IAM (Identity and Access Management) Engineer

Title : IAM (Identity and Access Management) Engineer Location : Onsite Type : W2 Contract Only Key Responsibilities : Design and implement IAM solutions to secure user access across enterprise applications and infrastructure Collaborate with developers, architects, and compliance teams to build secure and scalable identity systems Configure and manage IAM platforms such as SailPoint, Okta, Ping Identity, ForgeRock, or Azure AD Support integration of SSO, MFA, RBAC, and least privilege access principles Define IAM policies, roles, and entitlements in accordance with security standards and compliance mandates Monitor IAM system health and performance; identify and remediate issues proactively Participate in IAM lifecycle processes including provisioning, de-provisioning, access certifications, and audits Develop and maintain documentation related to architecture, configurations, and operational procedures Preferred Skills : 8+ years of hands-on experience in IAM engineering or system implementation Strong working knowledge of IAM protocols : SAML, OAuth, OpenID Connect, SCIM, LDAP Familiarity with cloud identity models (AWS IAM, Azure AD, GCP IAM) Experience working with IAM tools : Okta, SailPoint, Ping Identity, ForgeRock, or Microsoft Entra (Azure AD) Proficiency in scripting or automation : Python, PowerShell, Bash, or similar Understanding of compliance frameworks such as SOX, HIPAA, or NIST as they relate to IAM Excellent troubleshooting, documentation, and communication skills Nice to Have : Experience in IAM governance and certification processes Exposure to PAM solutions like CyberArk, BeyondTrust, or HashiCorp Vault IAM-related certifications (e.g., SailPoint Certified IdentityNow Engineer, Okta Certified Professional, CISSP, or similar)