Role Title: Senior Identity and Access Management Capability Engineer
Location: Columbus, OH (Remote | Onsite highly preferred)
Hire Type: Contract (C2C/W2)
Role Description:
We are seeking a Senior Identity and Access Management (IAM) Capability Engineer with deep expertise in designing, implementing, and managing enterprise IAM solutions, with a primary focus on the IBM Security suite—including IBM Security Verify, Identity Manager, and Access Manager.
The ideal candidate will possess strong skills in authentication, authorization, SSO, MFA, and federation protocols (SAML, OAuth, OpenID Connect), as well as hands-on experience with scripting (Java, JavaScript, Groovy, Python) for automation and customization.
Experience with regulatory compliance, troubleshooting complex IAM issues, and integrating with cloud platforms (AWS, Azure, Google Cloud Platform) is essential. Familiarity with Okta, IAM automation tools, and mentoring junior engineers is highly desirable. Excellent communication skills and a proven ability to lead projects and collaborate with cross-functional teams are required.
Required Skills:
- Must have IAM fundamentals (authentication, authorization, SSO, MFA, RBAC, LDAP).
- IBM Security Verify (configuration, integration, policy management).
- IBM Security Identity Manager (provisioning workflows, connectors).
- IBM Security Access Manager (web access management, SSO federation).
- SAML, OAuth 2.0, OpenID Connect, SCIM.
- Scripting (Java, JavaScript, Groovy, Python).
- Troubleshooting IAM issues (logs, debugging, performance tuning).
- Regulatory compliance (SOX, GDPR, HIPAA) in an IAM context.
- Stakeholder communication and project leadership.
- Good understanding of IBM Directory Server (LDAP schema, replication, tuning).
- Okta platform (Universal Directory, Lifecycle Management Workflows).
- Integration with cloud platforms (AWS, Azure, Google Cloud Platform).
- Automation tools (PowerShell, Bash, Ansible, Terraform).
- Audit logging and reporting configuration.
- Experience with DevOps pipelines for IAM deployments.
Preferred Experience:
- Experience with other IAM suites (SailPoint, Ping, ForgeRock).
- Custom connector development.
- Training and mentoring junior engineers.
- Advanced policy design (ABAC, fine-grained access).
- Participation in IAM strategy or roadmap planning.
