IAM Engineer

Insight Global; Denver (CO); On-site; USD 128,943,000 - 143,270,000; Full time

Benefits offered by this job

Medical, dental, vision insurance

401(k) after 90 days

Paid time off

Job summary

Insight Global is seeking an IAM Engineer to design, implement, and support identity services across Entra ID, Active Directory, SailPoint, ServiceNow, and PAM. You will handle joiner/mover/leaver events, ticket queues, and onboarding while driving improvements for security, audit readiness, and automation.

The role emphasizes least-privilege provisioning, SOX/SOC2/ISO audits, and cross-functional collaboration with Security, Infrastructure, People, and Audit teams.

Qualifications

• 3-5 years hands-on IAM engineering experience in enterprise environments.
• Microsoft Entra ID (Azure AD): SSO, MFA, Conditional Access
• Active Directory (on-prem and hybrid environments)
• SailPoint (IIQ and/or ISC) experience
• Strong understanding of IAM lifecycle (Joiner, Mover, Leaver) with PAM experience
• Experience supporting SOX, ISO 27001, SOC2, or ISAE audits
• Exposure to RBAC and ABAC provisioning models
• API or connector-based integrations for IAM platforms
• Prior experience partnering with HR/People teams on lifecycle automation

Responsibilities

• Design, implement, and support IAM solutions across Entra ID, AD, SailPoint, ServiceNow, and PAM platforms.
• Actively work IAM ticket queues, including access requests and JML events
• Execute joiner, mover, and leaver activities with accuracy and audit readiness
• Troubleshoot provisioning failures, sync issues, and access/authentication problems
• Support application onboarding and integration into IAM platforms
• Identify recurring operational issues and drive process improvements
• Assist with automation and standardization of identity lifecycle workflows
• Ensure access provisioning aligns with least privilege and compliance controls
• Partner cross-functionally with Security, Infrastructure, People Team, and Audit

Skills

IAM engineering

Entra ID/Azure AD

Active Directory

SailPoint IIQ/ISC

PAM (Privileged Access Management)

SOX audits / ISO 27001 / SOC2

RBAC/ABAC provisioning

APIs/integrations

HR lifecycle automation collaboration

Tools

ServiceNow

PAM platforms

Job description

Job Description

Insight Global is seeking an IAM Engineer (Identity & Access Management Engineer) to support a large, security-focused financial services organization. This role blends hands‑on IAM engineering with day‑to‑day operational execution, playing a key part in managing identity lifecycle events while helping modernize and automate IAM processes. The ideal candidate enjoys balancing ticket‑based execution with strategic improvement initiatives, thrives in collaborative environments, and is passionate about building secure, scalable, and audit‑ready identity services.

Day-to-Day

• Design, implement, and support IAM solutions across Entra ID, Active Directory, SailPoint, ServiceNow, and PAM platforms




• Actively work IAM ticket queues, including access requests and JML events




• Execute joiner, mover, and leaver activities with accuracy and audit readiness




• Troubleshoot provisioning failures, sync issues, and access/authentication problems




• Support application onboarding and integration into IAM platforms




• Identify recurring operational issues and drive process improvements




• Assist with automation and standardization of identity lifecycle workflows




• Ensure access provisioning aligns with least privilege and compliance controls




• Partner cross‑functionally with Security, Infrastructure, People Team, and Audit

Compensation

$45/hr - $50/hr

Exact compensation may vary based on several factors, including skills, experience, and education.

Employees in this role will enjoy a comprehensive benefits package starting on day one of employment, including options for medical, dental, and vision insurance. Eligibility to enroll in the 401(k) retirement plan begins after 90 days of employment. Additionally, employees in this role will have access to paid sick leave and other paid time off benefits as required under the applicable law of the worksite location.

We are a company committed to creating diverse and inclusive environments where people can bring their full, authentic selves to work every day. We are an equal opportunity/affirmative action employer that believes everyone matters. Qualified candidates will receive consideration for employment regardless of their race, color, ethnicity, religion, sex (including pregnancy), sexual orientation, gender identity and expression, marital status, national origin, ancestry, genetic factors, age, disability, protected veteran status, military or uniformed service member status, or any other status or characteristic protected by applicable laws, regulations, and ordinances. If you need assistance and/or a reasonable accommodation due to a disability during the application or recruiting process, please send a request to [e-mail] learn more about how we collect, keep, and process your private information, please review Insight Global's Workforce Privacy Policy: https://insightglobal.com/workforce-privacy-policy/.

Skills and Requirements

• 3-5 years hands‑on IAM engineering experience in enterprise environments




• Microsoft Entra ID (Azure AD): SSO, MFA, Conditional Access




• Active Directory (on-prem and hybrid environments)




• SailPoint (IIQ and/or ISC) experience




• Strong understanding of IAM lifecycle (Joiner, Mover, Leaver) - Privileged Access Management (PAM) experience




• Experience supporting SOX, ISO 27001, SOC2, or ISAE audits




• Exposure to RBAC and ABAC provisioning models




• API or connector‑based integrations for IAM platforms




• Prior experience partnering closely with HR / People teams on lifecycle automation