IAM One Identity Engineer

Experience: 12 years

Visa: EAD, TN, L2, E2, (No H1B & OPT)

Role Overview

The IAM Engineer will serve as the subject matter expert for the One Identity Manager (1IM) platform. You will be responsible for building and maintaining a secure identity ecosystem, focusing on the "Joiner-Mover-Leaver" (JML) processes, Role-Based Access Control (RBAC), and compliance automation. This role involves deep technical configuration, integration of diverse target systems, and collaboration with security stakeholders to enforce the principle of least privilege

Key Responsibilities

• Architecture & Design: Design and implement end-to-end IAM workflows and governance models using the One Identity Manager product suite.

• System Integration: Develop and maintain connectors to integrate 1IM with on-premises (Active Directory, SAP, HR systems) and cloud environments (Azure AD/Entra ID, AWS, SaaS apps).

• Customization: Extend the One Identity Manager data model, schema, and web portals using VB.NET or C# to meet specific business logic requirements.

• Automation: Orchestrate automated provisioning and de-provisioning processes to reduce manual intervention and improve security posture.

• Access Governance: Configure attestation policies, IT Shop (Request/Approval) workflows, and Segregation of Duties (SoD) rules.

• Support & Troubleshooting: Act as the Tier 3 escalation point for complex identity-related issues, synchronization errors, and performance tuning of the 1IM database.

  Required Technical Skills

• One Identity Expertise: Minimum 3–5 years of hands-on experience with One Identity Manager (1IM). Familiarity with other modules like Safeguard (PAM), Active Roles, or Starling is a significant plus.

• Development: Proficiency in VB.NET (standard for 1IM scripts) or C# and experience with SQL (T-SQL or PL/SQL) for back-end data management.

• Directory Services: Strong knowledge of Active Directory, LDAP, and Azure AD/Entra ID.

• Protocols: Deep understanding of IAM protocols such as SAML 2.0, OAuth, OpenID Connect (OIDC), and SCIM.

• Scripting: Competency in PowerShell or Python for infrastructure automation and data manipulation.

  Preferred Qualifications

• Certifications: One Identity Manager Certified Professional, CISSP, or Microsoft Identity and Access Administrator (SC-300).

• Experience: Previous work in highly regulated industries (Finance, Healthcare, Government) dealing with SOX or HIPAA compliance.