IAM Engineer

Identity & Access Management Engineer

Under the direction of the Information Technology (IT) Director, the IAM Engineer designs, implements, and maintains our Identity and Access Management (IAM) systems.

Qualities you must possess:

• Self-motivated
• Enjoy solving problems
• Strong organizational skills; ability to track multiple issues
• Independent, curious, eager to learn
• Strong communication skills (verbal and written)

Responsibilities:

• Design, implement, and maintain IAM solutions, including identity lifecycle management, authentication, authorization, and access control
• Develop and enforce IAM policies and procedures to ensure compliance with security standards and regulations (e.g., SOC2, ISO 27001, GDPR)
• Integrate IAM systems with various applications and platforms, including cloud services, directories, and databases
• Work with Information Security to conduct regular security assessments and audits to identify and mitigate IAM risks
• Troubleshoot and resolve IAM issues
• Monitor and analyze IAM system performance, identifying areas for improvement and optimization
• Stay up-to-date on the latest IAM technologies and best practices
• Collaborate with other IT team members to ensure seamless integration of IAM solutions with existing infrastructure
• Work with the Service Desk team to develop and deliver training materials to educate users on IAM policies and procedures
• Assist with other tasks, such as automation of internal processes
• Share on-call rotation with rest of IT Operations Team

Qualifications:

• Proven experience (5+ years) as an IAM Engineer or similar role
• Strong understanding of IAM concepts, principles, and best practices

Hands-on experience with IAM tools and technologies, such as:

• Directory services (Active Directory, LDAP)
• Single sign-on (SSO) solutions (SAML, OIDC)
• Multi-factor authentication (MFA)
• Identity governance and administration (IGA)
• Privileged access management (PAM)
• SailPoint IdentityIQ
• Experience with scripting languages (e.g., JavaScript, Python, PowerShell) for automation
• Knowledge of cloud security and IAM solutions in cloud environments (AWS, Azure, GCP)
• Good working knowledge of REST APIs (especially SCIM) for integrating systems

Knowledge of the following is a plus:

Amazon Web Services, Virtualization (VMware), MySQL / MariaDB, RADIUS, 802.1x, Cisco IOS, Cisco ASA, G Suite, ServiceNow