Identity and Access Management (IAM) Engineer

Responsibilities

If you are a skilled IAM Engineer with a passion for implementing and managing cutting-edge IAM solutions, we encourage you to apply for this exciting opportunity. Join us in safeguarding our organization's assets and data against cyber threats and ensuring compliance with regulatory requirements.

We are seeking an experienced and motivated Identity and Access Management (IAM) Engineer to join our dynamic team.  As an IAM Engineer, you will play a critical role in designing, implementing, and maintaining our IAM infrastructure using industry-leading solutions.  This role requires deep technical expertise in IAM technologies and a strong understanding of security best practices. This is a Telework position.  

What you will do: 

• Design, implement, and manage identity and access management solutions using industry-leading solutions like AWS IAM, IBM Security Identity Manager, SailPoint, and Ping Identity to ensure the security and integrity of our systems and data.
• Collaborate with cross-functional teams to gather requirements, design IAM solutions, and integrate them with existing systems and applications.
• Configure and manage user identities, roles, and access permissions across various platforms and environments.
• Develop and implement IAM policies, procedures, and standards to enforce security controls and compliance requirements.
• Conduct access reviews, audits, and risk assessments to identify security vulnerabilities and ensure adherence to regulatory frameworks.
• Monitor IAM systems for security incidents and proactively respond to threats and vulnerabilities.
• Automate IAM processes and workflows using scripting languages and automation tools to improve efficiency and scalability.
• Provide technical guidance and support to internal teams on IAM-related issues and initiatives.
• Stay current with emerging technologies and trends in IAM to continuously improve our IAM infrastructure and practices.
• Participate in incident response activities and collaborate with security teams to investigate and mitigate security incidents.
• Stay abreast of emerging technologies and trends in IAM, cloud security, and identity governance to continuously improve our IAM architecture and practices.
• Collaborate with enterprise architecture teams to ensure that IAM solutions align with overall IT architecture principles and standards.
• Participate in incident response and security incident investigations related to IAM systems.
• Facilitate clear communication across teams, providing updates on release status, known issues, and any potential impact on stakeholders. Coordinate communication of release schedules and changes to all relevant parties

Qualifications

Required Qualifications:

• 5 years with BS/BA; 3 years with MS/MA; 0 years with PhD. Additonal years of experience maybe accepted in lieu of the degree.
• Proven experience as an IAM engineer implementing and supporting IAM solutions in complex enterprise environments.
• In-depth knowledge of market leading IAM technologies and standards, such as AWS IAM, IBM Security Identity Manager, SailPoint, CyberArk, and Ping Identity solutions.
• Strong understanding of identity and access management principles, including authentication, authorization, and directory services.
• Experience with IAM integration patterns, protocols, and standards such as SAML, OAuth, OpenID Connect, SCIM, U2F/UAF/FIDO2, HOTP, TOTP).
• In-depth knowledge of the Identity and Access Management Domain, Authentication and Authorization concepts, and Single Sign-On (SSO) concepts.
• Thorough comprehension of PKI, CAC/PIV, Cryptography, and application security.
• Familiarity with cloud security concepts and best practices, particularly in AWS environments.
• Excellent problem-solving skills and ability to analyze complex systems and architectures.
• Strong communication and interpersonal skills, with the ability to effectively communicate technical concepts to non-technical stakeholders.
• Relevant certifications such as Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), or Certified Identity and Access Manager (CIAM) are highly desirable.
• Experience with IAM governance, compliance, and risk management frameworks (e.g., NIST, ISO 27001, GDPR) is a plus.
• Candidate must be a US citizen.
• Ability to obtain High Risk Public Trust 6C is required.

Preferred Qualifications:

• Experience with identity governance and administration (IGA) platforms and tools.
• Knowledge of DevOps practices and tools for automating IAM dep