Lead IAM Quality Assurance Engineer

The Lead IAM Quality Assurance Engineer is responsible for ensuring the quality, security, and compliance of Identity and Access Management (IAM) solutions across enterprise applications and platforms. This role partners with IAM architects, security engineers, product owners, and application teams to validate authentication, authorization, and access governance capabilities. The ideal candidate has strong expertise in IAM technologies, security testing, and test automation, with a deep understanding of RBAC, ABAC, and PBAC models. This position plays a key role in ensuring that IAM solutions meet business, regulatory, and security requirements while delivering a seamless user experience.

Reason for opening: New Role – The recruiting efforts for this position are intended to fill an existing vacancy for a new position.

Req#1060218352

Responsibilities

• Lead end-to-end QA automation strategy, planning, and execution for IAM platforms and security solutions
• Design, develop, and maintain robust test plans, test cases, and Java-based BDD automation frameworks to ensure comprehensive test coverage
• Validate IAM capabilities, including SSO, MFA, Federation (SAML, OIDC, OAuth 2.0), session management, and identity lifecycle management
• Perform automated API, protocol, integration, regression, and end-to-end testing using Java-based frameworks and libraries across IAM systems
• Verify provisioning, deprovisioning, role management, entitlement management, and access governance processes while automating verification workflows and managing defects through resolution
• Partner directly with engineering teams to formalize and automate test cases, helping ensure high-quality deliverables and successful UAT execution
• Test and validate authorization models (RBAC, ABAC, and PBAC), including PDP/PEP integrations and policy enforcement mechanisms
• Contribute to continuous improvement initiatives for test automation, quality processes, and IAM testing practices

Requirements

• 5+ years of Automation QA/QE experience, including at least 3+ years supporting Identity & Access Management (IAM), cybersecurity, or identity governance initiatives
• Strong hands-on experience with Java, including proven experience developing robust automation test frameworks and test code
• Solid expertise with BDD automation frameworks and tools, including Selenium and Cucumber/Gherkin; experience with Serenity BDD is highly preferred
• Hands-on experience with IAM platforms such as Ping Identity/ForgeRock, or Okta
• Strong understanding of authentication, federation, and access management concepts, including OAuth 2.0, OpenID Connect (OIDC), SAML, session management, and MFA
• Proven experience with API and protocol test automation using REST Assured or a comparable Java-based framework; manual testing or Postman-only experience is not sufficient
• Experience integrating automated test suites into CI/CD pipelines and DevSecOps environments
• Proven experience validating authorization models and access-control workflows, including RBAC, ABAC, and PBAC
• Proactive mindset with the ability to work closely with developers to formalize and automate testing processes, ensuring testing keeps pace with development
• Strong analytical, troubleshooting, communication, and stakeholder management skills