IAM Engineer

RESPONSIBILITIES:
Kforce has a client that is seeking an IAM Engineer in San Antonio, TX.

Summary:
The IAM Engineer leads the design, implementation, and governance of secure identity and access management systems across on-premises and cloud environments. This includes integrating Multi-Factor Authentication (MFA), Single Sign-On (SSO), and Zero Trust Architecture to enforce robust access controls and continuous verification.

Key Responsibilities:
* IAM Engineer will lead IAM initiatives and mentor junior engineers in best practices and solution delivery
* Design and implement IAM solutions that incorporate MFA, SSO, and Zero Trust principles across hybrid environments
* Develop and enforce IAM policies, governance frameworks, and compliance protocols
* As an IAM Engineer, you will manage IAM platforms such as Microsoft Entra ID, Okta, Ping Identity, or ForgeRock
* Integrate IAM solutions with enterprise applications and infrastructure in both on-premises and cloud settings
* Troubleshoot and resolve IAM-related technical issues

REQUIREMENTS:
* Bachelor's degree in IT, Cybersecurity, Computer Science, or related field
* IAM certifications such as Certified Identity Management Professional (CIMP) are preferred
* Hands-on experience with Microsoft Entra ID
* Experience implementing MFA and SSO across hybrid environments
* Experience with CI/CD pipelines and API integration
* Familiarity with Zero Trust frameworks and tools
* Strong understanding of identity lifecycle management and governance
* Proven leadership in IAM project delivery and team coordination
* Proficiency in authentication protocols: OAuth, SAML, OIDC
* Competence in ASP.NET, .NET Core, PowerShell, Bash, Python
* Use of collaboration platforms like GitHub and Azure DevOps

Desired Skills:
* Experience with Azure cloud services is highly preferred
* Experience with LDAP directories and virtual directory servers (e.g., Radiant Logic)
* Knowledge of access control models: RBAC, PBAC, ABAC
* Familiarity with IAM platforms such as SailPoint, ForgeRock, Okta, Ping Identity

The pay range is the lowest to highest compensation we reasonably in good faith believe we would pay at posting for this role. We may ultimately pay more or less than this range. Employee pay is based on factors like relevant education, qualifications, certifications, experience, skills, seniority, location, performance, union contract and business needs. This range may be modified in the future.

We offer comprehensive benefits including medical/dental/vision insurance, HSA, FSA, 401(k), and life, disability & ADD insurance to eligible employees. Salaried personnel receive paid time off. Hourly employees are not eligible for paid time off unless required by law. Hourly employees on a Service Contract Act project are eligible for paid sick leave.

Note: Pay is not considered compensation until it is earned, vested and determinable. The amount and availability of any compensation remains in Kforce's sole discretion unless and until paid and may be modified in its discretion consistent with the law.

This job is not eligible for bonuses, incentives or commissions.

Kforce is an Equal Opportunity/Affirmative Action Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, pregnancy, sexual orientation, gender identity, national origin, age, protected veteran status, or disability status.

By clicking ?Apply Today? you agree to receive calls, AI-generated calls, text messages or emails from Kforce and its affiliates, and service providers. Note that if you choose to communicate with Kforce via text messaging the frequency may vary, and message and data rates may apply. Carriers are not liable for delayed or undelivered messages. You will always have the right to cease communicating via text by using key words such as STOP.