Access Engineer

Lamwork; United States; On-site; USD 112,419 - 137,401; Full time

Job summary

Lamwork is seeking an Access Engineer to manage identity governance and security access for systems. The role involves designing access policies, automating provisioning, and overseeing security configurations to ensure compliance.

The ideal candidate should possess strong skills in active directory administration, identity federation protocols, and automation tools, with a collaborative approach to reducing risks associated with access control.

Qualifications

• Experience with identity lifecycle management and regulatory compliance.
• Proven ability to design access policies and automate workflows.

Responsibilities

• Design role-based access policies to reduce entitlement risk.
• Build automated tooling for provisioning workflows.
• Lead identity lifecycle management for employees and contractors.
• Oversee directory configuration and single sign-on services.
• Coordinate with audit teams to support compliance reviews.

Skills

Active Directory and LDAP Administration

Identity Federation Protocols (SAML, OIDC, OAuth)

Privileged Access Management (PAM) and MFA Platforms

Scripting and Automation (PowerShell, Python)

Cloud IAM Services (AWS IAM, Azure AD/Okta)

Analytical Thinking

Communication

Collaboration

Attention to Detail

Adaptability

Education

Certified Information Systems Security Professional (CISSP)

Certified Identity and Access Manager (CIAM)

Microsoft Certified: Identity and Access Administrator Associate

Certified Information Security Manager (CISM)

CompTIA Security+

Job description

Access Engineer Overview

An Access Engineer governs who can reach which systems and under what conditions, sitting within the security and IT infrastructure function where identity decisions carry regulatory weight. Day to day, the role means administering directory services and single sign-on platforms, managing the full identity lifecycle for employees and contractors, and building automation that keeps provisioning and deprovisioning consistent and auditable. Because every access grant must later survive internal and external review, the work carries a level of accountability that sets it apart from general IT operations roles. Based on Lamwork's research across Access Engineer job data, the strongest candidates combine hands‑on directory administration with a working grasp of access governance frameworks and audit processes.

Access Engineer Key Responsibilities

• Design role‑based access policies and least privilege models to reduce entitlement risk across enterprise systems.
• Build automated tooling for provisioning workflows and certification reviews so access approvals remain fast and defensible.
• Lead the identity lifecycle for employees and contractors from initial onboarding through periodic review and offboarding.
• Oversee directory forest configuration and single sign‑on services in alignment with documented security policies.
• Coordinate with internal audit teams and support external reviewers who examine identity controls and access records.

Access Engineer Required Skills

• Hard Skills: Active Directory and LDAP Administration, Identity Federation Protocols (SAML, OIDC, OAuth), Privileged Access Management (PAM) and MFA Platforms, Scripting and Automation (PowerShell, Python), Cloud IAM Services (AWS IAM, Azure AD/Okta)
• Soft Skills: Analytical Thinking, Communication, Collaboration, Attention to Detail, Adaptability

Typical Career Progression for an Access Engineer

• Junior Identity and Access Management Analyst
• Access Engineer
• Senior Access Engineer
• IAM Architect or Identity Security Lead

Access Engineer Certifications

• Certified Information Systems Security Professional (CISSP) - Broad security credential valued by hiring managers for governance roles
• Certified Identity and Access Manager (CIAM) - Specialist recognition directly tied to identity lifecycle management
• Microsoft Certified: Identity and Access Administrator Associate - Validates hands‑on Azure AD and Microsoft identity platform skills
• Certified Information Security Manager (CISM) - Emphasizes risk and governance, well‑suited for mid‑to‑senior Access Engineers
• CompTIA Security+ - Widely recognized entry‑level credential signaling foundational security knowledge

Access Engineer Salary in the United States

The U.S. Bureau of Labor Statistics does not track Access Engineer as a separate occupation. Based on the closest related role, Information Security Analysts, the median annual salary is $124,910 per year, according to the most recent available data. Pay for Access Engineers tends to move with the depth of IAM specialization a candidate brings – professionals who can architect governance programs for regulated industries or manage complex hybrid cloud identity environments typically command significantly more than those working in smaller, less regulated settings.

Access Engineer Resume Tips

Highlight measurable outcomes from identity lifecycle work – such as reductions in mean time to deprovision or audit findings closed – rather than listing duties in generic terms. Showcase specific platforms and tools you have administered, including Active Directory, Okta, Azure AD, PAM solutions, and any scripting languages used for automation. Include experience with formal access review cycles or regulatory audit support, since this kind of evidence‑based governance work is what separates qualified candidates in competitive applicant pools.

Access Engineer Cover Letter Tips

Open with a specific identity challenge you solved – such as building a least privilege model or closing a material audit finding – to immediately signal operational impact rather than just credentials. Connect your IAM and directory administration skills to outcomes the employer cares about, such as reduced risk exposure, faster provisioning, or cleaner audit results. Align your language with the job posting’s terminology around access governance, identity lifecycle, and compliance, since IAM job descriptions often feed directly into ATS keyword screening.