IAM Engineer

JPS Tech Solutions; Indiana (PA); On-site; USD 130,000 - 190,000; Full time

Job summary

JPS Tech Solutions seeks an Identity, Authentication & Authorization Architect to design and implement secure workforce identity solutions across hybrid and cloud environments.

The ideal candidate will have deep expertise in IAM, authentication, authorization, identity governance, Zero Trust, and cloud security, with experience guiding MFA, SSO, Conditional Access, and access controls across Java, React, and mobile apps.

Qualifications

• Proven expertise in IAM/IAA and identity governance.
• Deep knowledge of modern security protocols and cloud security.
• Experience with MFA, SSO, Conditional Access, and token/session management.
• Familiarity with OAuth, OIDC, SAML, Kerberos, LDAP and federation.
• Experience with Okta, PingFederate and CIEM is a plus.

Responsibilities

• Design IAM architectures aligned with security standards.
• Define authentication, authorization, and Zero Trust solutions.
• Guide security for applications across Java, React, and mobile platforms.
• Provide governance, risk, and compliance guidance for identity solutions.
• Evaluate IAM/security technologies across hybrid and cloud environments.

Skills

IAM

IAA

Authentication

Authorization

Identity Governance

Zero Trust

Cloud Security

MFA

SSO

LDAP

Tools

Okta

PingFederate

CIEM

Job description

Job Description:

Seeking a highly skilled Identity, Authentication & Authorization Architect (IAA) to design and implement secure workforce identity solutions across hybrid and cloud environments. The ideal candidate will have deep expertise in IAM, authentication, authorization, identity governance, modern security protocols, Zero Trust, and cloud security.

Key Responsibilities

• Design identity-centric Workforce Security and IAM architectures aligned with NIST, COBIT, SOC, GDPR, and other security standards.
• Define secure authentication, authorization, access patterns, and Zero Trust / Least Privilege solutions.
• Provide cybersecurity architecture guidance for MFA, SSO, Conditional Access, Passwordless, VPN, PAM, RBAC, JIT Access, Secrets & Certificate Management.
• Design and review solutions using OAuth, OIDC, SAML, Kerberos, LDAP, Identity Federation, token and session management.
• Provide security consultation for Java microservices, React applications, and Android/iOS applications.
• Design IAM roadmaps and target architectures considering security controls, audit, risk, and compliance requirements.
• Apply threat modeling, cyber risk management, supply-chain risk, and third-party security principles.
• Provide guidance on CIEM and cloud entitlement management to improve security posture.
• Evaluate and recommend IAM/security technologies across hybrid and cloud environments.

Required Skills

• Strong expertise in IAM, IAA, Authentication, Authorization, and Identity Governance.
• Deep experience with Microsoft Entra ID (Azure AD), Azure, M365, Microsoft Sentinel, EPM, and AWS Security.
• Strong knowledge of OAuth 2.0, OIDC, SAML, SSO, MFA, Conditional Access, LDAP, Kerberos, and Federation.
• Experience with Okta, PingFederate, PAM, CIEM, and entitlement management.
• Strong understanding of Zero Trust, Least Privilege, Defense in Depth, Cryptography, Secrets Management, and Cloud Security.
• Knowledge of Agentic Architectures and Agentic Identity.
• Strong understanding of cybersecurity frameworks, identity governance, regulatory requirements, and security controls.
• Excellent architecture, consulting, communication, and cross-functional collaboration skills.