Remote IAM Engineer

This position is remote and will work central time hour. US based candidates only. This role is a direct-hire. We cannot provide sponsorship for this position.

Identity & Access Management (IAM) Engineer

We are seeking a hands-on Identity & Access Management (IAM) Engineer to design, develop, and support modern identity solutions across our banking environment. This is a highly technical, engineering-focused role responsible for building and automating identity services using Microsoft Entra ID and Okta, with an emphasis on secure authentication, identity lifecycle management, and application integrations.

Key Responsibilities

• Design, develop, and maintain IAM solutions using Microsoft Entra ID and Okta.

• Build and support SSO, MFA, Conditional Access, and identity governance capabilities.

• Develop and automate user provisioning, deprovisioning, and lifecycle workflows using APIs, PowerShell, and other scripting languages.

• Integrate internal and third-party applications using SAML, OAuth 2.0, OpenID Connect, and SCIM.

• Partner with application owners, infrastructure, and security teams to implement secure identity solutions.

• Troubleshoot complex authentication and authorization issues across cloud and on-premises environments.

• Contribute to IAM architecture, security standards, and continuous process improvements.

Qualifications

• 3+ years of hands-on IAM engineering or identity development experience.

• Strong experience with Microsoft Entra ID (Azure AD) and Okta administration and development.

• Experience implementing SSO, MFA, Conditional Access, identity federation, and lifecycle management.

• Proficiency with PowerShell and REST APIs; experience with automation and scripting is required.

• Solid understanding of authentication and authorization protocols including SAML, OAuth 2.0, OpenID Connect, and SCIM.

• Experience working in regulated environments such as banking or financial services is a plus.

This role is ideal for an engineer who enjoys building and automating identity solutions while helping secure a growing financial institution.

Determining compensation for this role (and others) at Vaco/Highspring depends upon a wide array of factors including but not limited to the individual’s skill sets, experience and training, licensure and certifications, office location and other geographic considerations, as well as other business and organizational needs. With that said, as required by local law in geographies that require salary range disclosure, Vaco/Highspring notes the salary range for the role is noted in this job posting. The individual may also be eligible for discretionary bonuses, and can participate in medical, dental, and vision benefits as well as the company’s 401(k) retirement plan. Additional disclaimer: Unless otherwise noted in the job description, the position Vaco/Highspring is filing for is occupied. Please note, however, that Vaco/Highspring is regularly asked to provide talent to other organizations. By submitting to this position, you are agreeing to be included in our talent pool for future hiring for similarly qualified positions. Submissions to this position are subject to the use of AI to perform preliminary candidate screenings, focused on ensuring minimum job requirements noted in the position are satisfied. Further assessment of candidates beyond this initial phase within Vaco/Highspring will be otherwise assessed by recruiters and hiring managers. Vaco/Highspring does not have knowledge of the tools used by its clients in making final hiring decisions and cannot opine on their use of AI products.