IAM Engineer

RELQ TECHNOLOGIES LLC; Irving (TX); Hybrid; USD 150,000 - 210,000; Full time

Job summary

RELQ TECHNOLOGIES LLC is seeking a highly experienced Principal IAM Engineer to lead the design, engineering, and deployment of next-generation identity security capabilities across the enterprise from Irving, TX. Hybrid role with optional remote work and on-site collaboration required.

You will collaborate with cybersecurity, infrastructure, engineering, architecture, and product teams to advance identity security initiatives, focusing on attack path analysis, identity threat protection, and

Qualifications

• Extensive hands-on IAM architecture experience with enterprise-scale deployments.
• Proven track record delivering identity security programs aligned to Zero Trust.
• Experience implementing PBAC, PBAC-driven access controls and identity governance.

Responsibilities

• Define and drive enterprise identity security roadmaps aligned with Zero Trust principles.
• Design scalable IAM architectures for modern workforce, privileged, and machine identities.
• Develop identity-centric security controls to reduce attack surfaces and identity-based threats.
• Establish architectural standards for authentication, authorization, and access governance.

Skills

IAM Architecture

Zero Trust

PBAC

Authentication & Authorization

Risk-Based Authentication

ITDR

MFA

PAM

SSO

Identity Governance

Tools

Sgnl.ai

PlainID

CrowdStrike Identity Protection

Entra ID / Azure AD

Job description

Job Title: IAM Engineer

Level Required for Primary Skill Advanced (12+ years of US experience)

Checklist

• Identity and Access Management (IAM)
• IAM Engineer
• Advanced Cyber Security Engineer

Additional Details for Role Location: 3+ Days in Irving, TX (Dallas/FTW) preferred, but remote as of now

We are seeking a highly experienced Principal Identity Security Architect & Product Engineering Lead to drive the design, engineering, and deployment of next-generation identity security capabilities across the enterprise. This role will lead initiatives focused on attack path analysis, identity threat protection, authentication modernization, policy-based access control (PBAC), and identity-driven attack containment.

The successful candidate will combine deep expertise in IAM architecture, Zero Trust security models, and identity security products, including Sgnl.ai, PlainID, Entra ID (Azure AD), and CrowdStrike Identity Protection, to build and operationalize scalable identity-centric security solutions that reduce risk, improve resilience, and enhance user access experiences.

This position will collaborate closely with cybersecurity, infrastructure, engineering, architecture, and product teams to advance strategic identity security initiatives and support the organization's cyber defense transformation.

Key Responsibilities

Identity Security Strategy & Architecture

• Define and execute enterprise identity security roadmaps aligned with Zero Trust principles.
• Design scalable IAM architectures supporting modern workforce, privileged, and machine identities.
• Develop identity-centric security controls that reduce attack surfaces and prevent identity-based threats.
• Establish architectural standards for authentication, authorization, and access governance.

Product Engineering & Security Platforms

• Lead engineering and deployment activities for:
• Sgnl.ai
• PlainID
• CrowdStrike Identity Protection
• Entra ID (Azure AD)
• Authentication and authorization platforms
• Partner with product vendors and internal engineering teams to deliver secure, scalable solutions.
• Drive integration of identity security capabilities into enterprise applications and infrastructure.

Identity Threat Protection & Attack Path Analysis

• Expand attack path mapping capabilities to identify and remediate exploitable identity-based attack vectors.
• Implement identity threat detection, risk scoring, and attack containment capabilities.
• Develop processes to proactively identify privilege escalation paths and lateral movement opportunities.
• Enhance visibility into identity relationships, entitlements, and access risks across the enterprise.

Authentication & Access Modernization

• Support enhancements to authentication services, including Citi Authenticator capabilities and user experience improvements.
• Accelerate adoption of strong authentication and adaptive access controls.
• Advance Policy-Based Access Control (PBAC) initiatives utilizing platforms such as PlainID.
• Drive identity-aware authorization models that improve security while reducing operational complexity.

Risk-Based Security

• Design identity-risk models that enable adaptive authentication and access decisions.
• Leverage identity intelligence to support continuous verification and Zero Trust access controls.

Required Skills & Experience

Identity & Access Management

• Deep expertise in IAM architecture and identity security frameworks.
• Experience with:
• Entra ID (Azure AD)
• Single Sign-On (SSO)
• Multi-Factor Authentication (MFA)
• Identity Governance
• Access Management
• Privileged Access Management (PAM)
• Federation and modern authentication protocols

Product Expertise

• Strong hands-on experience with:
• Sgnl.ai
• PlainID
• CrowdStrike Identity Protection
• Entra ID / Azure AD
• Proven ability to engineer, integrate, and operationalize enterprise security products.
• Security Architecture
• Strong understanding of:
• Zero Trust Architecture
• Identity Threat Detection and Response (ITDR)
• Attack Path Analysis
• Authorization Frameworks
• Policy-Based Access Control (PBAC)
• Risk-Based Authentication
• Engineering & Technical Skills
• Strong product engineering and solution delivery experience.

Experience integrating security