IAM Provisioning Engineer

Interon IT Solutions; Malvern (Chester County); Hybrid; USD 45,000 - 65,000; Full time

Job summary

Randstad/Vanguard seeks an IAM Provisioning Engineer to support access management across a global enterprise, including ~30 banking-related applications. The role involves working with business teams, external banks, vendors, risk and control teams, and technology stakeholders to ensure proper user access.

Strong hands-on provisioning experience and ability to collaborate across teams to resolve issues and deliver results are essential.

Qualifications

• 3+ years in IAM, security administration, or related field.
• Hands-on user provisioning and access management experience.
• Strong troubleshooting, analytical, and problem-solving skills.
• Ability to map business needs to roles and permissions.
• Excellent client-service and stakeholder management.
• Willingness to support global operations across time zones.

Responsibilities

• Manage IAM processes: role design, provisioning, deprovisioning, and access governance.
• Collaborate with banking teams, third-party vendors, and technology leaders on access needs.
• Translate business requirements into appropriate roles and permissions.
• Resolve complex access issues and implement sustainable fixes.
• Administer access to third-party financial apps with proper approvals.
• Follow IAM standards, security policies, and risk practices.
• Use Jira and ServiceNow to manage incidents, requests, tasks, and deliverables.
• Maintain operating procedures and onboarding materials.
• Identify automation and process-improvement opportunities.
• Analyze metrics to support vendor management and operations.
• Support audits and security reviews as IAM SME.
• Collaborate with dispersed teams, including UK colleagues.

Skills

Access provisioning

IAM

Security controls

Stakeholder management

Education

Undergraduate degree

Tools

Jira

ServiceNow

SailPoint IdentityIQ

Active Directory

AWS

Azure

PowerShell

Linux

Windows

Job description

Location: Malvern, PA

Work Arrangement: Hybrid — 3 days onsite per week; candidates willing to relocate are accepted

Client: Randstad/Vanguard

Pay rate: $40/hr on W2

Location: Malvern, PA

Work Arrangement: Hybrid — 3 days onsite per week; candidates willing to relocate are accepted

Experience: 5+ years

Client: Randstad/Vanguard

Pay rate: $40/hr on W2

Schedule Clarification: Additional hiring notes state full-time onsite in Malvern. Please confirm the onsite requirement before submission.

Role Overview

Our client is seeking an IAM Provisioning Engineer to support access management across its global enterprise, including approximately 30 banking-related applications.

The role involves working directly with business teams, external banking partners, service providers, risk and control teams, and technology stakeholders to ensure appropriate user access. These applications support sensitive activities such as financial transactions, payroll, trading, and investor services.

Key Hiring Priority

Strong hands-on user provisioning experience, direct client/business partner engagement, and the ability to explain how you collaborate across teams to resolve issues and deliver results.

Key Responsibilities

• Manage IAM processes, including role design, provisioning, deprovisioning, and access governance.
• Partner with banking teams, third-party vendors, external banks, technology teams, and senior leaders on access requirements.
• Translate business needs into appropriate roles, permissions, and technical access solutions.
• Resolve complex access issues, identify root causes, and implement sustainable solutions.
• Administer access to third-party financial applications while ensuring proper approvals and security controls.
• Follow enterprise IAM standards, security policies, and risk management practices.
• Use Jira and ServiceNow to manage incidents, requests, tasks, and project deliverables.
• Maintain operating procedures, onboarding materials, and process documentation.
• Identify opportunities for automation, process improvement, and operational efficiency.
• Analyze performance metrics to support vendor management and operational effectiveness.
• Support audits, remediation activities, and security reviews as an IAM process and controls subject matter expert.
• Collaborate with geographically dispersed teams, including colleagues in the UK.

Required Qualifications

• 3+ years of experience in IAM, security administration, information security, or a related field.
• Hands-on experience with user provisioning and access management.
• Strong troubleshooting, analytical, and problem-solving skills.
• Ability to understand access requirements and determine appropriate roles and permissions.
• Strong client-service, stakeholder management, and communication skills.
• Demonstrated ability to build relationships across business and technology teams.
• Strong understanding of enterprise security controls and risk management.
• Ability to work independently, take ownership, and learn new technologies.
• Undergraduate degree or an equivalent combination of training and experience.
• Flexibility to support global operations, including occasional schedule adjustments and after-hours or weekend on-call coverage.

Preferred Skills

• ServiceNow and SailPoint IdentityIQ experience.
• Strong experience in one of these platforms, with a willingness to learn the other, will be considered.
• Experience with Jira, Active Directory, AWS, Azure, PowerShell, Linux, or Windows.
• Banking application support or financial services access-management experience.
• Workflow automation and process optimization.
• Exposure to Microsoft Copilot, Claude, or similar AI and automation tools.

Ideal Candidate

A proactive professional who combines technical access-management skills with strong business engagement. The ideal candidate takes ownership, applies a risk-focused approach, and actively improves processes.

The position primarily supports business-as-usual operations, with opportunities to contribute to automation and project-based development.