Identity and Access Management Engineer

Job Description:

An Identity Engineer (or IAM Engineer) designs, builds, and maintains the systems that control user access to sensitive information. They ensure that the right people and devices have the correct permissions to access technology resources while keeping unauthorized users out.

Key Responsibilities
- Access Control: Establishing Role-Based Access Control (RBAC) and Attribute-Based Access Control (ABAC) to implement the "principle of least privilege".
- Identity Lifecycle: Managing the "joiner/mover/leaver" processes to automatically provision and de-provision user accounts.
- Authentication & Federation: Implementing Single Sign-On (SSO), Multi-Factor Authentication (MFA), and secure protocols like SAML and OAuth.
- Governance & Auditing: Running access certification campaigns and generating reports to maintain regulatory compliance.
- Privileged Access Management (PAM): Securing highly sensitive administrative accounts and managing Just-In-Time (JIT) access.

Core Technology Stack
Identity Engineers interact with a variety of specialized enterprise software and cloud platforms:
- Identity Providers (IdPs): Microsoft Entra ID (formerly Azure AD), Okta, Ping Identity, and Auth0.
- Identity Governance & Administration (IGA): SailPoint, Saviynt, or ForgeRock.
- Privileged Access Management (PAM): CyberArk, BeyondTrust, or Delinea.
- Automation & Scripting: Python, Go, PowerShell, and Terraform