IAM Engineer

Jobtailor; Alabama; On-site; USD 90,000 - 130,000; Full time

Job summary

Jobtailor is seeking an experienced IAM professional to design, implement, and automate enterprise identity and access solutions. You will drive PAM, identity governance, and access reviews while integrating SSO and MFA for cloud and on‑prem applications.

You will collaborate with cross‑functional teams to enforce zero trust, RBAC, and JML policies, strengthen audit capabilities, and improve access visibility across hybrid environments.

Qualifications

• 5+ years in IT, preferably security.
• Experience with IAM, PAM and governance.
• Familiar with modern auth protocols (SAML/OIDC/OAuth).
• Strong AD knowledge and cloud identity experience.

Responsibilities

• Design, develop, automate, and deploy IAM solutions.
• Manage PAM, identity governance, and access reviews.
• Integrate SSO and MFA for cloud and on‑prem apps.
• Automate identity workflows and access revocation.
• Support audit, compliance, and evidence collection.

Skills

Identity and Access Management

Privileged Access Management

Identity Governance

SAML/OAuth/OIDC

Zero Trust

Tools

MS Entra

Active Directory

ForgeRock

Okta

CyberArk

SailPoint

Job description

• Design, develop, automate, and deploy enterprise identity and access management solutions
• Generate solutions and policies supporting Privileged Access Management and Identity Governance for the company and consumers
• Integrate and manage SSO and MFA for cloud and on-premises applications
• Automate identity workflows, group assignments, access revocations, and certification campaigns
• Enforce access controls aligned with Zero Trust, RBAC, and JML lifecycle policies
• Harden IAM configurations in hybrid environments
• Evaluate and integrate IAM-related technologies and security enhancements
• Assist with PAM, identity federation design, and role-based grants
• Support audit and compliance efforts by maintaining evidence, resolving control gaps, and improving access visibility
• Engage application teams and stakeholders to implement secure authentication and authorization
• Drive standards and support integrations to and from third-party directories

Requirements

• 5+ years of experience in IT, preferably in Security
• Experience in Identity and Access Management
• Experience in Privileged Access Management
• Experience in Identity Governance
• Experience with NIST and/or SOC2 is a plus
• In-depth understanding of modern authentication solutions using SAML/OAuth/OIDC
• In-depth knowledge of Microsoft Active Directory
• Proven track record in PAM security
• Capability across information security domains, including regulatory compliance, risk assessments, controls implementations, governance frameworks, and audit processes
• Ability to collaborate with high-performance teams and individuals to drive results
• Ability to integrate with cloud-based IAM vendors
• Demonstrated customer-service-oriented work ethic
• Experience with MS Entra, Active Directory, ForgeRock, Okta, CyberArk, and SailPoint

Core Competencies

Demonstrates expertise in designing and implementing enterprise identity and access management solutions, with a strong focus on Privileged Access Management, Identity Governance, and compliance with regulatory standards. Proficient in integrating modern authentication solutions and managing IAM technologies in both cloud and on-premises environments.

Highest-signal resume keywords

• Identity And Access Management
• Privileged Access Management
• Identity Governance
• Microsoft Active Directory
• SAML/OAuth/OIDC Authentication

Hard Skills

• Identity Workflow Automation
• Access Control Enforcement
• Zero Trust Implementation
• RBAC Policies
• IAM Security Enhancements
• Audit And Compliance Support
• Risk Assessments
• Governance Frameworks
• Access Revocation
• Certification Campaigns

Soft Skills

• Collaboration
• Customer-Service Orientation

Industry Keywords

• NIST
• SOC2
• Regulatory Compliance
• Control Gaps
• Access Visibility

Tools & Technologies

• MS Entra
• ForgeRock
• Okta
• CyberArk
• SailPoint