Identity & Access Management Engineer

GloComms; Scottsdale (AZ); On-site; USD 125,000 - 155,000; Full time

Job summary

Glocomms is seeking an Identity & Access Management Engineer II in Scottsdale, AZ to support IAM operations across enterprise platforms. You will handle user lifecycle, SSO integrations, access requests, entitlement administration, and identity governance.

The role requires hands-on experience with JML, RBAC, SAML, and OIDC, plus scripting in PowerShell or Python to automate tasks. Some travel may be possible to other listed locations.

Qualifications

• 2+ years in Identity and Access Management, IT Operations, Cybersecurity, or a related field.
• Experience managing user accounts, groups, and access permissions.
• Familiarity with authentication and authorization technologies, including SAML and OpenID Connect (OIDC).
• Understanding of IAM concepts, including RBAC, User provisioning and deprovisioning, and JML processes.
• Proficiency with PowerShell, Python, or similar scripting languages.

Responsibilities

• Automate Joiner, Mover, Leaver (JML) processes, including user provisioning, deprovisioning, access requests, and access reviews.
• Manage user and group access assignments using role-based and group-based access controls.
• Troubleshoot identity-related issues, including provisioning failures and entitlement assignment errors.
• Process access requests and approvals while maintaining entitlement catalogs and standard access definitions.
• Support periodic and ad hoc access certification campaigns.
• Integrate applications with IAM platforms using REST APIs and JSON-based configurations.
• Configure and support Single Sign-On (SSO) integrations using SAML and OpenID Connect (OIDC).
• Ensure adherence to security principles such as least privilege and segregation of duties.

Skills

IAM

User provisioning

RBAC

JML

SAML

OIDC

Education

High school diploma or equivalent

Bachelor's degree preferred

Tools

PowerShell

Python

Job description

Identity & Access Management Engineer (PR/606812) Scottsdale, Arizona

Salary: USD125000 - USD155000 per year

Glocomms is partnering with a financial firm that isseeking an IAM Engineer II to support Identity and Access Management (IAM) operations across enterprise identity platforms. This role is responsible for managing user lifecycle activities, Single Sign-On (SSO) integrations, access requests, entitlement administration, and identity governance activities.

This role is available in Scottsdale, AZ, as well as: Atlanta, GA; La Vista, NE; Oakdale, MN; and St.Petresburg, FL.

Key Responsibilities:

• Automate Joiner, Mover, Leaver (JML) processes, including user provisioning, deprovisioning, access requests, and access reviews.


• Manage user and group access assignments using role-based and group-based access controls.


• Troubleshoot identity-related issues, including provisioning failures, directory synchronization problems, and entitlement assignment errors.


• Process access requests and approvals while maintaining entitlement catalogs and standard access definitions.


• Support periodic and ad hoc access certification campaigns.


• Integrate applications with IAM platforms using REST APIs and JSON-based configurations.


• Configure and support Single Sign-On (SSO) integrations using SAML and OpenID Connect (OIDC).


• Ensure adherence to security principles such as least privilege and segregation of duties.


• Support audit activities by collecting and maintaining access control documentation and evidence.


• Follow established change management, incident management, and documentation procedures.


• Utilize PowerShell, REST APIs, or similar tools to automate repetitive tasks and perform identity-related queries.


• Maintain operational documentation, runbooks, knowledge base articles, and user guides.


• Participate in troubleshooting and resolution of IAM-related incidents.

Required Qualifications:

• 2+years of experience in Identity and Access Management, IT Operations, Cybersecurity, or a related field.


• Experience managing user accounts, groups, and access permissions


• Familiarity with authentication and authorization technologies, including:


• SAML


• OpenID Connect (OIDC)


• Understanding of IAM concepts, including:


• Role-Based Access Control (RBAC)


• User provisioning and deprovisioning


• Joiner/Mover/Leaver (JML) processes


• Experience with PowerShell, Python, or similar scripting languages.


• Strong troubleshooting, analytical, and problem-solving skills.


• Ability to follow documented procedures and maintain accurate records.


• High school diploma or equivalent required. Bachelor's degree preferred.

Preferred Qualifications:

• Experience with an enterprise IAM platform supporting:


• User provisioning


• Access requests


• Access reviews


• Application connectors


• Experience onboarding applications for SSO.


• Exposure to Privileged Access Management (PAM) tools and processes.


• Understanding of security controls and frameworks, including:


• Least Privilege


• Segregation of Duties (SoD)


• Zero Trust principles


• Ability to analyze logs and troubleshoot authentication or provisioning issues.


• Relevant certifications such as:


• CompTIA Security+


• Microsoft SC-900


• Microsoft SC-300

Additional Requirements:

• Must be eligible to work in the United States without current or future employer sponsorship.