IAM (Identity & Access Management) Engineer (Okta / SailPoint)

Zoho; United States; On-site; USD 124,000 - 207,000; Part time

Job summary

Fyerx is seeking an experienced IAM Engineer to design, configure, and secure our global identity and access governance footprint. You will orchestrate lifecycle workflows, implement secure SSO integrations, and enforce zero-trust boundaries across cloud and on-premise apps, while coordinating with infrastructure teams to ensure resilient authentication across the enterprise.

The role requires 4–8 years of IT security, with 3+ years in Okta or SailPoint, plus strong SAML/OIDC/OAuth, LDAP/AD, and

Qualifications

• 4 to 8 years of enterprise IT security experience with 3+ dedicated years in Okta or SailPoint environments
• Strong mastery of web identity languages (SAML, OIDC, OAuth) and directory structures (LDAP, AD)
• Deep understanding of zero-trust principles, cloud architectures, and lifecycle metrics
• Mandatory certification: Okta Certified Professional/Consultant OR SailPoint Certified IdentityNow/IdentityIQ Engineer

Responsibilities

• Configure and deploy core IAM framework modules including user onboarding pipelines and lifecycle governance
• Design and maintain SSO configurations with federated connections and SAML/OIDC profiles
• Build automated provisioning workflows using connectors to AD/HR systems
• Implement adaptive MFA policies with context-aware security profiles
• Govern RBAC/ABAC and least-privilege access controls
• Collaborate with infrastructure teams to enable secure connectivity and downstream SaaS apps
• Lead patch cycles and validations to prevent authentication issues

Skills

Okta or SailPoint experience

SAML/OIDC/OAuth proficiency

Zero-trust security knowledge

RBAC/ABAC understanding

Tools

Active Directory

LDAP

SCIM provisioning

SAML 2.0

OIDC

OAuth

Job description

IAM (Identity & Access Management) Engineer (Okta / SailPoint)

IAM (Identity & Access Management) Engineer (Okta / SailPoint)

• Employment Type: Contract
  
• Work Mode: Remote
  
• Location: Offshore
  
• Total Experience Required: 4 to 8 years
• Relevant Experience Required: 3+ years of dedicated implementation and configuration experience across enterprise IAM platforms ( Okta or SailPoint )
  
• Mandatory Certification: Okta Certified Professional/Consultant or SailPoint Certified IdentityNow Engineer

Job Summary

We are seeking an experienced IAM Engineer to design, configure, and secure our global identity and access governance footprint. The ideal candidate will orchestrate complex lifecycle management pathways, configure secure single sign-on integrations, build automated user provisioning workflows, and enforce strict zero-trust boundary guidelines across cloud and on-premise application matrices.

Key Responsibilities

• Configure and deploy core IAM framework modules, managing user onboarding pipelines, automated lifecycle states, and access certification governance campaigns.
  
• Design and maintain Single Sign-On (SSO) configurations, setting up federated cross-app connections, custom SAML 2.0 / OpenID Connect (OIDC) profiles, and OAuth authorization parameters.
  
• Build automated provisioning workflows, writing system rules, attribute transformations, and direct API connector scripts to manage directory feeds (Active Directory, HR systems).
  
• Implement adaptive Multi-Factor Authentication (MFA) policies, configuring context-aware security profiles, network geofencing metrics, and sign-on threshold parameters.
  
• Govern identity security and access access levels, structuring complex role-based access control (RBAC), attribute-based access control (ABAC), and least-privilege security lines.
  
• Collaborate with enterprise infrastructure teams to support secure connectivity with directory endpoints, internal databases, and downstream SaaS application rings.
  
• Lead update regression validations and patch cycles, auditing platform custom configurations across sandboxes to prevent authentication processing drops.
  

Requirements

• 4 to 8 years of core enterprise IT security experience, with 3+ dedicated years actively designing, building, and deploying software within Okta or SailPoint environments.
  
• Strong technical mastery of web identity languages (SAML, OIDC, OAuth), directory structures (LDAP, Active Directory), and SCIM provisioning protocol architectures.
  
• Deep structural understanding of zero-trust network principles, cloud application architectures, security boundary perimeters, and lifecycle tracking metrics.
  
• Mandatory certification: Okta Certified Professional/Consultant OR SailPoint Certified IdentityNow/IdentityIQ Engineer.
  

Preferred Qualifications

• Familiarity with Privileged Access Management (PAM) architectures like CyberArk or BeyondTrust.