Principal Security Engineer IAM

Job Title: Principal Security Engineer IAM
Location: Remote
Engagement: Contract-to-Hire
Rate: $90/HR on W2
Clearance: Ability to obtain & maintain Public Trust
Environment: FedRAMP Moderate (ATO authorized)

Role Overview

Dayforce is seeking a Principal Security Engineer IAM with a very strong automation and scripting background to design, implement, and operate Identity & Access Management solutions in a FedRAMP Moderate cloud environment.

This role is hands-on engineering, not advisory. The ideal candidate is deeply technical with Delinea PAM, One Identity IGA, and Microsoft Entra ID, and can automate IAM/PAM workflows using PowerShell and APIs at scale.

Key Responsibilities

Identity & Access Management (IAM / PAM / IGA)

• Design, implement, and support Delinea PAM:
• Privileged account discovery
• Credential vaulting
• Session management
• Just-in-Time (JIT) access
• Implement and manage One Identity IGA:
• Identity lifecycle (joiner/mover/leaver)
• Access requests & approvals
• Certifications and access reviews
• RBAC and role modeling
• Administer Microsoft Entra ID (Azure AD):
• Conditional Access policies
• MFA and passwordless auth
• Privileged Identity Management (PIM)
• Workforce and external identities
• Integrate IAM platforms with:
• ServiceNow
• SIEM/SOAR tools
• SaaS, cloud, and on-prem systems

Security Engineering & Automation

• Build heavy automation using PowerShell (must-have).
• Develop scripts/tools using Python, Bash, or similar languages.
• Create and maintain REST API integrations between:
• Delinea PAM
• One Identity IGA
• Microsoft Entra ID
• Third-party enterprise applications
• Automate:
• Identity lifecycle workflows
• Provisioning & de-provisioning
• Access requests and approvals
• Compliance and audit evidence collection
• Implement and support:
• SAML, OAuth 2.0, OIDC
• Identity federation and secure API authentication

FedRAMP & Compliance

• Implement and operate controls aligned with NIST 800-53 Moderate.
• Support FedRAMP ATO audits, assessments, and continuous monitoring.
• Produce technical documentation, SOPs, and audit artifacts.
• Participate in:
• Access reviews
• Vulnerability remediation
• Identity-related incident response

Required Skills & Experience

• 5+ years of hands-on IAM engineering experience.
• Expert-level experience with:
• Delinea PAM (on-prem)
• One Identity IGA
• Microsoft Entra ID / Azure AD
• Strong automation background:
• PowerShell (expert)
• API integrations (REST, JSON, OAuth)
• Python/Bash preferred
• Deep understanding of:
• IAM, IGA, PAM concepts
• SSO, MFA, RBAC
• Microsoft Entra PIM
• Experience working in FedRAMP / NIST 800-53 Moderate environments.
• Excellent communication skills (technical business).

Nice to Have

• Proofpoint (identity-based email security)
• FIDO2 / phishing-resistant authentication (YubiKeys)
• Security certifications:
• CISSP
• CCSP / CCSK
• AZ-305 / AZ-500
• Bachelor s degree