IAM engineer

EPAM; United States; Hybrid; USD 140,000 - 220,000; Full time

Benefits offered by this job

Relocation opportunities

Certifications (GCP, Azure and AWS)

Learning database access

Free English classes

Stock Purchase Plan

Medical & family care package

Trust days

Job summary

EPAM ищет Lead IAM Engineer для управления настройкой и интеграцией приложений в SailPoint, используя скрипты PowerShell и AI-ускорение для оптимизации рабочих процессов provisioning.

Вы будете курировать пайплайн из более чем 600 приложений, проектировать формы доступа и поддерживать правила коннекторов через AI-модули. Взаимодействие с владельцами приложений обязательно.

Qualifications

• 5+ лет в IAM-инженерии с hands-on опытом настройки SailPoint IGA (IdentityNow или IdentityIQ).
• Умение писать чистые PowerShell скрипты, с использованием AI-инструментов для ускорения генерации и отладки.
• Умение читать/писать JSON и XML конфигурации.
• Практический опыт с JDBC, LDAP, Active Directory, REST/SCIM API.
• Понимание архитектуры IAM, RBAC, маппинг идентичности и жизненного цикла управления.

Responsibilities

• Вести техническую настройку и полный цикл интеграции приложений в SailPoint.
• Создавать и управлять пайплайном из более чем 600 приложений.
• Разрабатывать формы запросов доступа с валидацией и удобством использования.
• Разрабатывать и поддерживать PowerShell-скрипты с использованием AI-инструментов для коннекторов.
• Автоматизировать provisioning-воркфлоу и агрегацию данных.
• Работать с владельцами приложений и стейкхолдерами на этапе onboarding.

Skills

IAM инженерия

PowerShell

SailPoint IGA

RBAC и управление доступом

Коммуникация и коллаборация

AI-ассистированные инструменты

Tools

PowerShell

SailPoint

Copilot/ChatGPT

Job description

Описание

Описание: We are seeking a Lead IAM Engineer to drive the technical configuration and integration of applications into the SailPoint platform, while leveraging scripting expertise and AI-acceleration tools to streamline provisioning workflows and support a large-scale application pipeline.

Задачи

• Lead the technical configuration and end-to-end integration of target applications into the SailPoint platform
• Create and manage an application pipeline with more than 600 apps
• Design, test, and implement dynamic user-facing access request forms with smooth validation logic and optimal user experience
• Develop, optimize, and maintain PowerShell scripts using AI-acceleration tools to build custom connector rules
• Handle data aggregation and automate provisioning workflows
• Act as the subject matter expert to diagnose and resolve errors related to data aggregation, connectivity, API webhooks, and provisioning failures
• Map complex business permissions into structured SailPoint configurations
• Interface with application owners and business stakeholders during the onboarding process

Требования

• 5+ years of experience in IAM engineering, with hands-on expertise configuring and administering SailPoint IGA solutions (IdentityNow or IdentityIQ)
• Proficiency in writing clean, reliable PowerShell scripts, with flexibility to use AI-assistants (e.g., Copilot, ChatGPT) to accelerate script generation and debugging
• Proficiency in reading, writing, and editing JSON and XML configurations
• Practical experience with standard connector types including JDBC, LDAP, and Active Directory, as well as REST/SCIM APIs
• Understanding of IAM architecture, Role-Based Access Control (RBAC), identity mapping, and core governance lifecycle frameworks
• Strong analytical mindset with excellent collaboration and communication skills, valued as highly as technical expertise
• Familiarity with emerging IAM technologies and AI productivity tools, with the ability to showcase best practices
• English proficiency at B2 level or higher

Условия

• We connect like-minded people
• Delivering innovative solutions to industry leaders, making a global impact
• Enjoyable working environment, whether it is the vibrant office or the comfort of your home
• Opportunity to work abroad for up to two months per year
• Relocation opportunities within our offices in 55+ countries
• Corporate and social events
• Leadership development, career advising, soft skills and well-being programs
• Certifications, including GCP, Azure and AWS
• Unlimited access to EPAM's internal learning database
• Free English classes with certified teachers
• Participation in the Employee Stock Purchase Plan
• Monetary bonuses for engaging in the referral program
• Comprehensive medical & family care package
• Four trust days per year for personal needs
• Discounts for fitness clubs
• Benefits package (hotels, restaurants, stores and services)