, visit DailyPay's Press Center.</p><h2 class="jobSectionHeader"><b>
The Role:</b></h2><p>
We are seeking an experienced Identity and Access Management (IAM) Engineer to join our growing IT team. This full-time position is critical in ensuring the security and integrity of our systems by designing, implementing, and maintaining robust access control solutions. The ideal candidate will have deep expertise in IAM principles, infrastructure provisioning, and enforcing the principle of least privilege across a Cloud and SaaS enterprise environment.
</p><p>If this opportunity excites you, we encourage you to apply even if you do not meet all of the qualifications.
</p><h2 class="jobSectionHeader"><b>How You Will Make an Impact:</b></h2><ul><li><p>
Access Architecture and Design: Design, implement, and manage the IAM infrastructure, including identity provisioning, authentication, and authorization systems. Develop and maintain the overall IAM roadmap and architecture, ensuring alignment with organizational security policies and business objectives</p></li><li><p>
Access Role Design and Management: Design and document granular access roles and policies based on the principle of least privilege. Collaborate with business units to define and manage role-based access control (RBAC) and attribute-based access control (ABAC) models. Conduct regular reviews and clean-up of access roles to maintain security posture and compliance</p></li><li><p>
Infrastructure Provisioning and Least Privilege Enforcement: Design and implement secure infrastructure provisioning mechanisms using tools like Terraform or equivalent, ensuring all resources are provisioned with security best practices. Implement and enforce least privilege principles across cloud environments and on-premises systems. Automate the enforcement of security controls and access policies for infrastructure components</p></li><li><p>
Support Business Growth and Scalability: Ensure the IAM solutions are scalable and resilient to support rapid business growth and expansion into new markets or services. Integrate new applications and services into the centralized IAM platform, focusing on seamless and secure user experience. Provide technical guidance and support for IAM-related projects and initiatives</p></li><li><p>
Operations and Compliance: Monitor and troubleshoot IAM system performance and availability. Ensure all IAM processes and systems comply with regulatory requirements (e.g., SOC 2, ISO 27001, SOX). Develop and maintain comprehensive documentation for all IAM systems and processes, including the IAM Design Document File</p></li></ul><h2 class="jobSectionHeader"><b>
What You Bring to The Team:</b></h2><ul><li><p>
Bachelor's degree in Computer Science, Information Security, or a related field, or equivalent practical experience</p></li><li><p>
4 years of experience working directly in an Identity and Access Management role</p></li><li><p>
Expertise in designing and implementing IAM solutions (e.g., Okta, Access Governance systems)</p></li><li><p>
Strong understanding of identity protocols (SAML, OAuth 2.0, OpenID Connect)</p></li><li><p>
Experience with infrastructure-as-code (IaC) tools, such as Terraform, to manage infrastructure provisioning securely</p></li><li><p>
Proven ability to enforce the principle of least privilege in complex, distributed systems</p></li></ul><h2 class="jobSectionHeader"><b>
Nice to Haves:</b></h2><ul><li><p>
Experience with Privilege Access Management (PAM) solutions (e.g., CyberArk, AWS KMS)</p></li><li><p>
Relevant industry certifications (e.g., CISSP, CISM, Certified Identity and Access Manager)</p></li><li><p>
Experience in environments preparing for SOX compliance.</p></li></ul><h2 class="jobSectionHeader"><b>
What We Offer:</b></h2><ul><li><p>
Exceptional health, vision, and dental care</p></li><li><p>
Opportunity for equity ownership</p></li><li><p>
Life and AD&amp;D, short- and long-term disability</p></li><li><p>
Employee Assistance Program</p></li><li><p>
Employee Resource Groups</p></li><li><p>
Fun company outings and events</p></li><li><p>
Unlimited PTO</p></li><li><p>
401K with company match</p></li></ul><p></p><p><br>
Compensation Range: $136K - $209K</p></div>

Identity and Access Management (IAM) Engineer

Metrostar Systems

<div><p>As a <b>Sr. Identity &amp; Access Management (IAM) Engineer I</b>, you'll work as part of a collaborative and high-performing team providing your expertise to deliver solutions within the highest levels of the federal government.</p>
<p>
We know that you can't have great technology services without amazing people. At MetroStar, we are <b>obsessed </b>with<b> </b>our people and have led a two-decade legacy of building the best and brightest teams. Because we know our future relies on our deep understanding and relentless focus on our people, we live by our mission: A passion for our people. Value for our customers.</p>
<p>
If you think you can see yourself delivering our mission and pursuing our goals with us, then check out the job description below!</p>
<p><b>
What you'll do:</b></p>
<ul>
<li>Configure, maintain, and optimize identity management systems and federation solutions in a complex, mission-critical environment.</li>
<li>Ensure secure access, compliance, and automation across enterprise systems.</li>
<li>Assist the customer in design, deployment and maintenance of identity management and access systems remote monitoring and management capabilities.</li>
<li>Establish and maintain a high level of customer trust and confidence with your active directory knowledge and skills.</li>
<li>Creatively think out of the box to help with troubleshooting and support and provide innovative solutions that fit customers' needs.</li>
</ul>
<p><b>What you'll need to succeed:</b></p>
<ul>
<li>Active Top Secret with current or previously held SCI access.</li>
<li>BA/BS degree; relevant experience can be substituted.</li>
<li>5 years of relevant experience supporting projects of similar size, scope, and complexity.</li>
<li>Proven experience configuring, implementing, and maintaining identity management platforms and federation solutions (e.g., SAML, OAuth, OpenID Connect).</li>
<li>Ability to perform day-to-day support activities using industry-standard IAM tools.</li>
<li>Skilled in monitoring and maintaining compliance scanning tools to ensure operational integrity.</li>
<li>Experience developing and supporting automation and orchestration processes for IAM services.</li>
<li>Strong troubleshooting skills for identity-related issues in high-availability environments.</li>
<li>Familiarity with authentication, authorization, and access control principles.</li>
</ul>
<p><b>This position is designated as essential personnel supporting continuity of operations and may require work during government shutdowns, emergencies, or other critical situations.</b></p>
<p>
SALARY RANGE: $147,000 - $171,000</p>
<p>
The salary range for this position is determined based on qualifications, skills, and relevant experience. The final salary offered will be determined based on several factors including:</p>
<ul>
<li>The candidate's professional background and relevant work experience</li>
<li>The specific responsibilities of the role and organizational needs</li>
<li>Internal equity and alignment with current team compensation</li>
<li>This role is also eligible for additional compensation, subject to the terms and policies of MetroStar, which may include:</li>
<li><ul><li>Performance-based bonuses</li>
<li>Company-paid training and/or certifications</li>
<li>Referral bonuses</li>
</ul></li>
</ul><div><p><i>To apply for this position, please submit your resume via the form below or through our careers page: </i><i>https://www.metrostar.com/jobs/</i></p>
<p><b>
Application Deadline:</b> Applications will be accepted on a rolling basis until the position is filled; candidates are encouraged to apply as early as possible for full consideration.</p>
<p><b>
Additional Compensation</b>: This role may also be eligible for bonuses and/or additional incentives based on individual and company performance.</p>
<p><b>
Benefits</b>: All full-time employees are eligible to participate in our benefits programs:</p>
<ul>
<li>Health, dental, and vision insurance</li>
<li>401(k) retirement plan with company match</li>
<li>Paid time off (PTO) and holidays</li>
<li>Parental Leave and dependent care</li>
<li>Flexible work arrangements</li>
<li>Professional development opportunities</li>
<li>Employee assistance and wellness programs</li>
</ul>
<p>Like we said, <b>we are </b>big fans of our people. That's why <b>we offer</b> a generous benefits package, professional growth, and valuable time to recharge. Learn more about our company culture code and benefits. Plus, check out our accolades.</p>
<p><b>
Commitment to Non-Discrimination</b><br>
All qualified applicants will receive consideration for employment based on merit and without regard to sex, race, ethnicity, age, national origin, citizenship, religion, physical or mental disability, medical condition, genetic information, pregnancy, family structure, marital status, ancestry, domestic partner status, sexual orientation, gender identity or expression, veteran or military status, status as a protected veteran, or any other status protected by applicable federal, state, local, or international law.</p>
<p>
 <b>What we want you to know:</b></p>
<p>
In compliance with federal law, all persons hired will be required to verify identity and eligibility to work in the United States and to complete the required employment eligibility verification form upon hire.</p>
<p>
 <b>Not ready to apply now?</b></p>
<p>
Sign up to join our newsletter here.</p></div></div>

Sr. Identity & Access Management (IAM) Engineer I (6226)

Veracity Software Inc

<div>
 <strong>
  Job Title: Information Security Engineer
  <br/>
  <br/>
 </strong>
 <strong>
  Duration:
 </strong>
 <strong>
  12 months, with potential to extend and/or convert
  <br/>
  <br/>
 </strong>
 <strong>
  Location: Chandler, AZ / New York, NY / Dallas, TX / San Francisco, CA / Charlotte, NC / Raleigh, NC / Minneapolis, MN / Columbus, OH - Hybrid Role (3 days onsite every week)
  <br/>
  <br/>
 </strong>
 <strong>
  Interview:
 </strong>
 <strong>
  First Round will be onsite in any of the listed locations. If required, a second or third round.
  <br/>
  <br/>
 </strong>
 <strong>
  Overview:
  <br/>
  <br/>
 </strong>
 We are seeking an Information Security Engineer to support enterprise IAM platforms, including both vendor solutions such as CyberArk and internally developed IAM applications. This role focuses on operational stability, execution of daily service requests, adherence to SLAs, and full lifecycle management of change requests. The engineer will troubleshoot issues, support integrations, perform hygiene/audit tasks, and participate in on&hyphen;call rotations for critical IAM services.
 <br/>
 <br/>
 <strong>
  Key Responsibilities:
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Provide day&hyphen;to&hyphen;day operational support for IAM platforms including CyberArk and in&hyphen;house IAM applications.
  </li>
  <li>
   Perform BAU activities such as account unlocks/unsuspends, onboarding/offboarding, password rotations, health checks, and access lifecycle tasks.
  </li>
  <li>
   Analyze, create, validate, implement, and close change requests in alignment with established processes.
  </li>
  <li>
   Support requests from IAM integration teams and internal stakeholders.
  </li>
  <li>
   Perform operational hygiene tasks including human/non-human account cleanup, permissions reviews, and audit activities.
  </li>
  <li>
   Troubleshoot incidents, assist in root-cause analysis, and support platform upgrades, patching, and maintenance.
  </li>
  <li>
   Identify and implement automation opportunities using scripting and APIs.
  </li>
  <li>
   Participate in on&hyphen;call rotations to ensure high availability of IAM services. (Mon to Sun 7am to 7pm - once in every 4-6 weeks)
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Required Qualifications:
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   5+ years of experience in Information Security or Identity &amp; Access Management.
  </li>
  <li>
   Hands-on experience with CyberArk or similar privileged access platforms.
  </li>
  <li>
   Experience supporting IAM operational environments with defined SLAs.
  </li>
  <li>
   Ability to manage change requests through full lifecycle (analysis &rarr; build &rarr; validation &rarr; implementation &rarr; closure).
  </li>
  <li>
   Scripting skills (PowerShell, Python, REST APIs).
  </li>
  <li>
   Solid understanding of IAM concepts, access lifecycle processes, and operational security controls.
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Preferred Qualifications:
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   CyberArk certifications (Defender, Sentry, Client) or equivalent IAM solution experience.
  </li>
  <li>
   Experience supporting custom or in-house IAM applications.
  </li>
  <li>
   Familiarity with Active Directory, Windows/Linux administration, and cloud (AWS/Azure) IAM integrations.
  </li>
 </ul>
</div>


Information Security Engineer

Search 4976+ Iam engineer jobs near you this April. New roles added regularly across leading industries. Apply today.