IAM Engineer

The Clearing House; United States; Hybrid; USD 110,000 - 140,000; Full time

Job summary

The Clearing House is seeking a mid-level IAM Engineer to design, implement, and support secure identity solutions across the organization. You will partner with security, IT, and application teams to ensure users have the right access at the right time while upholding compliance and security standards.

Responsibilities include provisioning, deprovisioning, access reviews, and SSO/MFA enhancements. Experience with Okta, Azure AD, and cloud integrations is preferred; hybrid work environment

Qualifications

• 5+ years in Identity & Access Management, cybersecurity, or related IT roles.
• Hands-on experience with IAM platforms (Okta, Azure AD/Entra ID, Ping, SailPoint, ForgeRock, CyberArk).
• Strong understanding of authentication and authorization concepts (SSO, MFA, OAuth, OIDC, SAML).
• Experience with Active Directory and/or LDAP.
• Familiarity with cloud environments (AWS, Azure, or GCP).
• Ability to troubleshoot complex identity and access issues.
• Strong communication skills and ability to work cross-functionally.

Responsibilities

• Design, implement, and maintain IAM solutions for workforce and application access.
• Manage identity lifecycle processes including provisioning, deprovisioning, role management, and access reviews.
• Support SSO, MFA, and federation integrations.
• Integrate IAM platforms with cloud services, SaaS apps, and on-prem systems.
• Collaborate with security, compliance, and audit teams to meet regulatory requirements.
• Troubleshoot access issues and provide Tier 2/3 IAM support.
• Develop and maintain IAM documentation, standards, and procedures.
• Participate in IAM projects, upgrades, and security initiatives.
• Monitor IAM systems for performance, availability, and security events.

Skills

IAM Systems

SSO & MFA

Active Directory/LDAP

Cloud Platforms

Communication

Regulatory Compliance

Job description

Position Summary:

We are seeking a mid-level Identity & Access Management (IAM) Engineer to help design, implement, and support secure identity solutions across the organization. This role partners closely with security, IT, and application teams to ensure users have the right access to the right systems at the right time—while maintaining strong security and compliance standards. The ideal candidate has hands-on IAM experience, understands modern identity architectures, and is comfortable operating in a hybrid or cloud-first environment.

Key Responsibilities:

• Design, implement, and maintain IAM solutions for workforce and application access
• Manage identity lifecycle processes including provisioning, deprovisioning, role management, and access reviews
• Support and enhance Single Sign-On (SSO), Multi-Factor Authentication (MFA), and federation integrations
• Integrate IAM platforms with cloud services, SaaS applications, and on-prem systems
• Collaborate with security, compliance, and audit teams to meet regulatory and policy requirements
• Troubleshoot access issues and provide Tier 2/3 IAM support
• Develop and maintain IAM documentation, standards, and procedures
• Participate in IAM-related projects, upgrades, and security initiatives
• Monitor IAM systems for performance, availability, and security events

Qualifications Required:

• 5+ years of experience in Identity & Access Management, cybersecurity, or related IT roles
• Hands-on experience with IAM platforms (e.g., Okta, Azure AD / Entra ID, Ping, SailPoint, ForgeRock, CyberArk)
• Strong understanding of authentication and authorization concepts (SSO, MFA, OAuth, OIDC, SAML)
• Experience with Active Directory and/or LDAP
• Familiarity with cloud environments (AWS, Azure, or GCP)
• Ability to troubleshoot complex identity and access issues
• Strong communication skills and ability to work cross-functionally

Qualifications Desired:

• Experience with identity governance and administration (IGA) tools
• Scripting or automation experience (PowerShell, Python, or similar)
• Knowledge of zero trust and least-privilege access models
• Experience supporting compliance frameworks (SOX, SOC 2, ISO 27001, etc.)
• Relevant certifications (e.g., Azure Identity, Okta, CISSP, Security+, or similar

Physical demands and work environment:

Work is generally sedentary in nature. The working environment is generally favorable. Lighting and temperature are adequate, and there are no hazardous or unpleasant conditions caused by noise, dust, etc. Work is generally performed within an office environment, with standard office equipment available.