IAM Engineer/Cybersecurity Staff Engineer

• Job Description 
 
At our company, the Identity & Access Management (IAM) team plays a pivotal role in our Cybersecurity program by enabling secure, scalable, and compliant access to enterprise and customer systems. Our IAM program encompasses: 
• Identity Governance & Administration (IGA) 
• Authentication Services 
• Privileged Access Management (PAM) 
• Public Key Infrastructure (PKI) 
• Consumer Identity & Access Management (CIAM)

We are seeking a Cybersecurity Staff Engineer – IAM to lead the design, implementation, and continuous improvement of IAM solutions. This role will focus on RBAC, MFA, federated authentication, certificate management, privileged access, and user lifecycle automation. Ideal candidates will bring deep technical expertise across SailPoint ISC, Entra ID (Azure AD), Active Directory, PAM, and PKI, along with a strong understanding of identity architecture and security best practices. 
 
Key Responsibilities 
• Lead the design and implementation of IAM capabilities, including identity lifecycle, authentication, authorization, and access controls. 
• Collaborate across departments to define RBAC models, MFA strategies, access governance, and application integrations. 
• Serve as a trusted IAM subject matter expert (SME) to technical teams, business units, and senior leadership. 
• Guide integration efforts between enterprise applications and identity platforms (e.g., Entra ID, AD, SailPoint ISC). 
• Oversee multiple IAM projects concurrently, ensuring timely, secure, and scalable delivery. 
• Drive stakeholder alignment, including technical teams and business leaders, through proactive communication and conflict resolution. 
• Provide technical mentorship to junior engineers and develop documentation to support operational continuity and audit readiness. 
• Analyze and evaluate new IAM technologies, including authentication protocols, PKI, and automation tooling. 
• Partner with internal teams on change management, access reviews, and identity lifecycle automation initiatives. 
• Contribute to the strategic roadmap for IAM, identifying opportunities for innovation, risk reduction, and operational efficiency. 
 
Required Qualifications 
• 8+ years of experience in Identity & Access Management or a related cybersecurity discipline. 
• Deep hands-on experience with SailPoint ISC, Entra ID (Azure AD), Active Directory, and MFA/SSO solutions. 
• Strong understanding of IAM architecture, RBAC, PIM, and CIAM principles. 
• Proficient in scripting and automation (e.g., PowerShell, Python). 
• Demonstrated ability to lead IAM initiatives and engage with both technical and non-technical stakeholders. 
• Excellent communication, analytical, and organizational skills. 
• Comfortable working independently or within a team in a hybrid work.