IAM Engineer

Insight Global; Richmond (VA); On-site; USD 69,000 - 80,000; Full time

Job summary

Insight Global is seeking an IAM Engineer to support identity management across a modern enterprise. You will work with Entra ID (Azure AD), Ping, and CyberArk to handle identity integrations and access provisioning.

You will set up registrations and integrations (SAML, OIDC, SCIM), manage user provisioning/deprovisioning, and monitor IAM operations across the stack. Strong scripting/automation skills help reduce manual work.

Qualifications

• Hands-on experience with Entra ID (Azure AD), Ping Identity, and CyberArk.
• Strong understanding of SAML, OIDC, and SCIM protocols.
• Experience with identity lifecycle management (joiner/mover/leaver) and enterprise IAM operations.

Responsibilities

• Manage and configure identity platforms including Entra ID (Azure AD), Ping, and CyberArk.
• Set up and maintain: application registrations, enterprise applications, and integrations (SAML, OIDC, SCIM).
• Provide provisioning/deprovisioning of users and manage access across IAM tools.
• Monitor system health and performance across IAM tools; review logs and troubleshoot access issues, incidents, and outages.
• Assist with audit support: pull evidence and validate controls and access compliance.
• Contribute to automation efforts to reduce manual work (scripts, workflows, etc.).

Skills

Entra ID (Azure AD)

Ping Identity

CyberArk

SAML / OIDC / SCIM

Identity lifecycle management

Enterprise IAM operations

PowerShell

Ansible

Tools

PowerShell

Ansible

Job description

Job Description

Overview:

We're looking for an IAM Engineer to support identity and access management across a modern enterprise environment. This person will work across Entra (Azure AD), Ping, and CyberArk, handling identity integrations, access provisioning, and ongoing platform support.

Key Responsibilities

Manage and configure identity platforms including Entra ID (Azure AD), Ping, and CyberArk

Set up and maintain:

• Application registrations
• Enterprise applications
• SAML, OIDC, and SCIM integrations
• Handle certificates and secrets (renewals, rotations, and lifecycle management)

Support user lifecycle management:

• Provisioning / deprovisioning users
• Managing access across AD, Entra, and Ping

• Monitor system health and performance across IAM tools
• Review logs and troubleshoot access issues, incidents, and outages

Assist with audit support:

• Pulling evidence
• Validating controls and access compliance

• Contribute to automation efforts to reduce manual work (scripts, workflows, etc.)

The pay range for this role is $50-58 depending on years of experience.

We are a company committed to creating diverse and inclusive environments where people can bring their full, authentic selves to work every day. We are an equal opportunity/affirmative action employer that believes everyone matters. Qualified candidates will receive consideration for employment regardless of their race, color, ethnicity, religion, sex (including pregnancy), sexual orientation, gender identity and expression, marital status, national origin, ancestry, genetic factors, age, disability, protected veteran status, military or uniformed service member status, or any other status or characteristic protected by applicable laws, regulations, and ordinances. If you need assistance and/or a reasonable accommodation due to a disability during the application or recruiting process, please send a request to [e-mail] learn more about how we collect, keep, and process your private information, please review Insight Global's Workforce Privacy Policy: https://insightglobal.com/workforce-privacy-policy/.

Skills and Requirements

Hands-on experience with:

• Entra ID (Azure AD)
• Ping Identity (PingFederate / PingOne)
• CyberArk

Strong understanding of:

• SAML, OIDC, and SCIM protocols
• Identity lifecycle management (joiner/mover/leaver)
• Experience working in enterprise IAM operations (incident support, troubleshooting, monitoring)

• Scripting/automation experience with PowerShell, Ansible, or similar