IAM Engineer — Drive Identity Automation & Security

Subway; Shelton (CT); On-site; USD 110,000 - 140,000; Full time

Benefits offered by this job

Insurance Plans (Medical) and Life

Pension/401K

Competitive Bonus

Mobility Allowance

Tuition Reimbursement

Company Holidays

Volunteering time

And More

Job summary

Franchise World Headquarters, LLC in Shelton, CT seeks an IAM Engineer to build and operate the identity platform, ensuring secure access for a hybrid workforce. You will own day-to-day IAM operations, implement Okta workflows, and expand the enterprise catalog with governance-driven automation.

The role emphasizes SSO, SCIM, and federation across AD, Entra ID, M365, ServiceNow, and AWS IAM Identity Center, with ongoing automation and security improvements.

Qualifications

• Hands-on experience with Okta or equivalent identity provider.
• Knowledge of SSO and federation protocols (SAML 2.0, OIDC, OAuth 2.0).
• Experience with SCIM provisioning and troubleshooting.

Responsibilities

• Operate identity platform daily: SSO setup, access requests, MFA, provisioning, lifecycle changes.
• Handle onboarding/offboarding w HR-driven changes; manage tickets in ServiceNow.
• Build Okta Workflows for identity lifecycle events and application provisioning.
• Automate tasks with PowerShell/Python; participate in upgrades and on-call rotation.
• Manage SCIM provisioning across Ceridian Dayforce, Okta, AD, Entra ID, ServiceNow, and AWS IAM Identity Center.
• Support audits and maintain runbooks and knowledge-base articles.

Skills

Okta

SSO

SCIM

PowerShell

Python

REST APIs

Git

CI/CD

LLM/AI

AWS IAM Identity Center

Entra ID

ServiceNow

Active Directory

Education

Bachelor's degree in Computer Science, IT, Cybersecurity, or related field

Tools

Okta

ServiceNow

Git

Jamf

Intune

Windows/macOS administration

Job description

Franchise World Headquarters, LLC in Shelton, CT seeks an IAM Engineer to build and operate the identity platform, ensuring secure access for a hybrid workforce. You will own day-to-day IAM operations, implement Okta workflows, and expand the enterprise catalog with governance-driven automation.

The role emphasizes SSO, SCIM, and federation across AD, Entra ID, M365, ServiceNow, and AWS IAM Identity Center, with ongoing automation and security improvements.