IAM Security Engineer

Confiz Limited; Seattle (WA); Hybrid; USD 140,000 - 190,000; Full time

Job summary

Confiz Limited seeks a Senior Technical Project Manager to drive identity security initiatives for a major retail client in Seattle, WA. This hybrid role requires hands‑on project management across PAM, IAM, and phishing‑resistant authentication with collaboration across engineering, compliance, and business teams.

You will manage end‑to‑end program planning, risk management, and stakeholder communications while coordinating with Okta, Entra ID, SailPoint, and BeyondTrust ecosystems to ensure

Qualifications

• Bachelor's Degree in IT, CS, Cybersecurity or related field required.
• 2+ years of direct Identity and Access Management experience.
• Demonstrated experience with at least one major cloud identity platform (Okta or Entra ID).
• Scripting proficiency in PowerShell or Python for automation is expected.
• Hands-on experience with Infrastructure as Code tools, particularly Terraform.
• Strong understanding of modern authentication and federation protocols (SAML, OIDC, OAuth 2.0, SCIM) and hybrid identity.

Responsibilities

• Own end‑to‑end program planning, scheduling, and execution for identity security workstreams.
• Develop and maintain detailed project plans, dependency maps, risk registers, and RAID logs.
• Lead SAFe/Agile delivery events and cross‑team ceremonies.
• Facilitate status reporting to senior leadership and CISO organization.
• Coordinate with audit and compliance teams to support control testing windows.
• Translate technical identity requirements into deliverable milestones.

Skills

IAM experience

Automation scripting

Federation protocols

SailPoint certification

Education

Bachelor's degree in Information Technology, Computer Science, Cybersecurity

Tools

Okta

Microsoft Entra ID

Terraform

Job description

Confiz is seeking a Senior Technical Project Manager to support one of our largest retail clients in Seattle, WA to drive high-impact Identity Security initiatives across our enterprise IAM landscape. This contingent role sits within the Identity Security organization and partners closely with engineering, architecture, compliance, and business teams to deliver complex programs on time, within scope, and in alignment with our security strategy.

You will lead delivery across one or more workstreams spanning privileged access management, identity governance, directory services modernization, and phishing-resistant authentication. This is a hands‑on project management role that requires both technical depth in identity and access management platforms and strong stakeholder communication across executive, engineering, and compliance audiences.

This is a hybrid role based in Seattle, WA. Onsite presence of 4 days per week is expected for team collaboration, stakeholder meetings, and program ceremonies.

Responsibilities

Program & Delivery Management

• Own end‑to‑end program planning, scheduling, and execution for one or more identity security workstreams.
• Develop and maintain detailed project plans, dependency maps, risk registers, and RAID logs.
• Lead sprint planning, PI Planning events, and backlog grooming in an SAFe/Agile delivery model.
• Facilitate cross‑team ceremonies including standups, demos, retrospectives, and steering committee reviews.
• Track and report on program health, milestones, and KPIs to senior leadership and the CISO organization.
• Proactively identify, elevate, and resolve blockers, risks, and inter‑workstream dependencies.

Identity Security Domain Work

• Drive delivery of Privileged Access Management (PAM) programs using BeyondTrust Password Safe, Endpoint Privilege Management (EPM), and Privileged Remote Access (PRA).
• Support initiatives related to Microsoft Entra ID (Azure AD) including conditional access policy governance, hybrid identity, and lifecycle management.
• Partner with IGA teams on SailPoint IdentityNow configuration, access certification campaigns, and role engineering.
• Coordinate Okta identity platform hardening, including phishing‑resistant MFA (FastPass, FIDO2/WebAuthn), device assurance policies, and authenticator enrollment controls.
• Translate technical identity requirements into workable project scope, acceptance criteria, and delivery milestones.

Stakeholder Engagement & Communication

• Serve as the primary point of contact for program status across technology, security, compliance, and business stakeholders.
• Prepare and deliver executive‑ready status reports, steering committee decks, and program dashboards.
• Partner with Vendor Management and Procurement on contingent resource onboarding and statement of work management.
• Coordinate with audit and compliance teams (SOX, PCI‑DSS, NIST) to ensure delivery timelines support control testing windows.

Qualifications

• Bachelor's Degree in Information Technology, Computer Science, Cybersecurity or related experience required.
• 2+ years of direct experience in an Identity and Access Management role.
• Demonstrated experience with at least one major cloud identity platform (Okta, Microsoft Entra ID).
• Proficiency in scripting with PowerShell or Python for automation.
• Hands‑on experience with Infrastructure as Code tools, particularly Terraform.
• Strong understanding of modern authentication and federation protocols (SAML, OIDC, OAuth 2.0, SCIM).
• Experience with hybrid identity models connecting cloud IdPs to on‑premise Active Directory.
• SailPoint Certified IdentityIQ Associate or SailPoint Certified IdentityNow Professional preferred.