IAM Engineer-

Associates Systems LLC; Irving (TX); On-site; USD 120,000 - 160,000; Full time

Job summary

Associates Systems LLC is seeking a Hands-on Senior Identity and Access Management Engineer to join our cybersecurity team supporting a large enterprise environment. You will be the dedicated owner of the organization’s Identity Governance and Administration program and play a key role in strengthening access governance, identity lifecycle management, and application security.

This is a highly visible role that partners with IT, cybersecurity, compliance, application owners, and business

Qualifications

• Bachelor's degree or equivalent professional experience.
• Six+ years in Identity and Access Management, cybersecurity, or information security.
• Two+ years hands-on admin experience with an enterprise IGA platform.
• Hands-on with CyberArk, Saviynt, ObserveIT, plus OKTA including Lifecycle Management.
• Strong understanding of identity governance, access controls, and lifecycle management.
• Experience designing or improving Joiner/Leaver workflows.
• Experience with RBAC, access certifications, and entitlement governance.
• Two+ years scripting/automation with PowerShell or Python.
• Experience integrating identity platforms with REST APIs and protocols like SCIM/SAML.

Responsibilities

• Own the Identity Governance and Administration platform and processes.
• Administer and support IAM/IGA technologies including CyberArk, Saviynt, ObserveIT, and OKTA.
• Manage user provisioning, de-provisioning, and access changes across the lifecycle.
• Design and improve Joiner, Mover, Leaver workflows.
• Develop RBAC models and access governance standards.
• Support OKTA Lifecycle Management and app integrations.
• Participate in access reviews, certifications, and remediation.
• Integrate IAM/IGA with enterprise apps via REST APIs, SCIM, SAML.
• Develop automation scripts using PowerShell or Python.
• Document procedures, standards, and runbooks.
• Mentor teammates and communicate progress to leadership.

Skills

Identity governance

Access controls

Identity lifecycle

Communication

Education

Bachelor's degree

Tools

CyberArk

Saviynt

ObserveIT

OKTA

Postman

PowerShell

Python

REST APIs

SCIM

Job description

Hands-on Senior Identity and Access Management Engineer to join a growing cybersecurity team supporting a large enterprise environment. This individual will serve as the dedicated owner of the organization s Identity Governance and Administration program and play a key role in strengthening access governance, identity lifecycle management, and application security.

This is a highly visible position that will partner with IT, cybersecurity, compliance, application owners, and business leadership. The ideal candidate is technically strong, comfortable working in a fast-paced environment, and able to clearly communicate identity initiatives, risks, and recommendations to senior leaders.

Key Responsibilities

• Serve as the primary owner of the company s Identity Governance and Administration platform and processes.
• Administer and support enterprise IGA and IAM technologies, including CyberArk, Saviynt, ObserveIT, and OKTA.
• Manage user provisioning, de-provisioning, and access changes throughout the employee lifecycle.
• Design, implement, and improve Joiner, Mover, and Leaver workflows.
• Develop and maintain Role-Based Access Control models and access governance standards.
• Support OKTA Lifecycle Management and integrations with enterprise applications.
• Participate in periodic access reviews, access certifications, and entitlement remediation.
• Support Segregation of Duties controls and identify potentially conflicting access.
• Integrate IAM and IGA platforms with enterprise applications using REST APIs, SCIM, SAML, and related protocols.
• Use Postman and similar tools for API testing, troubleshooting, and validation.
• Develop scripts and automation using PowerShell, Python, or equivalent technologies.
• Identify opportunities to replace manual access management processes with scalable automated solutions.
• Support access control audits, risk remediation, compliance reviews, and governance initiatives.
• Work with application owners, security teams, infrastructure teams, and business stakeholders to implement secure access solutions.
• Develop and maintain technical documentation, procedures, standards, and operational runbooks.
• Troubleshoot complex IAM, application-integration, provisioning, and authentication issues.
• Communicate project progress, technical challenges, risks, and recommendations to senior leadership.
• Mentor junior team members and provide technical guidance when needed.
• Contribute to the continuous improvement of the company s cybersecurity and identity governance programs.

Required Qualifications

• Bachelor s degree or equivalent professional experience.
• At least six years of direct Identity and Access Management, cybersecurity, or information security experience.
• At least two years of hands-on experience administering an enterprise IGA platform.
• Hands-on experience with one or more of the following:
  • CyberArk
  • Saviynt
  • ObserveIT
  • Hands-on experience administering OKTA, including OKTA Lifecycle Management.
• Strong understanding of identity governance, access controls, and identity lifecycle management.
• Experience creating or improving Joiner, Mover, and Leaver workflows.
• Experience designing, implementing, or supporting Role-Based Access Control.
• Experience with access certifications, access reviews, and entitlement governance.
• At least two years of scripting and automation experience using PowerShell, Python, or an equivalent language.
• Experience integrating identity platforms and enterprise applications using REST APIs.
• Knowledge of SCIM, SAML, API-based provisioning, and identity federation concepts.
• Experience using Postman or similar tools for API testing and validation.
• Strong troubleshooting, analytical, documentation, and problem-solving skills.
• Excellent communication skills, including the ability to explain technical work to business stakeholders and senior leadership.
• Ability to operate effectively in a fast-paced environment, manage changing priorities, and adjust course when needed.
• Strong team-oriented mindset and willingness to collaborate across technical and business groups.

Clearance not required but preferred.

Preferred Qualifications

• Experience supporting large-scale enterprise identity programs.
• Experience working in healthcare or another highly regulated industry.
• Knowledge of identity governance and security frameworks, including:
  • NIST 800-63
  • ISO 27001
  • HITRUST

#CJ