Senior IAM Automation Engineer

NMK Global Inc. is a global IT Services & Solutions company specializing in IT Staffing, Technology Consulting, Workforce Solutions, and Application Development Services. We help organizations build high-performing technology teams by connecting them with exceptional talent across a wide range of industries. Our expertise, industry knowledge, and consultative approach enable clients to achieve successful business outcomes while helping professionals advance their careers.

Job Title: Senior IAM Automation Engineer – AI Enablement
Candidate Location: Remote (preferred Candidates from: Wilmington, DE or Manassas, VA)

Position Overview

We are seeking a Senior IAM Automation Engineer to design, develop, and support scalable automation solutions that modernize Identity and Access Management (IAM) operations across enterprise environments.

This role will focus on automating identity lifecycle management, integrating IAM platforms with HR, ITSM, cloud, and business applications, and improving identity governance, security, and compliance through automation.

The position will play a key role in Joiner-Mover-Leaver (JML) automation, identity governance, privileged access, cloud identity, non-human identity management, and secure AI-assisted IAM capabilities.

Key Responsibilities

• Design, develop, and maintain automated IAM workflows covering Joiner-Mover-Leaver (JML), access requests, provisioning, deprovisioning, access changes, certifications, and privileged access.
• Build scalable identity lifecycle automation integrating HR systems, Microsoft Entra ID, SailPoint, ServiceNow, and enterprise applications.
• Develop and support integrations using REST APIs, Microsoft Graph API, JSON, PowerShell, Python, webhooks, and other automation technologies.
• Design and implement automated identity governance across workforce IAM, IGA, PAM, cloud identity, and customer identity environments.
• Develop and enhance SailPoint IdentityIQ / Identity Security Cloud (ISC) workflows, provisioning, role management, access certifications, lifecycle events, and governance processes.
• Automate identity-related operational processes to reduce manual effort and improve provisioning accuracy, security, and compliance.
• Integrate IAM platforms with on-premises and cloud applications, directories, HR platforms, ITSM systems, and enterprise technologies.
• Implement automated controls supporting least privilege, RBAC, access certification, segregation of duties, privileged access, and identity governance.
• Identify and implement practical AI-assisted IAM use cases, including access-review assistance, ticket summarization, audit-evidence collection, knowledge retrieval, documentation, and operational support.
• Establish governance and security controls for AI agents, service principals, managed identities, bots, APIs, and other non-human identities.
• Partner with cybersecurity, infrastructure, cloud, application, HR, compliance, audit, and business teams to define requirements and deliver automation solutions.
• Develop operational dashboards, metrics, alerts, runbooks, technical documentation, and reporting to improve IAM visibility and service performance.
• Troubleshoot complex identity, integration, provisioning, authentication, authorization, and automation issues.
• Support IAM audits, regulatory requirements, access reviews, control testing, remediation activities, and evidence collection.
• Continuously identify opportunities to improve IAM processes through automation, standardization, integration, and emerging technologies.

Required Qualifications

• 12+ years of experience in IAM, identity engineering, cybersecurity, cloud security, security automation, or a closely related discipline.
• Strong hands-on experience with Microsoft Entra ID / Azure AD and enterprise identity lifecycle management.
• Strong hands-on experience with SailPoint IdentityIQ, SailPoint Identity Security Cloud (ISC), or a comparable IGA platform.
• Experience designing and implementing JML workflows, automated provisioning/deprovisioning, access certifications, role management, entitlement management, and identity governance controls.
• Strong development and automation experience using PowerShell, Python, REST APIs, JSON, and Microsoft Graph API.
• Experience integrating IAM platforms with HR systems, ITSM platforms, Active Directory, cloud services, SaaS applications, and enterprise business applications.
• Experience with IAM, IGA, PAM, or CIAM platforms such as SailPoint, Saviynt, Okta, Auth0, CyberArk, BeyondTrust, or Delinea.
• Strong understanding of authentication, authorization, RBAC, ABAC, least privilege, identity governance, access certification, privileged access, and identity lifecycle management.
• Experience working across both cloud and on-premises identity environments.
• Strong troubleshooting, problem-solving, documentation, and technical communication skills.
• Ability to work effectively with cybersecurity, engineering, infrastructure, application, compliance, audit, and business stakeholders.

AI Automation Requirement

• Recent experience with AI automation within large enterprise security environments.
• Experience applying AI-assisted capabilities to IAM/security operations.
• Experience with AI agents, generative AI, Microsoft Copilot, or similar AI technologies is preferred.
• Experience establishing governance for AI agents, service principals, managed identities, machine identities, API identities, and other non-human identities.
• No specific AI technology is required.

Preferred Qualifications

• Microsoft Entra ID Governance, Entitlement Management, Access Reviews, Privileged Identity Management (PIM), and Conditional Access.
• Azure Automation, Azure Functions, Logic Apps, Azure DevOps, Git, CI/CD, or Infrastructure as Code.
• ServiceNow and enterprise ITSM integrations.
• IAM reporting, analytics, dashboards, or operational metrics using Power BI or similar platforms.
• Cloud IAM and security services across Azure and/or AWS.
• NIST, ISO 27001, SOC 2, PCI DSS, SOX, or similar security/control frameworks.
• CI/CD, DevSecOps, API integration, event-driven automation, and enterprise integration patterns.
• Large-scale IAM transformations, platform migrations, or identity modernization initiatives.

Key Technologies

• IAM / IGA: SailPoint IdentityIQ, SailPoint ISC, Saviynt, Microsoft Entra ID, Okta, Auth0
• PAM: CyberArk, BeyondTrust, Delinea
• Automation: PowerShell, Python, REST APIs, JSON, Microsoft Graph API
• Microsoft Azure: Entra ID, Entra ID Governance, PIM, Access Reviews, Logic Apps, Azure Functions, Azure Automation
• ITSM / DevOps: ServiceNow, Azure DevOps, Git, CI/CD
• AI: Microsoft Copilot, AI Agents, Generative AI, Non-Human Identity Governance
• Reporting: Power BI, IAM Dashboards, Operational Metrics and Analytics

NMK Global Inc. is an Equal Opportunity Employer. We are committed to creating an inclusive workplace and consider all qualified applicants without regard to age, race, color, religion, sex, national origin, disability, protected veteran status, sexual orientation, gender identity, or any other characteristic protected by applicable law.