Identity and Access Management (IAM) EngineerAbout the RoleWe are seeking an
IAM Engineer to serve as a technical subject matter expert supporting enterprise identity and access management operations, including Single Sign-On (SSO), Multi-Factor Authentication (MFA), identity federation, application integration, and lifecycle services. In this role, you will work closely with agency IT teams, infrastructure and cybersecurity personnel, application owners, and vendors to secure access, streamline workflows, and ensure robust identity governance across public sector environments.
Key Responsibilities- IAM Administration & Support: Administer, monitor, maintain, and troubleshoot the enterprise IAM environment, supporting identity platforms (such as IBM Verify), authentication frameworks, SSO, MFA, and federation services.
- Application Integration: Integrate enterprise applications using modern identity standards and protocols, including SAML, OAuth, OIDC, SCIM, and REST APIs.
- Security & Access Operations: Support security operations, periodic access reviews, vulnerability remediation, identity lifecycle management, and incident response.
- Automation & Documentation: Identify opportunities for automation, scripting, and workflow improvements while maintaining thorough technical documentation, procedures, and implementation standards.
- Collaboration & Consultation: Provide technical support and strategic consultation to agency IT staff and application owners regarding role-based access control (RBAC) and authorization policies.
Requirements- Experience: 2+ years of professional experience supporting enterprise information technology environments, with hands-on experience administering or supporting IAM, SSO, MFA, identity federation, Active Directory, or LDAP directory services.
- Education: Associate degree or higher in Information Technology, Computer Science, Cybersecurity, Information Systems, or a related field (preferred; equivalent practical training or experience will be considered).
- Technical Competencies: Strong understanding of authentication, authorization, identity lifecycle management, and Role-Based Access Control (RBAC), with proven ability to troubleshoot complex identity issues.
- Interpersonal Skills: Exceptional analytical, problem-solving, and communication skills to work independently and collaborate effectively across technical and non-technical stakeholders.
Equal Opportunity Employer / Disabled / Protected Veterans
The Know Your Rights poster is available here:
_EEOC_KnowYourRights6.12.pdf
The pay transparency policy is available here:
_%20English_formattedESQA508c.pdf
For temporary assignments lasting 13 weeks or longer, AllSTEM Connections is pleased to offer major medical, dental, vision, 401k and any statutory sick pay where required.
We are committed to working with and providing reasonable accommodations to individuals with disabilities. If you need a reasonable accommodation for any part of the employment process, please contact your staffing representative who will reach out to our HR team.
AllSTEM Connections participates in the E-Verify program in certain locations as required by law. Learn more about the E-Verify program.
_Participation_Poster_ES.pdf
We also consider for employment qualified applicants regardless of criminal histories, consistent with legal requirements, including, if applicable, the City of Los Angeles' Fair Chance Initiative for Hiring Ordinance. Pursuant to applicable state and municipal Fair Chance Laws and Ordinances, we will consider for employment-qualified applicants with arrest and conviction records, including, if applicable, the San Francisco Fair Chance Ordinance. For Los Angeles, CA applicants: Qualified applications with arrest or conviction records will be considered for employment in accordance with the Los Angeles County Fair Chance Ordinance for Employers and the California Fair Chance Act.
Additional Skills(none specified)
AllSTEM Representative Contact InfoAccount Executive: Nichols
Branch Phone: Location: Ontario, CA
Never miss an opportunity! Create an alert based on the job you applied for.
