IAM Automation Engineer, Senior

Releady; Denver, Northern (CO, KY); Hybrid; USD 199,752,000 - 214,906,000; Full time

Job summary

Releady seeks a hands-on IAM Automation Engineer to design, build, and support automation across identity governance, directories, PAM, SSO, and cloud IAM.

You will develop scripts and integrations (PowerShell, Python, Java, REST APIs), apply least privilege, and participate in DevOps, CI/CD, and incident response within a healthcare technology environment serving millions of users.

This role offers hybrid/remote work and demands strong cross‑platform collaboration.

Qualifications

• Bachelor's degree in IT, Computer Science, or related field.
• 5+ years in IAM, automation engineering, security engineering, software development, DevOps, or related.
• Hands-on across multiple platforms: SailPoint IdentityNow/IdentityIQ, AD, Entra ID, PAM tools, ITSM platforms, MFA, SSO, and cloud IAM.

Responsibilities

• Design, build, test, and maintain automation for identity lifecycle, provisioning/deprovisioning, access requests, approvals, certifications, and reporting across IAM platforms.
• Configure, enhance, and support identity governance platforms, directories, PAM tools, authentication/federation services, cloud IAM services, ITSM workflows, and enterprise apps.
• Develop scripts, API integrations, workflows, and CI/CD pipelines using PowerShell, Python, Java, REST APIs, JSON, Ansible, Git.
• Apply JML, RBAC, least privilege, SoD, identity federation, SSO, MFA, and access governance to controls.
• Troubleshoot automation, integration, and workflow issues; improve reliability with monitoring, logging, and incident response.
• Use source control and IaC to promote IAM changes safely across environments.
• Maintain runbooks, process flows, and documentation.
• Identify manual IAM tasks to automate to reduce risk and improve service delivery.

Skills

IAM Automation

PowerShell

Python

Java

REST APIs

JSON

Ansible

Git

CI/CD

SailPoint

Active Directory

Entra ID

PAM tools

ITSM

RBAC

SoD

Education

Bachelor's degree in IT/CS

Tools

SailPoint IdentityNow

IdentityIQ

ServiceNow

Active Directory

Entra ID

PAM tools

Job description

OVERVIEW

This is a hands‑on IAM Automation Engineer role within the Information Security team of a leading healthcare technology company, designing, building, and supporting automation across the full identity and access management ecosystem rather than any single platform. This seat requires broad IAM engineering experience across identity governance, directories, privileged access management, authentication and authorization, ITSM workflows, cloud IAM, and SaaS and enterprise integrations, calling for a versatile engineer who can code and automate across multiple platforms and languages rather than a single-platform specialist. A companion, more SailPoint‑focused engineering role is also open on the same team. The role supports the organization's flagship identity platform, which secures more than five million members and other external identities across all digital portals.

NOTE: *Must be eligible to work on W2 without sponsorship. Not eligible for C2C.

• Pay Rate: $70–$75/hr
• Duration:6-month contract-to-hire
• Location: Hybrid or Remote, however must reside in the following states: WA, OH, CA, AZ, CO, CT, FL, GA, MD, MN, NV, OR, AL, IL, VA, WI, TX, NY

RESPONSIBILITIES

• IAM Automation Engineering: design, build, test, and maintain automation for identity lifecycle, provisioning/deprovisioning, access requests, approvals, certifications, role management, entitlement governance, control validation, and operational reporting across multiple IAM platforms
• Cross-Platform IAM Engineering: configure, enhance, and support identity governance platforms, directories, PAM tools, authentication/federation services, cloud IAM services, ITSM workflows, and enterprise applications
• Coding, APIs & Integration: develop scripts, services, API integrations, workflow automations, scheduled jobs, data transformations, and reusable utilities (PowerShell, Python, Java, BeanShell, REST APIs, JSON, Ansible, SQL, Git, or similar)
• Broad IAM Domain Expertise: apply JML, RBAC, least privilege, SoD controls, identity federation, SSO, MFA, privileged access, directory services, access governance, entitlement models, and compliance-driven access controls
• Operational Support & Reliability: troubleshoot automation, integration, workflow, connector, directory, PAM, cloud identity, and application access issues; resolve incidents; improve reliability via monitoring, logging, metrics, and root cause analysis
• DevOps & Release Management: use source control, branching strategies, CI/CD, code reviews, automated testing, and config-as-code/infrastructure-as-code to promote IAM changes safely across environments
• Documentation & Runbooks: maintain process flows, automation logic, runbooks, and support procedures
• Quality Assurance: test and validate automation scripts, workflow changes, integrations, and procedure updates
• Continuous Improvement: identify manual IAM activities to automate; reduce operational risk and improve service delivery

QUALIFICATIONS

• Education: Bachelor's degree in IT, Computer Science, or related field
• Experience: 5+ years in IAM, automation engineering, security engineering, software development, DevOps, systems integration, or related — with demonstrated ability to automate across multiple IAM technologies
• Platforms: hands‑on across multiple platforms: SailPoint IdentityNow or IdentityIQ, Active Directory, Microsoft Entra ID, CyberArk or other PAM tools, ServiceNow or other ITSM platforms, MFA, SSO, identity federation, cloud IAM, SaaS integrations
• Coding/Scripting: PowerShell, Python, Java, BeanShell, JavaScript, REST APIs, JSON, SQL, Ansible, Git, CI/CD tools, or similar — multiple languages expected, not just one
• Integration: ability to connect IAM platforms with HR systems, directories, ticketing systems, PAM tools, cloud services, SaaS platforms, databases, APIs, and enterprise applications, applying secure coding and least‑privilege practices
• Nice to have: CISSP, CIAM, or similar certifications

We are an equal opportunity employer and value diversity at our company. We do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, disability status, or other non-merit factor. We are committed to creating a diverse and inclusive environment for all employees.