Cyber Security- IAM Engineer

Exelare; Green (OR); Hybrid; USD 110,000 - 150,000; Full time

Job summary

Exelare is seeking an experienced IAM Security Engineer to design, implement, and administer enterprise IAM solutions in a hybrid work model with on-site collaboration in Milwaukee, Green Bay, or Chicago. You will support identity lifecycle, governance, SSO, and privileged access management for complex environments.

The role requires 2+ years in cybersecurity (IAM preferred), strong troubleshooting, and collaboration across IT teams. Cloud identity, scripting, and certifications are a plus.

Qualifications

• Bachelor’s degree in computer science, computer engineering, cybersecurity, information systems, or related field preferred.
• At least two years of cybersecurity experience, preferably IAM architecture/engineering/ops.
• Strong troubleshooting, communication, documentation, and interpersonal skills.

Responsibilities

• Implement, configure, upgrade, and deploy IAM technologies including identity lifecycle, governance, provisioning, SSO, federation, and privileged access management.
• Administer and troubleshoot IAM integrations across AD, LDAP, databases, app servers, and authentication platforms.
• Support privileged account administration for Windows and Linux/UNIX, databases, and DevOps tools.
• Investigate and resolve issues with password rotation, onboarding, connector failures, authentication, provisioning, and system integrations.
• Configure and maintain privileged access environments, safes, connectors, and access controls.
• Implement cloud identity capabilities including conditional access, MFA, SSO, federation, and directory services.
• Develop test plans, validation procedures, and documentation for IAM solutions.
• Create scripts/automation to improve provisioning, account management, monitoring, and efficiency.
• Collaborate with cybersecurity, infra, applications, networking, and operations teams to deliver secure IAM solutions.
• Contribute to governance improvements, privileged access controls, machine identity management, and access risk reduction.

Skills

IAM architecture

Troubleshooting

Communication

Documentation

Team collaboration

Education

Bachelor’s degree in CS/IS/Engineering

Tools

SailPoint

One Identity

BeyondTrust

Active Directory

LDAP

REST

SOAP

Job description

Identity and Access Management (IAM) Security Engineer

Contract to hire

Hybrid- Candidate can work out of Milwaukee, Green Bay, or Chicago

Position Overview

We are seeking an experienced IAM Security Engineer to support the design, implementation, integration, and ongoing administration of enterprise identity and access security solutions. This position follows a hybrid work model, combining remote work with regular on-site collaboration.

Role level may be aligned to the candidate’s experience, technical depth, and education.

Key Responsibilities

• Implement, integrate, configure, upgrade, and deploy IAM technologies supporting identity lifecycle management, identity governance, automated provisioning, single sign-on, federation, and privileged access management.
• Administer and troubleshoot IAM integrations across Active Directory, LDAP, databases, application servers, web services, authentication platforms, and security monitoring tools.
• Support privileged account administration for Windows and Linux/UNIX systems, databases, network devices, service accounts, DevOps platforms, vulnerability-scanning tools, and scripted processes.
• Investigate and resolve issues involving password rotation, account onboarding, connector failures, authentication, provisioning, and system integrations.
• Configure and maintain privileged access environments, including safes, platforms, owners, backups, connectors, and related access controls.
• Implement and support cloud identity capabilities, including conditional access, multifactor authentication, single sign-on, federation, and related directory services.
• Develop and execute test cases, test plans, validation procedures, and implementation documentation for IAM solutions.
• Create and maintain scripts or automation that improve provisioning, account management, monitoring, and operational efficiency.
• Collaborate with cybersecurity, infrastructure, application, networking, and operations teams to resolve access-related issues and deliver secure solutions.
• Contribute to the ongoing improvement of identity governance, privileged access controls, machine identity management, and access risk reduction.

Minimum Qualifications

• Bachelor’s degree in computer science, computer engineering, software engineering, information technology, information systems, cybersecurity, or a related engineering discipline is preferred.
• Equivalent combinations of education, military service, professional cybersecurity experience, and industry certifications may be considered.
• At least two years of cybersecurity experience, preferably involving IAM architecture, engineering, implementation, or operations.
• Strong troubleshooting, communication, documentation, and interpersonal skills.

Preferred Qualifications

• At least two years of hands‑on IAM implementation experience with an enterprise platform such as SailPoint, One Identity, BeyondTrust, or a comparable solution.
• At least two years of experience working with Active Directory, LDAP, JDBC, REST, SOAP, and web service connectors.
• Experience administering or integrating privileged access management solutions and connectors.
• Experience with cloud platforms and identity services, including Azure, AWS, or Google Cloud.
<
• Experience with Active Directory design, administration, and security controls.
• Scripting or automation experience using Python, PowerShell, .NET, C#, or VB.NET.
• Knowledge of role-based access control, machine identity management, network access management, DNS, and DHCP.
• One or more relevant certifications, such as CISSP, CISM, OSCP, CCSP, GIAC, MCSE, GICSP, CSSA, or CEH.

Additional Information

This is an opportunity to join a cybersecurity team focused on strengthening enterprise identity controls, improving access governance, and supporting secure technology operations. Work arrangement, title level, and specific responsibilities may vary based on business needs and candidate qualifications.