Hybrid IAM Engineer – SailPoint & Automation

AVEVA; Lake Forest (CA); Hybrid; USD 92,000 - 193,000; Full time

Benefits offered by this job

Flex work hours

20 days PTO rising to 25 with service

Three paid volunteering days

Parental leave (primary/secondary)

Well-being support

Medical

Dental

Vision

401K

Job summary

AVEVA is seeking an IAM Engineer to design and operate automated identity and access management solutions for a hybrid environment. The role focuses on SailPoint enhancements, automated lifecycle processes, and integration with ServiceNow and across AD/Entra ID.

You will collaborate with Security, Infrastructure, HR, and Service Management to deliver reliable identity services with a strong automation mindset.

Qualifications

• Hands-on experience in Identity & Access Management engineering.
• SailPoint (IdentityIQ/IdentityNow) experience required.
• Experience automating identity lifecycle processes.
• Experience automating IAM workflows using PowerShell, APIs, or orchestration tools.
• Solid understanding of SSO and authentication protocols (SAML, OAuth2, OpenID Connect, Kerberos, LDAP).
• Experience supporting Active Directory and Entra ID in hybrid environments.
• Experience producing automated reports for audit and compliance.
• Strong analytical, problem-solving, and communication skills.

Responsibilities

• Engineer and operate automated IAM solutions for workforce identities.
• Support and enhance SailPoint with a focus on automation, scalability, and governance.
• Design, implement, and optimise automated Joiner-Mover-Leaver (JML) processes.
• Automate IAM access request fulfilment via ServiceNow.
• Develop code-driven workflows and integrations to eliminate manual IAM tasks.
• Support and maintain Active Directory and Entra ID (Azure AD) environments.
• Manage authentication, authorisation, roles, and entitlements.
• Automate access certifications, reviews, and compliance reporting.
• Respond to IAM-related incidents with a focus on root cause fixes through automation.
• Produce and maintain documentation, diagrams, and operational runbooks.
• Collaborate with Security teams to strengthen identity controls.
• Leverage scripting and AI-assisted tools to improve efficiency and reporting.

Skills

IAM engineering

SailPoint

Identity lifecycle automation

PowerShell/APIs/automation

SSO protocols

Active Directory/Entra ID

Audit/compliance automation

Communication skills

Education

Bachelor's degree in Computer Science/Engineering/Mathematics or related field

Tools

ServiceNow

Jira

Orchestration tools

DevOps/CI/CD

SailPoint tooling

Job description

AVEVA is seeking an IAM Engineer to design and operate automated identity and access management solutions for a hybrid environment. The role focuses on SailPoint enhancements, automated lifecycle processes, and integration with ServiceNow and across AD/Entra ID.

You will collaborate with Security, Infrastructure, HR, and Service Management to deliver reliable identity services with a strong automation mindset.