IAM Engineer

CTG is seeking a highly skilled IAM Engineer to support a strategic client initiative focused on enhancing and automating identity lifecycle management, application onboarding, and access certification processes. The ideal candidate will bring deep expertise in Identity Governance and Administration (IGA), with hands-on experience in platforms such as SailPoint, CyberArk, and Entra ID, and a strong understanding of identity lifecycle best practices, compliance requirements, and automation frameworks.

NO C2C or 1099. W2 ONLY PLEASE

Key Responsibilities:

Application Onboarding & Integration

• Design and implement standardized onboarding templates and automation workflows for integrating applications into the client's IAM ecosystem.
• Evaluate existing application provisioning against IAM policies and standards, and develop scalable integration solutions.
• Collaborate with application owners, developers, and security teams to drive alignment and streamline onboarding efforts.

Access Recertification & Compliance

• Lead the reengineering and automation of the access recertification process, developing frameworks for periodic access reviews, attestation, and audit readiness.
• Create dashboards, reporting mechanisms, and audit trails to support governance and compliance.
• Integrate certification workflows with platforms such as SailPoint Access Certifications.

Joiner-Mover-Leaver (JML) Lifecycle Management

• Analyze current JML workflows and define target-state processes to enforce policy compliance and minimize access creep.
• Implement role-based provisioning, automated deprovisioning, and identity synchronization across systems.
• Ensure alignment between JML activities, security standards, and business requirements.

Qualifications:

• Bachelor s degree in Information Technology, Cybersecurity, or related field (or equivalent experience).
• Minimum 5 years of experience in Identity and Access Management, with a strong focus on IGA, lifecycle processes, and compliance automation.
• Proficient in SailPoint IIQ/IdentityNow, CyberArk, Entra ID, and integration with systems such as ServiceNow and HRIS platforms.
• Familiarity with SCIM APIs, automated provisioning workflows, and role-based access models.
• Strong understanding of HIPAA, SOC 2, and NIST CSF compliance frameworks.
• Excellent communication, stakeholder engagement, and documentation skills.

Excellent verbal and written English communication skills and the ability to interact professionally with a diverse group are required.

CTG does not accept unsolicited resumes from headhunters, recruitment agencies, or fee based recruitment services for this role.