IAM Automation Engineer, Consultant

Releady; United States; Hybrid; USD 103,000 - 117,000; Full time

Job summary

Releady is seeking an IAM Automation Engineer to design, build, and support automation across identity governance, directories, PAM, MFA, and SSO workflows.

The role emphasizes hands-on coding across PowerShell, Python, and REST APIs, with CI/CD ownership and strong cross-team collaboration in a hybrid or remote setup.

Qualifications

• 7+ years in identity and access management or automation engineering at senior/consultant level.
• Experience with Active Directory, Microsoft Entra ID and CyberArk as core platforms.
• Ability to configure and troubleshoot multi-factor authentication and SSO workflows.

Responsibilities

• Identify and document access patterns across cloud, on-premises, and legacy apps for automation foundations.
• Design, build, test, and maintain automation for identity lifecycle, provisioning, approvals, and access reviews.
• Configure and support AD, Entra ID, and CyberArk as core PAM platforms.

Skills

IAM engineering

Automation engineering

CI/CD pipelines

PowerShell

Python

REST APIs

Scripting

Tools

Active Directory

Microsoft Entra ID

CyberArk

SailPoint

Okta

Ping

ServiceNow

Job description

OVERVIEW

This is a hands-on IAM Automation Engineer role within the Information Security team of a leading healthcare technology company, designing, building, and supporting automation across the full identity and access management ecosystem rather than any single platform. This seat requires broad IAM engineering experience across identity governance, directories, privileged access management, authentication and authorization, ITSM workflows, cloud IAM, and SaaS and enterprise integrations, calling for a versatile engineer who can code and automate across multiple platforms and languages rather than a single-platform specialist. A companion, more SailPoint-focused engineering role is also open on the same team. The role supports the organization's flagship identity platform, which secures more than five million members and other external identities across all digital portals.

NOTE: *Must be eligible to work on W2 without sponsorship. Not eligible for C2C.

• Pay Rate: $75–$85/hr
• Duration:6-month contract-to-hire
• Location: Hybrid or Remote, however must reside in the following states: WA, OH, CA, AZ, CO, CT, FL, GA, MD, MN, NV, OR, AL, IL, VA, WI, TX, NY

RESPONSIBILITIES

• Access Pattern Discovery: identify and document how access actually works across cloud, on-premises, and legacy applications, including systems without an existing API or Active Directory connector, as the foundation for automating them
• IAM Automation Engineering: design, build, test, and maintain automation for identity lifecycle, provisioning/deprovisioning, access requests, approvals, and access reviews
• Directory & PAM Operations: configure and support Active Directory, Microsoft Entra ID, and CyberArk (or equivalent PAM tooling) as core platforms
• Authentication & Authorization: own multi-factor authentication and single sign-on workflows; Okta experience preferred, Ping experience is considered transferable
• Coding, APIs & Integration: develop scripts, services, API integrations, workflow automations, and reusable utilities (PowerShell, Python, or similar)
• Hands-On DevOps Ownership: set up and own CI/CD pipelines directly — a working method here, not a toolset managed by an adjacent team
• Operational Support & Reliability: troubleshoot automation, integration, and access issues; resolve incidents; improve reliability via monitoring and logging
• Documentation & Runbooks: maintain process flows, automation logic, runbooks, and support procedures

QUALIFICATIONS

• Experience: 7+ years in identity and access management or automation engineering, at a senior/consultant level of seniority
• Required platforms: Active Directory, Microsoft Entra ID, CyberArk (or equivalent PAM)
• Required skill: multi-factor authentication and single sign-on configuration and troubleshooting
• Preferred: SailPoint experience; Okta (Ping experience is transferable); ServiceNow development capability
• Coding/Scripting: PowerShell, Python, REST APIs, or similar, with the ability to set up and own CI/CD pipelines hands-on
• Professional skills: strong communication across levels, accountability, ownership, self-motivation, and the ability to prioritize independently — treated as hard requirements, not soft preferences

We are an equal opportunity employer and value diversity at our company. We do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, disability status, or other non-merit factor. We are committed to creating a diverse and inclusive environment for all employees.