IAM Security Engineer

JMS Technical Solutions; Seattle (WA); Hybrid; USD 53,726 - 89,544; Full time

Job summary

JMS Technical Solutions in Seattle, WA, is assisting a client seeking an IAM Security Engineer to join their team onsite with one day of remote work. This is a full-time, 3-month contract with a salary up to $65/hr, depending on experience.

You will own identity security programs, manage PAM tools, and collaborate with security, compliance, and IT teams to deliver secure access across the environment.

Qualifications

• Bachelor's degree in IT, CS, Cybersecurity or related field required.
• 2+ years in an Identity and Access Management role.
• Experience with major cloud identity platforms (Okta, Entra ID).
• Scripting skills (PowerShell or Python) for automation.
• Experience with IaC tools like Terraform and PAM solutions.

Responsibilities

• Own end-to-end IAM program planning, scheduling, and execution for identity security workstreams.
• Develop project plans, risk logs, and KPIs; report to leadership.
• Lead SAFe/Agile delivery events and cross-team ceremonies.
• Drive PAM programs using BeyondTrust Password Safe and EPM.
• Collaborate on Okta, Entra ID, SailPoint configuration and access governance.

Skills

Identity & Access Management

Scripting (PowerShell/Python)

Cloud identity platforms

Education

Bachelor's Degree in IT/CS/Cybersecurity

Tools

Okta

Microsoft Entra ID

Terraform

BeyondTrust Password Safe / EPM / PRA

SailPoint IdentityNow / IdentityIQ

Job description

Our client in Seattle, WA, is looking foran IAMSecurity Engineerto join their team!

This is an onsite (1 day remote)/full-time/3-month contract position
Salary rangebased on experience: Up to $65/HR

Responsibilities

Program & Delivery Management

• Own end-to-end program planning, scheduling, and execution for one or more identity security workstreams.
• Develop and maintain detailed project plans, dependency maps, risk registers, and RAID logs.
• Lead sprint planning, PI Planning events, and backlog grooming in an SAFe/Agile delivery model.
• Facilitate cross-team ceremonies including standups, demos, retrospectives, and steering committee reviews.
• Track and report on program health, milestones, and KPIs to senior leadership and the CISO organization.
• Proactively identify, elevate, and resolve blockers, risks, and inter-workstream dependencies.

Identity Security Domain Work

• Drive delivery of Privileged Access Management (PAM) programs using BeyondTrust Password Safe, Endpoint Privilege Management (EPM), and Privileged Remote Access (PRA).
• Support initiatives related to Microsoft Entra ID (Azure AD) including conditional access policy governance, hybrid identity, and lifecycle management.
• Partner with IGA teams on SailPoint IdentityNow configuration, access certification campaigns, and role engineering.
• Coordinate Okta identity platform hardening, including phishing-resistant MFA (FastPass, FIDO2/WebAuthn), device assurance policies, and authenticator enrollment controls.
• Translate technical identity requirements into workable project scope, acceptance criteria, and delivery milestones.

Stakeholder Engagement & Communication

• Serve as the primary point of contact for program status across technology, security, compliance, and business stakeholders.
• Prepare and deliver executive-ready status reports, steering committee decks, and program dashboards.
• Partner with Vendor Management and Procurement on contingent resource onboarding and statement of work management.
• Coordinate with audit and compliance teams (SOX, PCI-DSS, NIST) to ensure delivery timelines support control testing windows.

Qualifications

• Bachelor's Degree in Information Technology, Computer Science, Cybersecurity or related experience required.
• 2+ years of direct experience in an Identity and Access Management role.
• Demonstrated experience with at least one major cloud identity platform (Okta, Microsoft Entra ID).
• Proficiency in scripting with PowerShell or Python for automation.
• Hands-on experience with Infrastructure as Code tools, particularly Terraform.
• Strong understanding of modern authentication and federation protocols (SAML, OIDC, OAuth 2.0, SCIM).
• Experience with hybrid identity models connecting cloud IdPs to on-premises Active Directory.
• SailPoint Certified IdentityIQ Associate or SailPoint Certified IdentityNow Professional preferred

Applicants must be authorized to work in the U.S.
We are an equal-opportunity employer. We do not discriminate in hiring or employment against any individual based on race, color, gender, national origin, ancestry, religion, physical or mental disability, age, veteran status, sexual orientation, gender identity or expression, marital status, pregnancy, citizenship, or any other factor protected by anti-discrimination laws.