IAM Software Developer (Contractor) - 27R0001715

RE/SPEC Inc.; Town of Texas (WI); Hybrid; USD 150,000 - 190,000; Full time

Job summary

RESPEC Inc. is seeking an experienced Senior IAM Software Engineer to lead enterprise security modernization for a key public safety client. You will architect centralized identity with SAML/OIDC, implement SSO and MFA, and establish RBAC and IGA workflows, with SailPoint Identity Security Cloud at the core.

You will automate provisioning and audits using PowerShell and Python, maintain documentation, and drive secure onboarding across platforms in a hybrid Austin, TX setting.

Qualifications

• 8+ years in enterprise IAM architecture, governance, and integration.
• 5+ years in identity provider architecture, SSO, MFA, RBAC.
• 3+ years with SailPoint Cloud, scripting, and PAM tooling.

Responsibilities

• Design and deploy a centralized identity provider framework with SAML 2.0 and OIDC for SSO and MFA.
• Define RBAC models, enforce separation of duties, and automate identity workflows.
• Oversee onboarding of apps via REST APIs and manage IGA via SailPoint.
• Implement PAM, automate provisioning and audit reporting with PowerShell and Python, maintain docs.

Skills

IAM Architecture

Identity Provider Architecture

SailPoint & PAM

Job description

Big challenges need bold thinkers.

If you’re someone who sees problems as opportunities, you’ll thrive here. RESPEC is 100% employee-owned, which means we take ownership of every challenge. Here, your ideas drive real solutions. Since 1969, we’ve tackled complex challenges in energy transition, infrastructure resilience, digital transformation, and sustainability.

At RESPEC, you’ll work alongside clients to take on critical problems. Depending on your expertise, you might design infrastructure in remote locations, develop renewable energy solutions for global projects, or apply data-driven technology to improve mining and water systems.

We bring deep technical knowledge, real-world experience, and a commitment to work that matters. If you're looking for a place where your contributions have real impact, you’ll fit right in.

RESPEC is seeking an experienced Senior Identity & Access Management (IAM) Software Engineer to spearhead enterprise security modernization for our key public safety client. In this role, you will take ownership of the client's enterprise identity ecosystem, leading the transformation toward a robust, zero-trust foundation. You will architect and implement centralized authentication frameworks, modernize governance workflows, automate provisioning pipelines, and drive application onboarding across modern and legacy platforms. This is a pivotal modernization initiative directly supporting critical statewide public safety systems, ensuring that only verified, authorized personnel securely access vital resources.

Core Responsibilities

In this position, you will manage the enterprise identity and access management landscape end-to-end. You will design and deploy a centralized identity provider framework utilizing SAML 2.0 and OIDC protocols to support seamless single sign-on (SSO) and robust multi-factor authentication (MFA). Working across engineering and security teams, you will establish unified role-based access control (RBAC) models, enforce strict separation of duties, and automate complex identity lifecycle workflows.

Additionally, you will drive enterprise application onboarding using modern REST APIs while taking technical ownership of our client's Identity Governance and Administration (IGA) platform powered by SailPoint Identity Security Cloud. Your day-to-day focus will include orchestrating user access reviews, designing certification campaigns, automating user provisioning and audit reporting via custom PowerShell and Python scripts, and deploying privileged access management (PAM) solutions featuring credential vaulting, automated rotation, and just-in-time access. Beyond initial deployments, you will maintain technical documentation, monitor and optimize directory and identity databases, and troubleshoot system integrations.

Required Technical Experience

To ensure immediate success on this project, candidates must demonstrate verified, hands-on experience meeting the following criteria:

• 8+ Years of IAM Architecture, Governance & Application Integration: Comprehensive background in enterprise IAM platform governance, engineering, identity lifecycle automation, and custom scripting. Proven track record of onboarding enterprise business applications and integrating diverse software ecosystems with centralized IAM platforms.
• 5+ Years of Identity Provider Architecture & Access Modeling: Demonstrated experience managing centralized identity providers, configuring enterprise SSO and MFA solutions, designing and implementing RBAC models, enforcing separation of duties, and executing access certification campaigns.
• 3+ Years of SailPoint Cloud, Scripting & Privileged Access: Practical expertise operating SailPoint Identity Security Cloud, including direct application integrations and user access review implementations. Strong hands-on background implementing Privileged Access Management (PAM) tools alongside automated user provisioning and compliance reporting utilizing PowerShell and Python.

Preferred Qualifications

• Experience delivering identity, security, or enterprise software engineering solutions within a state government or public-sector agency is highly preferred. Familiarity with Texas state IT standards, regulatory frameworks, and public safety data environments will set your candidacy apart.

Work Model & Location

• This position follows a hybrid work arrangement combining telework with regular on-site collaboration.
• The primary client facility is located at 5805 N. Lamar Blvd, Austin, TX 78752.
• Standard working hours are Monday through Friday, 8:00 AM to 5:00 PM Central Time, excluding official state holidays.
• Candidates must be based within commuting distance of Austin

All your information will be kept confidential according to EEO guidelines.

All your information will be kept confidential according to EEO guidelines.