IAM Engineer

The Clearing House; Town of Liberty (NY); Hybrid; USD 110,000 - 150,000; Full time

Job summary

The Clearing House is seeking a mid-level Identity & Access Management Engineer to design, implement, and support secure identity solutions across the organization. This role partners with security, IT, and application teams to ensure users have the right access to the right systems at the right time—while maintaining strong security and compliance standards.

The ideal candidate has hands-on IAM experience and is comfortable in a hybrid or cloud-first environment.

Qualifications

• 5+ years of experience in Identity & Access Management, cybersecurity, or related IT roles.

Responsibilities

• Design, implement, and maintain IAM solutions for workforce and application access.
• Manage identity lifecycle processes including provisioning, deprovisioning, role management, and access reviews.
• Support and enhance SSO, MFA, and federation integrations.
• Integrate IAM platforms with cloud services, SaaS applications, and on-prem systems.
• Collaborate with security, compliance, and audit teams to meet regulatory and policy requirements.
• Troubleshoot access issues and provide Tier 2/3 IAM support.
• Develop and maintain IAM documentation, standards, and procedures.
• Participate in IAM-related projects, upgrades, and security initiatives.
• Monitor IAM systems for performance, availability, and security events.

Skills

Okta

Azure AD/Entra ID

SAML/OIDC/OAuth

Identity lifecycle

Cloud security

Tools

PowerShell

Python

Job description

Position Summary:

We are seeking a mid-level Identity & Access Management (IAM) Engineer to help design, implement, and support secure identity solutions across the organization. This role partners closely with security, IT, and application teams to ensure users have the right access to the right systems at the right time—while maintaining strong security and compliance standards. The ideal candidate has hands-on IAM experience, understands modern identity architectures, and is comfortable operating in a hybrid or cloud-first environment.

Key Responsibilities:

• Design, implement, and maintain IAM solutions for workforce and application access
• Manage identity lifecycle processes including provisioning, deprovisioning, role management, and access reviews
• Support and enhance Single Sign-On (SSO), Multi-Factor Authentication (MFA), and federation integrations
• Integrate IAM platforms with cloud services, SaaS applications, and on-prem systems
• Collaborate with security, compliance, and audit teams to meet regulatory and policy requirements
• Troubleshoot access issues and provide Tier 2/3 IAM support
• Develop and maintain IAM documentation, standards, and procedures
• Participate in IAM-related projects, upgrades, and security initiatives
• Monitor IAM systems for performance, availability, and security events

Qualifications Required:

• 5+ years of experience in Identity & Access Management, cybersecurity, or related IT roles
• Hands-on experience with IAM platforms (e.g., Okta, Azure AD / Entra ID, Ping, SailPoint, ForgeRock, CyberArk)
• Strong understanding of authentication and authorization concepts (SSO, MFA, OAuth, OIDC, SAML)
• Experience with Active Directory and/or LDAP
• Familiarity with cloud environments (AWS, Azure, or GCP)
• Ability to troubleshoot complex identity and access issues
• Strong communication skills and ability to work cross-functionally

Qualifications Desired:

• Experience with identity governance and administration (IGA) tools
• Scripting or automation experience (PowerShell, Python, or similar)
• Knowledge of zero trust and least-privilege access models
• Experience supporting compliance frameworks (SOX, SOC 2, ISO 27001, etc.)
• Relevant certifications (e.g., Azure Identity, Okta, CISSP, Security+, or similar

Physical demands and work environment:

Work is generally sedentary in nature. The working environment is generally favorable. Lighting and temperature are adequate, and there are no hazardous or unpleasant conditions caused by noise, dust, etc. Work is generally performed within an office environment, with standard office equipment available.