IAM Engineer: Identity & Access Automation Lead

Pho Prime, LLC; Shelton (CT); On-site; USD 90,000 - 130,000; Full time

Benefits offered by this job

Mobility Allowance

Job summary

Subway is seeking an IAM Engineer to build and operate day-to-day identity management across Okta, AD/Entra ID, M365, ServiceNow, and a broad SaaS portfolio. You will own the health of the identity platform and drive automation to retire manual work.

You will develop Okta Workflows, lifecycle automation, and SSO integrations (SAML/OIDC); contribute to governance, audits, and security architecture while collaborating with cybersecurity teams.

Qualifications

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or related field (or equivalent work experience).
• 3–5 years in IAM, identity operations, or related security/infrastructure role.
• Hands-on with Okta or equivalent identity provider.
• Knowledge of SSO/federation protocols (SAML 2.0, OIDC, OAuth 2.0).
• Knowledge of SCIM provisioning concepts and troubleshooting.

Responsibilities

• Operate the identity platform day to day: SSO setup, access fulfillment, MFA management, lifecycle corrections; troubleshoot end-to-end provisioning and authentication.
• Handle onboarding/offboarding and HR-driven changes; manage IAM tickets in ServiceNow; escalate complex issues.
• Build Okta Workflows for lifecycle events, provisioning, and remediation; expand Okta catalog with self-service workflows.
• Script automation in PowerShell or Python; participate in upgrades and change tickets for identity infra.
• Manage SCIM provisioning between Ceridian Dayforce, Okta, AD/Entra ID, ServiceNow, and AWS IAM Identity Center; configure SSO (SAML/OIDC).
• Apply least-privilege in daily access work; support Okta Identity Governance and non-human identities.

Skills

Okta administration

SSO/federation

SCIM provisioning

PowerShell/Python

REST APIs

ServiceNow

Active Directory / Entra ID / M365

CI/CD

Git

AI tools familiarity

Education

Bachelor's degree in CS/IT or related

Tools

ServiceNow

Jamf

Microsoft Entra ID

AWS IAM Identity Center

Job description

Subway is seeking an IAM Engineer to build and operate day-to-day identity management across Okta, AD/Entra ID, M365, ServiceNow, and a broad SaaS portfolio. You will own the health of the identity platform and drive automation to retire manual work.

You will develop Okta Workflows, lifecycle automation, and SSO integrations (SAML/OIDC); contribute to governance, audits, and security architecture while collaborating with cybersecurity teams.