IAM Engineer

TEKsystems; United States; Hybrid; USD 76,000 - 83,000; Full time

Benefits offered by this job

Medical, dental & vision

401(k) Retirement Plan

Life Insurance

Short and long-term disability

Health Spending Account (HSA)

Transportation benefits

Employee Assistance Program

Time Off/Leave (PTO, Vacation or Sick)

Job summary

TEKsystems seeks a Senior Infrastructure Operations Analyst to own identity access management initiatives. You will design, implement, and manage access policies, lifecycle events, and authentication systems, collaborating with teams to shape technical direction.

The role requires PKI, Entra ID, SSO, SAML proficiency, scripting for automation, and strong communication. This contract hybrid position is based in Owings Mills, MD, with a pay range of $55–$60/hr.

Qualifications

• Bachelor's degree or the equivalent combination of education and relevant experience.
• 5+ years of total relevant work experience.
• Extensive understanding of PKI, X.509 Certificates, Venafi CLM, and SCEP.
• Deep Knowledge of MS Active Directory Certificate Services and external certificate partners like Digicert.
• Identity-based infrastructure including Entra ID, DNS and DHCP.
• Windows and Linux OS with certificate usage knowledge.
• Experience with PowerShell and/or Python for automation.
• Strong written and verbal communication; able to work off-hours when needed.

Responsibilities

• Identify, plan, and execute Certificate Lifecycle Management (CLM) driven projects.
• Fulfill service requests in ServiceNow related to Identity technologies.
• Monitor health of in-scope systems and improve observability across services.
• Perform Incident and Problem management as needed.
• Work with Enterprise Security to address findings from tests and scans.
• Plan and migrate on-prem workloads as part of Data Center Exit strategy.

Skills

Certificate Management

Entra ID

SSO

SAML

PowerShell

Python

Education

Bachelor's degree or equivalent

Tools

MS ADCS

Venafi CLM

Digicert

Job description

Contract role, Hybrid On-site role in Owings Mill, MD

Top Skills' Details

1. 5+ years of Certificate Management Experience

2. Entra ID, SSO, SAML experience - 5 + years

3. Scripting experience - Python or Powershell preferred

Description

A Senior Infrastructure Operations Analyst on the Identity Access Management team secures digital identities by designing, implementing, and managing access policies, user lifecycles (onboarding/offboarding), and authentication systems. This requires advanced identity management domain expertise and related security disciplines. The position leads high‑profile initiatives, applies rigorous analysis to deliver innovative solutions, and establishes identity management standards across the organization. This role is an individual contributor who will be required to work closely with others to influence technical direction in this discipline and partner on the implementation of solutions.

The candidate must have experience in the following areas:

Access Governance: Define and manage user access roles, permissions, and entitlements based on the principle of least privilege.

Identity Lifecycle Management: Understanding all aspects of Identity – Human, Machine, and Agent/Application.

System Administration: Maintain IAM platforms (e.g., Entra ID, Venafi, MS ADCS) and directory services.

Security & Compliance: Perform access reviews, audit logs for unauthorized access, and ensure compliance with regulatory standards (e.g., PCI, GDPR).

Authentication Protocols: Implement and support Certificate-based authentication, SCEP, Intune, Single Sign-On (SSO), Multi-Factor Authentication (MFA), and federation services (SAML, OAuth).

Technical Support: Troubleshoot identity-related issues across the Human, Machine, Agent/Application spectrum and support incident response needs.

The role is responsible for the configuration, administration, operation, and support of identity management technologies, including integration with networks, hardware, software, applications, and databases. Responsibilities also include end‑to‑end service delivery of identity management across all technology domains, encompassing backup, recovery, and disaster recovery capabilities. The candidate must have experience in supporting identity management technologies in a complex environment that includes data center, cloud providers, hosted vendor solutions and co-location facilities in a global technology ecosystem.

Skills

Certificate authentication, CA, Entra ID

Top Skills Details

Certificate authentication,CA,Entra ID

Additional Skills & Qualifications

DAY-TO-DAY RESPONSIBILITIES

Identify, plan, and execute Certificate Lifecycle Management (CLM) driven projects as needed.

Fulfill service requests in Service Now related to Identity technologies

Monitor the health of in-scope system and act when necessary. As well as enhance observability across supported services.

Perform Incident and Problem management as needed.

Improve operational rigor and efficiency through scripting and automation.

Implement changes (typically off hours) to support modernization objectives and eliminate risks related to vulnerabilities.

Work with Enterprise Security to assess and remediate any security findings that are discovered during Pen Tests and Vulnerability scans.

Provide management of and support for all aspects of

Plan and migrate on-premises workload to alternate solutions as part of the Data Center Exit strategy

Required qualifications

Bachelor's degree or the equivalent combination of education and relevant experience

5+ years of total relevant work experience

Extensive understanding of Public Key Infrastructure (PKI), X.509 Certificates, Venafi CLM, and automated protocols such as SCEP.

Deep Knowledge of Microsoft Active Directory Certificate Services (MS ADCS), as well as external certificate partners, like Digicert.

Knowledge in Identity-based infrastructure: Active Directory, Entra ID, DNS and DHCP

Intermediate knowledge of Windows and Linux operating systems, including how these machines use certificates.

Experience with MS Defender and using the product to help keep our environment secure.

Experience with scripting languages such as PowerShell and/or Python and how to use them to automate tasks.

Strong communication skills (both verbal and written)

Ability to participate in off-hour work, including scheduled On-Call.

Demonstrated ability to work independently and as part of a team and project management skills

Strong attention to detail, accuracy, and timeliness

Experience Level

Expert Level

Job Type & Location

This is a Contract position based out of Owings Mills, MD.

Pay and Benefits

The pay range for this position is $55.00 - $60.00/hr.

Individual compensation offered for this position within this range will depend on many factors, including qualifications, skills, relevant experience, job knowledge, geographic location, internal equity, and other pertinent job‑related factors.

Eligibility requirements apply to some benefits and may depend on your jobclassification and length of employment. Benefits are subject to change and may besubject to specific elections, plan, or program terms. If eligible, the benefitsavailable for this temporary role may include the following:

• Medical, dental & vision
• Critical Illness, Accident, and Hospital
• 401(k) Retirement Plan – Pre-tax and Roth post-tax contributions available
• Life Insurance (Voluntary Life & AD&D for the employee and dependents)
• Short and long-term disability
• Health Spending Account (HSA)
• Transportation benefits
• Employee Assistance Program
• Time Off/Leave (PTO, Vacation or Sick Leave)

Workplace Type

This is a hybrid position in Owings Mills,MD.

Application Deadline

This position is anticipated to close on Sep 27, 2026.

About TEKsystems

We're partners in transformation. We help clients activate ideas and solutions to take advantage of a new world of opportunity. We are a team of 80,000 strong, working with over 6,000 clients, including 80% of the Fortune 500, across North America, Europe and Asia. As an industry leader in Full-Stack Technology Services, Talent Services, and real-world application, we work with progressive leaders to drive change. That's the power of true partnership. TEKsystems is an Allegis Group company.

The company is an equal opportunity employer and will consider all applications without regards to race, sex, age, color, religion, national origin, veteran status, disability, sexual orientation, gender identity, genetic information or any characteristic protected by law.

About TEKsystems and TEKsystems Global Services

We're a leading provider of business and technology services. We accelerate business transformation for our customers. Our expertise in strategy, design, execution and operations unlocks business value through a range of solutions. We're a team of 80,000 strong, working with over 6,000 customers, including 80% of the Fortune 500 across North America, Europe and Asia, who partner with us for our scale, full-stack capabilities and speed. We're strategic thinkers, hands‑on collaborators, helping customers capitalize on change and master the momentum of technology. We're building tomorrow by delivering business outcomes and making positive impacts in our global communities. TEKsystems and TEKsystems Global Services are Allegis Group companies. Learn more at TEKsystems.com.

The company is an equal opportunity employer and will consider all applications without regard to race, sex, age, color, religion, national origin, veteran status, disability, sexual orientation, gender identity, genetic information or any characteristic protected by law.

San Francisco Fair Chance Ordinance: Pursuant to the San Francisco Fair Chance Ordinance, for all positions located in the city and county of San Francisco, we will consider for employment qualified applicants with arrest and conviction records.

Massachusetts Lie Detector: It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability.

Use of Artificial Intelligence (AI): We may use Artificial Intelligence (AI) to support parts of our hiring process, including sourcing, screening, and evaluating candidates. AI helps assess applications and qualifications, but final decisions are made by our hiring team. By applying, you acknowledge and agree that your application may be reviewed using AI tools.