IAM Engineer — Identity Governance & Zero Trust

Kokosing, Inc.; Fredericktown (OH); On-site; USD 90,000 - 140,000; Full time

Job summary

Kokosing, Inc. is seeking an Identity and Access Management (IAM) Engineer to modernize and evolve our identity platform for employees, applications, machine identities, cloud services, data platforms, and AI technologies.

This role supports governance-first identity security across hybrid enterprise environments and will help transition from traditional identity administration toward modern IAM practices. The ideal candidate has hands-on experience with Entra ID, AD, MFA, SSO, RBAC/ABAC, and

Qualifications

• 3+ years of experience in Identity and Access Management or related fields.
• Experience with Microsoft Entra ID and Active Directory environments.
• Experience with hybrid identity architectures and synchronization.
• Knowledge of MFA, Conditional Access, SSO/SCIM, SAML, OAuth, OpenID Connect, RBAC.

Responsibilities

• Participate in IAM modernization roadmap and governance standards.
• Support IGA, role engineering, entitlement lifecycle governance.
• Assist with SoD and least-privilege initiatives.
• Support ABAC, data-centric access governance, and JIT/JEA models.
• Assist in governance of privileged, service, machine, and workload identities.
• Support automation and IAM integrations across enterprise platforms.

Skills

IAM

PowerShell

Zero Trust

RBAC

ABAC

SAML/OAuth

SSO/SCIM

Entra ID

Tools

Microsoft Entra ID

Active Directory

Azure AD Connect

CyberArk

PIM

ServiceNow

Intune

Job description

Kokosing, Inc. is seeking an Identity and Access Management (IAM) Engineer to modernize and evolve our identity platform for employees, applications, machine identities, cloud services, data platforms, and AI technologies.

This role supports governance-first identity security across hybrid enterprise environments and will help transition from traditional identity administration toward modern IAM practices. The ideal candidate has hands-on experience with Entra ID, AD, MFA, SSO, RBAC/ABAC, and