IAM Engineer

Insight Global; Richmond (VA); On-site; USD 50,000 - 58,000; Full time

Job summary

Insight Global is seeking an IAM Engineer to manage identity and access management in a modern enterprise environment. This role involves working with Entra (Azure AD), Ping, and CyberArk, handling integrations, provisioning users, and supporting platform health.

The ideal candidate has hands-on experience with identity platforms and a strong understanding of relevant protocols such as SAML, OIDC, and SCIM. The position offers a pay range of $50-58, depending on experience.

Qualifications

• Hands-on experience with Entra ID (Azure AD), Ping Identity, and CyberArk.
• Strong understanding of SAML, OIDC, SCIM, and identity lifecycle management.
• Experience in enterprise IAM operations including incident support and monitoring.

Responsibilities

• Manage and configure identity platforms including Entra ID, Ping, and CyberArk.
• Support user lifecycle management: provisioning and deprovisioning users.
• Monitor system health and troubleshoot access issues and incidents.

Skills

Entra ID (Azure AD)

Ping Identity (PingFederate / PingOne)

CyberArk

SAML

OIDC

SCIM

PowerShell

Ansible

Job description

Overview

We’re looking for an IAM Engineer to support identity and access management across a modern enterprise environment. This person will work across Entra (Azure AD), Ping, and CyberArk, handling identity integrations, access provisioning, and ongoing platform support.

Key Responsibilities

Manage and configure identity platforms including Entra ID (Azure AD), Ping, and CyberArk.

Set up and maintain:

• Application registrations
• Enterprise applications
• SAML, OIDC, and SCIM integrations

Handle certificates and secrets (renewals, rotations, and lifecycle management).

Support user lifecycle management:

• Provisioning / deprovisioning users
• Managing access across AD, Entra, and Ping

Monitor system health and performance across IAM tools.

Review logs and troubleshoot access issues, incidents, and outages.

Assist with audit support:

• Pulling evidence
• Validating controls and access compliance

Contribute to automation efforts to reduce manual work (scripts, workflows, etc.).

The pay range for this role is $50-58 depending on years of experience.

EEO Statement

We are a company committed to creating diverse and inclusive environments where people can bring their full, authentic selves to work every day. We are an equal opportunity/affirmative action employer that believes everyone matters. Qualified candidates will receive consideration for employment regardless of their race, color, ethnicity, religion, sex (including pregnancy), sexual orientation, gender identity and expression, marital status, national origin, ancestry, genetic factors, age, disability, protected veteran status, military or uniformed service member status, or any other status or characteristic protected by applicable laws, regulations, and ordinances. If you need assistance and/or a reasonable accommodation due to a disability during the application or recruiting process, please send a request to [e-mail]. To learn more about how we collect, keep, and process your private information, please review Insight Global's Workforce Privacy Policy: https://insightglobal.com/workforce-privacy-policy/.

Skills and Requirements

Hands‑on experience with:

• Entra ID (Azure AD)
• Ping Identity (PingFederate / PingOne)
• CyberArk

Strong understanding of:

• SAML, OIDC, and SCIM protocols
• Identity lifecycle management (joiner/mover/leaver)
• Experience working in enterprise IAM operations (incident support, troubleshooting, monitoring)
• Scripting/automation experience with PowerShell, Ansible, or similar