IAM Service Integration Engineer

Team: IT

Location: US

Commitment: Full-time

Workplace Type: remote

Accountabilities:

• Collaborate with stakeholders and application owners to gather IAM requirements, understand business needs, and assess application readiness for identity service integration.
• Analyze systems and existing processes to identify opportunities for IAM integration and determine gaps between application requirements and available identity capabilities.
• Support the technical onboarding of users and enterprise applications to IAM services, including authentication flows, access models, provisioning, and deprovisioning.
• Assist with the configuration and technical validation of IAM solutions, including SailPoint IIQ, CyberArk, SSO, and MFA.
• Analyze and validate authentication methods and protocols such as SAML 2.0, OAuth, OpenID Connect, and LDAP.
• Participate in application owner design interviews, onboarding assessments, and readiness discussions to ensure integrations meet technical and security requirements.
• Validate Joiner/Mover/Leaver processes, user provisioning and deprovisioning workflows, RBAC structures, entitlement mappings, and access designs.
• Troubleshoot IAM integration issues by analyzing system logs, tokens, SAML assertions, and other technical information to identify and resolve root causes.
• Develop and maintain clear IAM documentation covering integration requirements, configurations, workflows, and onboarding processes.
• Provide ongoing support for IAM-related issues and remain current with evolving identity and access management technologies, practices, and industry trends.

Requirements

• Bachelor's degree or equivalent professional experience.
• 2–5 years of experience in IAM, security engineering, identity operations, or a closely related field.
• Hands-on experience with SailPoint IIQ and CyberArk.
• Solid understanding of authentication and identity protocols, including SAML 2.0, OAuth, OpenID Connect, and LDAP.
• Ability to interpret SAML assertions and JWT tokens and use this knowledge to troubleshoot authentication and integration issues.
• Understanding of Joiner/Mover/Leaver identity lifecycle processes, including provisioning and deprovisioning workflows.
• Experience gathering, analyzing, documenting, and translating technical and business requirements into IAM integration solutions.
• Ability to engage application owners and stakeholders in onboarding readiness assessments and technical design discussions.
• Strong communication, collaboration, stakeholder engagement, and customer-service skills.
• Ability to work effectively in complex enterprise environments and navigate ambiguous or evolving technical requirements.
• Self-starter mentality, strong learning agility, and willingness to stay current with IAM and security industry developments.
• Scripting experience is a plus but is not required.

Benefits

• Salary: $100,000–$130,000.
• Work Arrangement: Fully remote position, with the role designed to be performed from a non-company worksite, most commonly the employee's residence.
• Healthcare: Medical, dental, and vision insurance.
• Retirement: 401(k) plan.
• Paid Leave: Paid leave benefits.
• Education: Tuition reimbursement.
• Additional Perks: Access to a variety of discounts and other employee perks.
• Technical Scope: Opportunity to work across SSO, MFA, IGA, PAM, PKI, identity lifecycle management, authentication protocols, and enterprise application integrations.
• Professional Development: Exposure to complex IAM environments and evolving identity and security technologies.
• Collaborative Environment: Cross-functional work with application owners, stakeholders, and technical teams on enterprise identity initiatives.