IAM Engineer: Entra ID, AD & SailPoint Expert

Insight Global; Denver (CO); On-site; USD 128,943,000 - 143,270,000; Full time

Benefits offered by this job

Medical, dental, vision insurance

401(k) after 90 days

Paid time off

Job summary

Insight Global is seeking an IAM Engineer to design, implement, and support identity services across Entra ID, Active Directory, SailPoint, ServiceNow, and PAM. You will handle joiner/mover/leaver events, ticket queues, and onboarding while driving improvements for security, audit readiness, and automation.

The role emphasizes least-privilege provisioning, SOX/SOC2/ISO audits, and cross-functional collaboration with Security, Infrastructure, People, and Audit teams.

Qualifications

• 3-5 years hands-on IAM engineering experience in enterprise environments.
• Microsoft Entra ID (Azure AD): SSO, MFA, Conditional Access
• Active Directory (on-prem and hybrid environments)
• SailPoint (IIQ and/or ISC) experience
• Strong understanding of IAM lifecycle (Joiner, Mover, Leaver) with PAM experience
• Experience supporting SOX, ISO 27001, SOC2, or ISAE audits
• Exposure to RBAC and ABAC provisioning models
• API or connector-based integrations for IAM platforms
• Prior experience partnering with HR/People teams on lifecycle automation

Responsibilities

• Design, implement, and support IAM solutions across Entra ID, AD, SailPoint, ServiceNow, and PAM platforms.
• Actively work IAM ticket queues, including access requests and JML events
• Execute joiner, mover, and leaver activities with accuracy and audit readiness
• Troubleshoot provisioning failures, sync issues, and access/authentication problems
• Support application onboarding and integration into IAM platforms
• Identify recurring operational issues and drive process improvements
• Assist with automation and standardization of identity lifecycle workflows
• Ensure access provisioning aligns with least privilege and compliance controls
• Partner cross-functionally with Security, Infrastructure, People Team, and Audit

Skills

IAM engineering

Entra ID/Azure AD

Active Directory

SailPoint IIQ/ISC

PAM (Privileged Access Management)

SOX audits / ISO 27001 / SOC2

RBAC/ABAC provisioning

APIs/integrations

HR lifecycle automation collaboration

Tools

ServiceNow

PAM platforms

Job description

Insight Global is seeking an IAM Engineer to design, implement, and support identity services across Entra ID, Active Directory, SailPoint, ServiceNow, and PAM. You will handle joiner/mover/leaver events, ticket queues, and onboarding while driving improvements for security, audit readiness, and automation.

The role emphasizes least-privilege provisioning, SOX/SOC2/ISO audits, and cross-functional collaboration with Security, Infrastructure, People, and Audit teams.