Information Security Engineer

Position : IAM Enginner

Location : Denver, CO

Proven experience improving the JML(Joiner, Mover, Leaver) processes to assist with an overhaul of the program utilizing ServiceNow, Sailpoint and Entra ID along with other applications.

Extensive understanding of SoD, Toxic Combinations standards.

Experience with User Access Reviews and automation of functions within the program.

• Understanding of Microsoft Entra ID (Azure AD), including SSO (SAML / OIDC), MFA, Conditional Access, and Privileged Identity Management (PIM).
• Provide support and guidance around implementation of Privileged Access Management (PAM) solutions to secure administrative and high-risk accounts, enforce just-in-time access, and monitor privileged sessions.
• Lead IAM engineering work for major projects such as Aladdin onboarding, including defining access provisioning standards and integrating with identity governance processes.
• Experience working with SailPoint, understanding of provisioning processes and automation.
• Seek out automation opportunities to streamline identity lifecycle processes.
• Redesign and automate Joiner–Mover–Leaver (JML) workflows to eliminate manual steps and reduce errors. Includes working with our people department to assist with data improvements.
• Partner to build and maintain preventive controls to ensure compliance with SOX, ISO 27001, SOC 2, and internal policies.
• Automate evidence collection and reporting for audits and access reviews.
• Troubleshoot and resolve identity synchronization issues, federation problems, and access failures.
• Partner with Security, IT, People Department and Compliance teams to ensure identity services meet security and regulatory requirements.
• Participate in continuous improvement initiatives and recommend enhancements to identity processes and technology.

Supervisory responsibilities Technical Skills and Qualifications

Competencies Required

concepts clearly.