IAM Engineer

The Clearing House; North Carolina; Ibrido; USD 90.000 - 130.000; Tempo pieno

Descrizione del lavoro

The Clearing House is seeking a mid-level Identity & Access Management (IAM) Engineer to design, implement, and support secure identity solutions across the organization. You will partner with security, IT, and application teams to ensure users have the right access at the right time while upholding security and compliance standards.

The ideal candidate has hands-on IAM experience, understands modern identity architectures, and is comfortable operating in a hybrid or cloud-first environment.

Competenze

• 5+ years of IAM experience in cybersecurity or related IT roles.
• Hands-on experience with IAM platforms (Okta, Azure AD / Entra ID, Ping, SailPoint, ForgeRock, CyberArk).
• Strong understanding of authentication and authorization concepts (SSO, MFA, OAuth, OIDC, SAML).
• Experience with Active Directory and/or LDAP.
• Familiarity with cloud environments (AWS, Azure, or GCP).
• Ability to troubleshoot complex identity and access issues.
• Strong communication skills and ability to work cross-functionally.

Mansioni

• Design, implement, and maintain IAM solutions for workforce and application access
• Manage identity lifecycle processes including provisioning, deprovisioning, role management, and access reviews
• Support and enhance Single Sign-On (SSO), Multi-Factor Authentication (MFA), and federation integrations
• Integrate IAM platforms with cloud services, SaaS applications, and on-prem systems
• Collaborate with security, compliance, and audit teams to meet regulatory and policy requirements
• Troubleshoot access issues and provide Tier 2/3 IAM support
• Develop and maintain IAM documentation, standards, and procedures
• Participate in IAM-related projects, upgrades, and security initiatives
• Monitor IAM systems for performance, availability, and security events

Conoscenze

IAM concepts

Identity governance

Cross-functional collaboration

Troubleshooting

Security & compliance

Strumenti

Okta

Azure AD / Entra ID

Ping Identity

SailPoint

ForgeRock

CyberArk

OAuth/OIDC/SAML

Descrizione del lavoro

Position Summary

We are seeking a mid-level Identity & Access Management (IAM) Engineer to help design, implement, and support secure identity solutions across the organization. This role partners closely with security, IT, and application teams to ensure users have the right access to the right systems at the right time—while maintaining strong security and compliance standards. The ideal candidate has hands-on IAM experience, understands modern identity architectures, and is comfortable operating in a hybrid or cloud-first environment.

Key Responsibilities

• Design, implement, and maintain IAM solutions for workforce and application access


• Manage identity lifecycle processes including provisioning, deprovisioning, role management, and access reviews


• Support and enhance Single Sign-On (SSO), Multi-Factor Authentication (MFA), and federation integrations


• Integrate IAM platforms with cloud services, SaaS applications, and on-prem systems


• Collaborate with security, compliance, and audit teams to meet regulatory and policy requirements


• Troubleshoot access issues and provide Tier 2/3 IAM support


• Develop and maintain IAM documentation, standards, and procedures


• Participate in IAM-related projects, upgrades, and security initiatives


• Monitor IAM systems for performance, availability, and security events

Qualifications Required

• 5+ years of experience in Identity & Access Management, cybersecurity, or related IT roles


• Hands-on experience with IAM platforms (e.g., Okta, Azure AD / Entra ID, Ping, SailPoint, ForgeRock, CyberArk)


• Strong understanding of authentication and authorization concepts (SSO, MFA, OAuth, OIDC, SAML)


• Experience with Active Directory and/or LDAP


• Familiarity with cloud environments (AWS, Azure, or GCP)


• Ability to troubleshoot complex identity and access issues


• Strong communication skills and ability to work cross-functionally

Qualifications Desired

• Experience with identity governance and administration (IGA) tools


• Scripting or automation experience (PowerShell, Python, or similar)


• Knowledge of zero trust and least-privilege access models


• Experience supporting compliance frameworks (SOX, SOC 2, ISO 27001, etc.)


• Relevant certifications (e.g., Azure Identity, Okta, CISSP, Security+, or similar

Physical demands and work environment

Work is generally sedentary in nature. The working environment is generally favorable. Lighting and temperature are adequate, and there are no hazardous or unpleasant conditions caused by noise, dust, etc. Work is generally performed within an office environment, with standard office equipment available.