About the role –
As a Senior IAM Engineer, you will be a key member of the Enterprise IT organization, serving as a senior hands-on engineer responsible for the design, implementation, and operation of our enterprise-wide Identity and Access Management program.
The role will be responsible for engineering and delivering IAM solutions across Identity Governance and Administration (IGA), Identity Providers (IdP/SSO), Privileged Access Management (PAM), and directory services. You will help bring together a complex, distributed identity environment, including Active Directory, Microsoft Entra ID, LDAP/OpenLDAP, SaaS applications, and enterprise platforms, into secure, scalable, automated, and supported identity workflows. The responsibilities include building automation, API-driven integrations, and lifecycle provisioning workflows; serving as a senior technical authority for architecture decisions and escalated engineering issues; driving integration across platforms such as Dayforce, M365, and ServiceNow; providing technical mentorship to other engineers; and collaborating with security, IT, HR, and business stakeholders to translate requirements into engineering deliverables.
We are seeking a well-rounded IAM engineer with strong identity fundamentals, broad integration experience, and the ability to apply those skills across evolving technologies. The successful candidate will have deep expertise in enterprise IAM platforms and protocols and will be comfortable assessing existing identity environments, defining target-state architecture, designing practical integration patterns, building automation, and operationalizing solutions through documentation, monitoring, support processes, and continuous improvement.
What will you do:
Design, build, and deliver IAM engineering solutions including IGA, IdP/SSO, PAM, and directory services implementations.
Assess and help rationalize complex identity environments, including distributed Active Directory domains, Entra ID, LDAP/OpenLDAP deployments, application directories, and legacy identity integrations.
Develop target-state identity architectures and integration patterns that support cohesive joiner-mover-leaver lifecycle processes, secure access, data quality, and operational scalability.
Configure and support IGA capabilities such as identity profiles, authoritative sources, account correlation, attribute mappings, transforms, lifecycle states, sources/connectors, access profiles, roles, entitlements, access requests, approvals, certifications, and separation-of-duties controls.
Design, implement, and troubleshoot lifecycle provisioning and deprovisioning workflows across HR systems, directories, SaaS applications, databases, collaboration platforms, and IT service-management tools.
Develop, test, and deploy identity automation, API-driven integrations, and lifecycle provisioning workflows
Build and maintain IAM configuration promotion and development workflows, including source control, peer review, testing, release management, and platform-specific tooling such as SailPoint Configuration Hub, SP-Config, SDKs, or equivalent tools.
Design and maintain RBAC models, including role discovery, role design, entitlement mapping, access-profile design, role lifecycle management, and ongoing troubleshooting of access outcomes.
Configure and support IdP/SSO integrations using SAML, OAuth 2.0, OpenID Connect (OIDC), SCIM, and, where needed, WS-Federation and LDAP-based authentication patterns.
Engineer and support PAM capabilities, including privileged account onboarding, reconciliation, password rotation, verification, decommissioning, safe/vault access controls, approval workflows, least-privilege access, and separation of duties.
Integrate PAM platforms with Active Directory/LDAP, MFA, ticketing platforms, SIEM tools, cloud services, CI/CD pipelines, and identity governance solutions.
Automate privileged-account onboarding, reporting, health checks, credential operations, and operational…