ICAM Engineer

Mondo; Lewisville (TX); Remote; USD 110,000 - 121,000; Part time

Benefits offered by this job

Health Insurance

Dental

Vision

401K

Job summary

Mondo is seeking a senior ICAM Engineer for a remote contract through the end of 2027. You will design and automate identity and access governance workflows to scale with growing application and compliance demands, leveraging Entra ID, AD, Okta, ServiceNow, and scripting to reduce manual effort.

You will build access-review and certification processes, integrate applications with the access-review platform, collaborate with identity data SMEs, and contribute to PAM, passwordless MFA, and IGA

Qualifications

• 3-5 years of hands-on identity engineering experience, focusing on access reviews and identity governance.
• Experience with enterprise identity platforms such as Microsoft Entra ID, Active Directory, Okta, RSA, and ServiceNow.
• Proficient in scripting, APIs, automation, and data reconciliation in enterprise environments.
• Familiarity with IGA, access certification, PAM, authentication, and identity lifecycle processes.

Responsibilities

• Design and implement access-review and access-certification workflows, ensuring compliant, evidence-supported outcomes.
• Integrate applications with the access-review platform and ServiceNow, reducing manual effort through scripting, APIs, and workflow automation.
• Perform identity correlation and authoritative-source alignment across enterprise identity systems.
• Develop and maintain technical documentation, runbooks, and operational handoff materials.
• Collaborate with access-review, platform, and identity-data SMEs to translate governance gaps into sustainable technical solutions.
• Contribute longer-term to Joiner-Mover-Leaver automation, authentication modernization (passwordless, phishing-resistant MFA), privileged access management, and IGA evaluation.
• Support platform and process testing, evidence enablement, and data-quality improvements across identity integrations.

Skills

Identity governance

Access reviews

Automation

Scripting

APIs

Troubleshooting

Documentation

Tools

ServiceNow

Microsoft Entra ID

Active Directory

Okta

RSA

Job description

Job Title: ICAM Engineer

Location-Type: Remote

Start Date: ASAP

Duration: Contract through end of 2027 (potential for full-time conversion based on performance, organizational need, and available funding)

Compensation Range: $80-88/hr on W2

Benefits

• Eligible for Health, Dental, Vision, and 401K

Visa Sponsorship: Not eligible for visa sponsorship

Job Description

The client is seeking a senior-level ICAM Engineer to build, integrate, and automate identity and access governance processes that scale with growing application and compliance demands.

Job Summary

• Design and implement access-review and access-certification workflows, ensuring compliant, evidence-supported outcomes
• Integrate applications with the client's access-review platform and ServiceNow, reducing manual effort through scripting, APIs, and workflow automation
• Perform identity correlation and authoritative-source alignment across enterprise identity systems
• Develop and maintain technical documentation, runbooks, and operational handoff materials
• Collaborate with access-review, platform, and identity-data SMEs to translate governance gaps into sustainable technical solutions
• Contribute longer-term to Joiner-Mover-Leaver automation, authentication modernization (passwordless, phishing-resistant MFA), privileged access management, and IGA evaluation
• Support platform and process testing, evidence enablement, and data-quality improvements across identity integrations
• 3-5 years of hands-on identity engineering experience, with demonstrated focus on access reviews and identity governance
• Experience with Microsoft Entra ID, Active Directory, Okta, RSA, ServiceNow, or comparable enterprise identity platforms
• Practical scripting, API, automation, workflow, and data-reconciliation skills applied in an enterprise environment
• Familiarity with IGA, access certification, PAM, authentication, and identity lifecycle processes
• Strong troubleshooting, testing, documentation, and operational-handoff discipline

Preferred Qualifications

• Experience onboarding and integrating multiple applications into an identity governance or access-review platform
• Background supporting identity engineering at a Managed Service Provider (MSP)
• Exposure to Varonis or broader data-security automation tooling
• Experience with Conditional Access policies, passwordless authentication, or phishing-resistant MFA implementations