IAM Engineer

Acestack; Sunnyvale (CA); On-site; USD 120,000 - 160,000; Full time

Job summary

Acestack in Sunnyvale, CA seeks an IAM Engineer to implement and optimize enterprise IAM across applications and platforms. You will manage user lifecycles, access governance, provisioning, directory services, and integrations using Okta, SailPoint, and AD.

Automation and remediation workflows are key to this role. The ideal candidate brings hands-on IAM experience, app onboarding expertise, and the ability to implement SAML/LDAP/SCIM connectors while contributing to migration and modernization

Qualifications

• Experience with identity management in large enterprise environments.
• Hands-on engineering in identity administration, troubleshooting, and onboarding.
• Ability to integrate applications with IAM platforms (Okta, SailPoint, AD).
• Experience implementing SAML, LDAP, SCIM, and API-based connectors.
• Strong focus on automation and migration projects.

Responsibilities

• Implement, support, and optimize IAM solutions across enterprise environments.
• Focus on user lifecycle management (JML), access governance, authentication services, identity provisioning, and directory services.
• Integrate apps with IAM platforms and implement automation/remediation workflows.
• Test and validate app onboarding activities and participate in migration projects.
• Collaborate with teams to modernize IAM infrastructure.

Skills

User lifecycle management

Access governance

Authentication services

Identity provisioning

Directory services

Okta

SailPoint

Microsoft Active Directory

Automation

Remediation workflow automation

App onboarding

SAML/LDAP/SCIM

Tools

Terraform

Ansible

Jenkins

Job description

Role: IAM Engineer

Location: Sunnyvale, CA (Onsite)

Fulltime Permanent

Job Description

Must Have Technical/Functional Skills

user lifecycle management (JML); access governance; authentication services; identity provisioning; directory services; and application integrations utilizing Okta; SailPoint; and Microsoft Active Directory technologies; Okta; SailPoint IdentityIQ/ISC; Microsoft Active Directory; Experience supporting large enterprise environments; Okta application onboarding; automation; and remediation workflow automation

Roles & Responsibilities

The IAM Engineer is responsible for implementing, supporting, and optimizing Identity and Access Management solutions across enterprise environments. The role focuses on user lifecycle management (JML), access governance, authentication services, identity provisioning, directory services, and application integrations utilizing Okta, SailPoint, and Microsoft Active Directory technologies.

The ideal candidate should have hands‑on engineering experience in identity administration, troubleshooting, application onboarding, automation, and access governance processes, Integrate applications with IAM platforms, Implement SAML, LDAP, SCIM, and API‑based connectors, Test and validate application onboarding activities, Participate in migration and modernization projects.

App onboarding used to take 20 hours per app before automation, and after automation it is reduced by 50% - including breakdown of steps for app onboarding and which all steps are eliminated via automation

Generic Managerial Skills, If any

Digital: Terraform; Digital : Ansible; Digital : Jenkins