The IAM System Engineer is a key technical position responsible for solution automation, application integration, workflow design, and process implementation for the SailPoint IAM solution. This role will drive technical analysis, implementation, and automation efforts in projects such as SailPoint application onboarding, role-based access control (RBAC), access attestation, and security posture improvements in alignment with the company security standards and industry best practices.
The IAM Engineer will collaborate with IT and business partners to enhance identity lifecycle processes, provide recommendations to mitigate security risks, and maintain compliance with IAM governance standards.
Responsibilities:
- Gather and analyze business and functional requirements to design and optimize IAM workflows, application onboarding, and role management.
- Collaborate with Enterprise Security, IT, and business teams to ensure compliance with security standards through holistic access governance.
- Implement and support strategic SailPoint IAM initiatives, including automation, role definitions, and attestation processes.
- Analyze and resolve complex authentication, integration, and automation issues.
- Refine and improve joiner, mover, leaver provisioning processes across platforms and applications.
- Partner with internal infrastructure, application, and business teams to implement effective IAM solutions.
Qualifications:
- Bachelor's degree in Information Systems, Cybersecurity, or equivalent work experience preferred.
- 5-7 years of experience engineering solutions in SailPoint IdentityIQ (IIQ) required.
- 5-7 years in a structured IT organization with experience in IAM methodologies and best practices.
- 2+ years of experience in banking and/or financial services required.
- Strong knowledge of IAM concepts, including Role-Based Access Control (RBAC), Identity Lifecycle Management, Privileged Access Management (PAM), and Multi-Factor Authentication (MFA).
- Experience implementing IAM solutions across cloud providers (AWS, Azure).
- Development experience with Identity Lifecycle Management, including onboarding automation.
- Hands-on experience with Active Directory, Okta, CyberArk, 2FA/MFA/FIDO technologies.
- Strong understanding of security frameworks (CISSP, CISA, CISM, GPEN, GIAC, OSCP, CEH, etc.).
- Experience developing conceptual and reference documentation, principles, and standards.
Technical Skills:
- Automation & Scripting: PowerShell, Python, Java/Beanshell, SQL.
- API & Integration: REST, OAuth, JSON, Postman.
- Data Analysis: SQL queries, Excel (VLOOKUP, pivot tables, data validation).
- IAM Technologies:
- SailPoint IdentityIQ - Workflows, role management, policies, rules, certifications, reporting.
- Application onboarding - DelimitedFile, Web Services.
- Automated access control processes - Provisioning, SSO, LDAP, Active Directory.
- Identity governance and compliance - Segregation of Duties (SoD), audit readiness.
- Strong analytical, problem-solving, and work management skills.
- Proactive leadership style with attention to detail.
The target hiring compensation range for this role is $62.49 to $69.44 an hour. Compensation is based on several factors including, but not limited to education, relevant work experience, relevant certifications, and location.
About Aquent Talent:
Aquent Talent connects the best talent in marketing, creative, and design with the world’s biggest brands.
Our eligible talent gets access to amazing benefits like subsidized health, vision, and dental plans, paid sick leave, and retirement plans with a match. We also offer free online training through Aquent Gymnasium. More information on our awesome benefits!
Aquent is an equal-opportunity employer. We evaluate qualified applicants without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, veteran status, and other legally protected characteristics. We’re about creating an inclusive environment-one where different backgrounds, experiences, and perspectives are valued, and everyone can contribute, grow their careers, and thrive.
