Role: IAM Automation Engineer AI Enablement
Location: Wilmington, DE or Manassas, VA
The Senior IAM Automation Engineer will design, build, and support scalable automation solutions that modernize Identity and Access Management (IAM) operations across enterprise environments. This role will focus on automating identity lifecycle management, integrating IAM platforms with HR, ITSM, cloud, and business applications, and improving identity governance, security, and compliance through automation.
Key Technologies
- IAM / IGA: SailPoint IdentityIQ, SailPoint ISC, Saviynt, Microsoft Entra ID, Okta, Auth0
- PAM: CyberArk, BeyondTrust, Delinea
- Automation: PowerShell, Python, REST APIs, JSON, Microsoft Graph API
- Microsoft Azure: Entra ID, Entra ID Governance, PIM, Access Reviews, Logic Apps, Azure Functions, Azure Automation
- ITSM / DevOps: ServiceNow, Azure DevOps, Git, CI/CD
- AI: Microsoft Copilot, AI agents, generative AI, non-human identity governance
- Reporting: Power BI, IAM dashboards, operational metrics and analytics
Key Responsibilities
- Design, develop, and maintain automated IAM workflows covering Joiner-Mover-Leaver (JML), access requests, provisioning, deprovisioning, access changes, certifications, and privileged access.
- Build scalable identity lifecycle automation that integrates HR systems, Microsoft Entra ID, SailPoint, ServiceNow, and enterprise applications.
- Develop and support integrations using REST APIs, Microsoft Graph API, JSON, PowerShell, Python, webhooks, and other automation technologies.
- Design and implement automated identity governance capabilities across workforce IAM, IGA, PAM, cloud identity, and customer identity environments.
- Develop and enhance SailPoint IdentityIQ / Identity Security Cloud (ISC) workflows, provisioning, role management, access certifications, lifecycle events, and governance processes.
- Automate identity-related operational processes to reduce manual effort, improve provisioning accuracy, and strengthen security and compliance controls.
- Integrate IAM platforms with on-premises and cloud applications, directories, HR platforms, ITSM systems, and other enterprise technologies.
- Implement automated controls supporting least privilege, RBAC, access certification, segregation of duties, privileged access, and identity governance.
- Identify and implement practical AI-assisted IAM use cases, including access-review assistance, ticket summarization, audit-evidence collection, knowledge retrieval, documentation, and operational support.
- Establish governance and security controls for AI agents, service principals, managed identities, bots, APIs, and other non-human identities.
- Partner with cybersecurity, infrastructure, cloud, application, HR, compliance, audit, and business teams to define requirements and deliver automation solutions.
- Develop operational dashboards, metrics, alerts, runbooks, technical documentation, and reporting to improve IAM visibility and service performance.
- Troubleshoot complex identity, integration, provisioning, authentication, authorization, and automation issues across enterprise environments.
- Support IAM audits, regulatory requirements, access reviews, control testing, remediation activities, and evidence collection.
- Continuously identify opportunities to improve IAM processes through automation, standardization, integration, and emerging technologies.
Required Qualifications
- 12+ years of experience in IAM, identity engineering, cybersecurity, cloud security, security automation, or a closely related discipline.
- Strong hands-on experience with Microsoft Entra ID / Azure AD and enterprise identity lifecycle management.
- Strong hands-on experience with SailPoint IdentityIQ, SailPoint Identity Security Cloud (ISC), or a comparable IGA platform.
- Demonstrated experience designing and implementing JML workflows, automated provisioning/deprovisioning, access certifications, role management, entitlement management, and identity governance controls.
- Strong development and automation experience using PowerShell, Python, REST APIs, JSON, and Microsoft Graph API.
- Experience integrating IAM platforms with HR systems, ITSM platforms, Active Directory, cloud services, SaaS applications, and enterprise business applications.
- Experience with one or more IAM, IGA, PAM, or CIAM platforms such as SailPoint, Saviynt, Okta, Auth0, CyberArk, BeyondTrust, or Delinea.
- Strong understanding of authentication, authorization, RBAC, ABAC, least privilege, identity governance, access certification, privileged access, and identity lifecycle management.
- Experience working across both cloud and on-premises identity environments.
- Strong troubleshooting, problem-solving, documentation, and technical communication skills.
- Demonstrated ability to work effectively with cybersecurity, engineering, infrastructure, application, compliance, audit, and business stakeholders.
Education & Certifications
Bachelor s degree in Computer Science, Information Technology, Cybersecurity, Engineering, or a related field preferred.
Equivalent professional experience may be considered in place of a degree.
Preferred certifications include:
CISSP
Microsoft Certified: Identity and Access Administrator Associate
Microsoft Certified: Azure Security Engineer Associate
SailPoint certifications
CyberArk certifications
Other recognized IAM, cybersecurity, cloud security, or identity certifications.
Please share your update resume at sdey.
Never miss an opportunity! Create an alert based on the job you applied for.
