IAM Engineer

The Clearing House; Northern (KY); Hybrid; USD 110,000 - 140,000; Full time

Job summary

The Clearing House is seeking a mid-level IAM Engineer to design, implement, and support secure identity solutions across the organization. You will partner with security, IT, and application teams to ensure proper access controls and regulatory alignment.

Ideal candidates have hands-on IAM experience, understand modern identity architectures, and are comfortable in a hybrid or cloud-first environment, delivering reliable authentication and authorization services with SSO, MFA, and federation

Qualifications

• 5+ years of experience in Identity & Access Management, cybersecurity, or related IT roles.
• Hands-on experience with IAM platforms (e.g., Okta, Azure AD / Entra ID, Ping, SailPoint, ForgeRock, CyberArk)
• Strong understanding of authentication and authorization concepts (SSO, MFA, OAuth, OIDC, SAML)
• Experience with Active Directory and/or LDAP
• Familiarity with cloud environments (AWS, Azure, or GCP)
• Ability to troubleshoot complex identity and access issues
• Strong communication skills and ability to work cross-functionally

Responsibilities

• Design, implement, and maintain IAM solutions for workforce and application access
• Manage identity lifecycle processes including provisioning, deprovisioning, role management, and access reviews
• Support and enhance Single Sign-On (SSO), Multi-Factor Authentication (MFA), and federation integrations
• Integrate IAM platforms with cloud services, SaaS applications, and on-prem systems
• Collaborate with security, compliance, and audit teams to meet regulatory and policy requirements
• Troubleshoot access issues and provide Tier 2/3 IAM support
• Develop and maintain IAM documentation, standards, and procedures
• Participate in IAM-related projects, upgrades, and security initiatives
• Monitor IAM systems for performance, availability, and security events

Skills

Identity & Access Management

Cybersecurity

Cloud authentication concepts

Tools

Okta

Azure AD / Entra ID

Ping

SailPoint

ForgeRock

CyberArk

Job description

## IAM EngineerApplylocations: North Carolina Office: Liberty NY Officetime type: Full timeposted on: Posted 6 Days Agojob requisition id: JR100088**Position Summary:**We are seeking a mid-level Identity & Access Management (IAM) Engineer to help design, implement, and support secure identity solutions across the organization. This role partners closely with security, IT, and application teams to ensure users have the right access to the right systems at the right time—while maintaining strong security and compliance standards. The ideal candidate has hands-on IAM experience, understands modern identity architectures, and is comfortable operating in a hybrid or cloud-first environment.**Key Responsibilities:*** Design, implement, and maintain IAM solutions for workforce and application access* Manage identity lifecycle processes including provisioning, deprovisioning, role management, and access reviews* Support and enhance Single Sign-On (SSO), Multi-Factor Authentication (MFA), and federation integrations* Integrate IAM platforms with cloud services, SaaS applications, and on-prem systems* Collaborate with security, compliance, and audit teams to meet regulatory and policy requirements* Troubleshoot access issues and provide Tier 2/3 IAM support* Develop and maintain IAM documentation, standards, and procedures* Participate in IAM-related projects, upgrades, and security initiatives* Monitor IAM systems for performance, availability, and security events**Qualifications Required:*** 5+ years of experience in Identity & Access Management, cybersecurity, or related IT roles* Hands-on experience with IAM platforms (e.g., Okta, Azure AD / Entra ID, Ping, SailPoint, ForgeRock, CyberArk)* Strong understanding of authentication and authorization concepts (SSO, MFA, OAuth, OIDC, SAML)* Experience with Active Directory and/or LDAP* Familiarity with cloud environments (AWS, Azure, or GCP)* Ability to troubleshoot complex identity and access issues* Strong communication skills and ability to work cross-functionally**Qualifications Desired:*** Experience with identity governance and administration (IGA) tools* Scripting or automation experience (PowerShell, Python, or similar)* Knowledge of zero trust and least-privilege access models* Experience supporting compliance frameworks (SOX, SOC 2, ISO 27001, etc.)* Relevant certifications (e.g., Azure Identity, Okta, CISSP, Security+, or similar**Physical demands and work environment:**Work is generally sedentary in nature. The working environment is generally favorable. Lighting and temperature are adequate, and there are no hazardous or unpleasant conditions caused by noise, dust, etc. Work is generally performed within an office environment, with standard office equipment available.