IAM Developer

Luna Data Solutions, Inc.; Austin (TX); On-site; USD 120,000 - 170,000; Full time

Benefits offered by this job

Competitive compensation package

Job summary

Luna Data Solutions, Inc. is seeking an experienced Identity and Access Management (IAM) Developer to support a large-scale enterprise IAM for a state government client in Austin, TX.

You will design, implement, and maintain identity governance, access management, and PAM solutions across the enterprise. The ideal candidate has strong SailPoint Identity Security Cloud experience, SSO/MFA, RBAC, and lifecycle automation, with hands-on scripting in PowerShell and Python.

Qualifications

• 8+ years of IAM governance, engineering, lifecycle automation, and scripting.
• 8+ years onboarding applications and integrating with IAM systems.
• 5+ years designing RBAC models, separation of duties, and certification campaigns.
• 5+ years configuring SSO and MFA with centralized identity providers.
• 3+ years with SailPoint Identity Security Cloud.
• 3+ years implementing user access reviews using SailPoint Identity Security Cloud.
• 3+ years integrating applications with SailPoint Identity Security Cloud.
• 3+ years with Privileged Access Management (PAM) solutions.
• 3+ years automating user provisioning, reporting, and operational processes using PowerShell and Python.

Responsibilities

• Design and implement a centralized IdP framework using SAML 2.0 and OIDC for enterprise SSO and MFA.
• Develop and maintain identity lifecycle workflows: onboarding, provisioning, deprovisioning, and role management.
• Integrate business applications with IAM platforms via REST APIs and other methods.
• Design, implement, and maintain RBAC models.
• Support IGA, Access Management, and PAM services.
• Collaborate with security, infrastructure, and application teams to standardize IAM practices.
• Evaluate IAM technologies and recommend improvements for security and efficiency.
• Create and maintain architecture diagrams, docs, and SOPs.
• Provide ongoing support for directory services, IAM platforms, servers, and databases.
• Participate in access reviews, certification campaigns, and compliance activities.

Skills

IAM governance

Lifecycle automation

RBAC design

SSO & MFA configuration

Application onboarding

Tools

SailPoint Identity Security Cloud

SAML 2.0

OpenID Connect (OIDC)

PowerShell

Python

REST APIs

Privileged Access Management (PAM)

Job description

Luna Data Solutions is seeking an experienced Identity and Access Management (IAM) Developer to support a large-scale enterprise IAM environment for a state government client. This role will be responsible for designing, implementing, integrating, and maintaining identity governance, access management, and privileged access solutions across the enterprise.

The ideal candidate will possess strong experience with SailPoint Identity Security Cloud, Single Sign-On (SSO), Multi-Factor Authentication (MFA), Role-Based Access Control (RBAC), lifecycle automation, and application onboarding.

Key Responsibilities

• Design and implement a centralized Identity Provider (IdP) framework utilizing SAML 2.0 and OpenID Connect (OIDC) to support enterprise Single Sign-On (SSO) and Multi-Factor Authentication (MFA).
• Develop and maintain identity lifecycle workflows, including onboarding, provisioning, deprovisioning, and role management processes.
• Integrate business applications with IAM platforms through REST APIs and other integration methods.
• Design, implement, and maintain Role-Based Access Control (RBAC) models.
• Support Identity Governance and Administration (IGA), Access Management, and Privileged Access Management (PAM) services.
• Collaborate with security, infrastructure, and application teams to ensure consistent IAM practices across the organization.
• Evaluate IAM technologies and recommend improvements to enhance security and operational efficiency.
• Create and maintain technical documentation, architecture diagrams, and operational procedures.
• Provide ongoing support for directory services, IAM platforms, supporting servers, and databases.
• Participate in access reviews, certification campaigns, and compliance activities.

Required Qualifications

• 8+ years of experience with IAM platform governance, engineering, lifecycle automation, and scripting.
• 8+ years of experience onboarding applications and integrating business applications with IAM systems.
• 5+ years of experience designing and implementing Role-Based Access Control (RBAC) models, separation of duties controls, and certification campaigns.
• 5+ years of experience managing centralized identity provider solutions and configuring SSO and MFA.
• 3+ years of experience with SailPoint Identity Security Cloud.
• 3+ years of experience implementing user access reviews using SailPoint Identity Security Cloud.
• 3+ years of experience integrating applications with SailPoint Identity Security Cloud.
• 3+ years of experience working with Privileged Access Management (PAM) solutions.
• 3+ years of experience automating user provisioning, reporting, and operational processes using PowerShell and Python.

Preferred Qualifications

• 2+ years of experience supporting a state government agency.
• Experience with enterprise security and compliance initiatives.
• Excellent troubleshooting, documentation, and communication skills.
• Ability to work effectively with cross-functional technical and business teams.

Desired Technical Skills

• SailPoint Identity Security Cloud
• Identity Governance & Administration (IGA)
• Privileged Access Management (PAM)
• SAML 2.0
• OpenID Connect (OIDC)
• Single Sign-On (SSO)
• RBAC
• REST APIs
• PowerShell
• Python
• Directory Services
• Access Certification & Governance

What We Offer:

• Competitive compensation and benefits including health, dental, vision, life and accident insurance, disability insurance, etc.

Luna Data Solutions, Inc. (LDS) provides equal employment opportunities to all employees. All applicants will be considered for employment. LDS prohibits discrimination and harassment of any type regarding age, race, color, religion, sexual orientation, gender identity, sex, national origin, genetics, protected veteran status, and/or disability status. A 7-year background check is required for this role.