IAM Automation Engineer - AI Enablement

CEI; Wilmington (DE); Hybrid; USD 110,000 - 124,000; Full time

Job summary

Computer Enterprises, Inc. (CEI) is seeking an IAM Automation Engineer to design, develop, and support automation for IAM operations, governance, and security across both on-prem and cloud.

You will automate identity lifecycle processes, integrate Entra ID with enterprise systems, and establish governance for NHIs such as service accounts and APIs. Responsibilities include building JML workflows, dashboards, and runbooks while enabling AI-assisted capabilities for efficiency and audit readiness.

Qualifications

• 8+ years in IAM, cybersecurity, cloud identity or security automation.
• Hands-on with Microsoft Entra ID and identity lifecycle processes.
• Hands-on with SailPoint IdentityIQ/ISC or similar IGA platforms.
• Experience designing lifecycle management, access certifications, and automated provisioning.
• Comfort using AI-assisted tools as a normal part of workflow.
• Strong scripting/automation: PowerShell, Python, REST APIs, JSON, MS Graph.
• Experience with IAM/IGA/PAM platforms such as SailPoint, Saviynt, Okta, CyberArk, BeyondTrust.
• Solid understanding of authn/authz, RBAC, least privilege and access governance.

Responsibilities

• Design and automate IAM processes: onboarding, offboarding, access requests, provisioning, deprovisioning.
• Implement JML workflows to streamline lifecycle management.
• Govern NHIs: service accounts, APIs, bots; automate provisioning and deprovisioning.
• Develop JML processes and workflows; integrate Entra ID with HR/ITSM systems.
• Oversee governance across on-prem and cloud IAM environments; PAM and customer IAM.
• Identify AI-assisted use cases: ticket summaries, audit evidence collection, docs.

Skills

PowerShell

Python

REST APIs

JSON

Microsoft Graph API

Microsoft Entra ID

SailPoint

AI tools familiarity

Education

Bachelor’s degree in IT/CS

CISSP

Microsoft Identity certifications

Azure Security Engineer Associate

Tools

SailPoint IdentityIQ

Identity Security Cloud (ISC)

Saviynt

Okta/Auth0

CyberArk

BeyondTrust

Job description

Wilmington , Delaware Contract To Hire On-Site Nov 5, 2026

*Only W-2 candidates who are local to either the Wilmington, DE; Urbandale, IA; Dallas, TX; Manassas, VA area will be considered, no C2C*
Computer Enterprises, Inc. (CEI) is seeking a talented IAM Automation Engineer to join our Client's dynamic team.Job at a glance:

• This is a long-term contract, with an initial term of 6months, planned for extension and/or permanent placement
• Pay rate is $80-$90/hr W2 + eligible to sign up for benefits(Medical, Dental, Vision, and 401k) on day 1
• Hybrid position, onsite 4days/wk and remote 1day/wk

IAM Automation Engineer

The IAM Automation Engineer designs, develops, and supports automation solutions that improve Identity and Access Management (IAM) operations, governance, compliance, and the security of both human and non-human identities. This role focuses on automating identity lifecycle processes, integrating IAM platforms with enterprise systems, and establishing governance for non-human identities such as service accounts, service principals, managed identities, APIs, bots, and machine credentials. The position also enables secure AI-assisted capabilities that increase operational efficiency while maintaining strong security controls, regulatory compliance, and audit readiness.

Key Responsibilities

• Design and automate IAM processes including onboarding, offboarding, access requests, provisioning, deprovisioning, access reviews, and privileged access management.
• Implement automated Joiner-Mover-Leaver (JML) workflows to streamline identity lifecycle management and access provisioning.
• Support the governance, lifecycle management, and security of non-human identities (NHIs), including service accounts, service principals, managed identities, APIs, bots, and machine credentials; establish ownership, automate provisioning and deprovisioning, monitor credential health, and ensure compliance with organizational security policies.
• Develop and implement Joiner, Mover, Leaver (JML) processes and workflows.
• Develop integrations between Microsoft Entra ID, HR systems, ITSM platforms, and business applications.
• Oversee the development of automated IAM governance across both on-premises and cloud environments and implement solutions across workforce IAM, PAM, and customer IAM ecosystems.
• Identify and implement AI-assisted use cases such as ticket summarization, access review support, audit evidence collection, and process documentation.
• Establish governance processes for AI agents, service principals, managed identities, and other non-human identities.
• Create dashboards, metrics, runbooks, and documentation to improve operational visibility and efficiency.
• Support compliance initiatives, audits, and continuous process improvement efforts.

Qualifications

Required Qualifications

• 8+ years of experience in Identity and Access Management, cybersecurity, cloud identity, or security automation.
• Hands-on experience with Microsoft Entra ID and identity lifecycle management processes.
• Hands-on experience with SailPoint IdentityIQ, Identity Security Cloud (ISC), or comparable Identity Governance and Administration (IGA) platforms.
• Experience designing and supporting identity lifecycle management, access certifications, role management, and automated provisioning workflows using SailPoint.
• Demonstrated comfort using AI-assisted tools in a professional context; approaches AI as a standard part of modern workflow rather than a specialized or optional capability.
• Strong scripting and automation skills using PowerShell, Python, REST APIs, JSON, and Microsoft Graph API.
• Experience with IAM, IGA, and PAM platforms such as SailPoint IdentityIQ/Identity Security Cloud (ISC), Saviynt, Okta/Auth0, CyberArk, or BeyondTrust.
• Solid understanding of authentication, authorization, RBAC, least privilege, identity governance, and access certification principles.
• Proven ability to troubleshoot complex issues and collaborate with cross-functional technical and business teams.
• Experience managing and governing non-human identities (NHIs), including service accounts, service principals, managed identities, bots, API accounts, secrets, certificates, and machine credentials across cloud and on-premises environment.

Preferred Qualifications

• Experience with Entra ID Governance, Entitlement Management, Access Reviews, and Privileged Identity Management (PIM).
• Knowledge of Azure Automation, Logic Apps, Functions, DevOps practices, and ServiceNow.
• Familiarity with Microsoft Copilot, AI-enabled tools, and governance of AI agents and non-human identities.
• Experience designing and implementing Non-Human Identity (NHI) security programs, including identity inventory, ownership assignment, credential lifecycle management, risk monitoring, and governance controls.
• Experience with reporting, analytics, Power BI, or security dashboards.

Education

• Bachelor’s degree in Information Technology, Cybersecurity, Computer Science, Engineering, or a related field. Equivalent professional experience and industry certifications may be considered in place of a degree.
• Preferred certifications include CISSP, Microsoft Certified: Identity and Access Administrator Associate, Microsoft Certified: Azure Security Engineer Associate, or similar IAM, cybersecurity, and cloud security certifications.