IAM Engineer
Posted Updated
Summary
Design, implement, and administer enterprise identity and privileged access management at a bank using SailPoint and CyberArk, automating joiner/mover/leaver provisioning and maintaining Active Directory/Entra ID federation (SAML, OAuth, OIDC). Requires scripting (PowerShell/Python/Java) and AWS/Azure experience.
Core Identity Access Management (IAM) SailPoint CyberArk Administration: Design, implement and administer enterprise IAM and PAM solutions to strictly manage user access and privileged accounts. Lifecycle Workflows: Develop and modernize robust Joiner/Mover/Leaver processes, automating provisioning using available workflow and automation tools. Directory Services: Maintain Active Directory and LDAP architecture, ensuring secure and seamless federation standards such as SAML 2.0, OAuth 2.0 and OpenID Connect. Directory Services Authentication Directory Expertise: Deep understanding of Active Directory, Entra ID and LDAP. Modern Federation: Strong practical experience with modern authentication and authorization protocol, including SAML 2.0, OAuth 2.0, OpenID Connect and MFA/SSO deployments. Scripting, Automation Infrastructure Code-First Mindset: High proficiency in scripting and automation languages PowerShell, Python, or Java/BeanShell to build custom connectors and automate repetitive tasks. Modern Architecture: Experience working with cloud platforms (AWS, Azure) to help secure non-human and machine identities.