IAM Engineer

The Clearing House Payments Company L.L.C.; United States; Hybrid; USD 110,000 - 150,000; Full time

Job summary

The Clearing House Payments Company L.L.C. seeks a mid-level Identity & Access Management (IAM) Engineer to design, implement, and support secure identity solutions across the organization.

You will partner with security, IT, and application teams to ensure users have appropriate access while upholding strong security and compliance standards in a hybrid or cloud-first environment. Key responsibilities include designing and maintaining IAM for workforce and application access, managing identity

Qualifications

• 5+ years of IAM experience or related IT roles.
• Hands-on experience with IAM platforms (Okta, Azure AD/Entra ID, Ping, SailPoint, ForgeRock, CyberArk).
• Strong understanding of authentication/authorization concepts (SSO, MFA, OAuth, OIDC, SAML).
• Experience with Active Directory/LDAP and cloud environments (AWS/Azure/GCP).
• Ability to troubleshoot complex identity and access issues.

Responsibilities

• Design, implement, and maintain IAM solutions for workforce and application access.
• Manage identity lifecycle: provisioning, deprovisioning, role management, access reviews.
• Support and enhance SSO, MFA, and federation integrations.
• Integrate IAM with cloud services, SaaS apps, and on-prem systems.
• Collaborate with security, compliance, and audit teams to meet regulatory requirements.
• Troubleshoot access issues and provide Tier 2/3 IAM support.
• Develop and maintain IAM documentation, standards, and procedures.
• Participate in IAM projects, upgrades, and security initiatives.
• Monitor IAM systems for performance, availability, and security events.

Skills

Strong communication

Cross-functional collaboration

Troubleshooting identity issues

Tools

Okta

Azure AD/Entra ID

Ping

SailPoint

ForgeRock

CyberArk

Job description

Position Summary

We are seeking a mid-level Identity & Access Management (IAM) Engineer to help design, implement, and support secure identity solutions across the organization. This role partners closely with security, IT, and application teams to ensure users have the right access to the right systems at the right time-while maintaining strong security and compliance standards. The ideal candidate has hands‑on IAM experience, understands modern identity architectures, and is comfortable operating in a hybrid or cloud-first environment.

Key Responsibilities

• Design, implement, and maintain IAM solutions for workforce and application access
• Manage identity lifecycle processes including provisioning, deprovisioning, role management, and access reviews
• Support and enhance Single Sign-On (SSO), Multi-Factor Authentication (MFA), and federation integrations
• Integrate IAM platforms with cloud services, SaaS applications, and on-prem systems
• Collaborate with security, compliance, and audit teams to meet regulatory and policy requirements
• Troubleshoot access issues and provide Tier 2/3 IAM support
• Develop and maintain IAM documentation, standards, and procedures
• Participate in IAM-related projects, upgrades, and security initiatives
• Monitor IAM systems for performance, availability, and security events

Qualifications Required

• 5+ years of experience in Identity & Access Management, cybersecurity, or related IT roles
• Hands-on experience with IAM platforms (e.g., Okta, Azure AD / Entra ID, Ping, SailPoint, ForgeRock, CyberArk)
• Strong understanding of authentication and authorization concepts (SSO, MFA, OAuth, OIDC, SAML)
• Experience with Active Directory and/or LDAP
• Familiarity with cloud environments (AWS, Azure, or GCP)
• Ability to troubleshoot complex identity and access issues
• Strong communication skills and ability to work cross-functionally

Qualifications Desired

• Experience with identity governance and administration (IGA) tools
• Scripting or automation experience (PowerShell, Python, or similar)
• Knowledge of zero trust and least-privilege access models
• Experience supporting compliance frameworks (SOX, SOC 2, ISO 27001, etc.)
• Relevant certifications (e.g., Azure Identity, Okta, CISSP, Security+, or similar)

Physical demands and work environment

Work is generally sedentary in nature. The working environment is generally favorable. Lighting and temperature are adequate, and there are no hazardous or unpleasant conditions caused by noise, dust, etc. Work is generally performed within an office environment, with standard office equipment available.