Identity & Access Management Engineer

Jobtailor

Westbrook (ME)

On-site

USD 120,000 - 180,000

Full time

14 days+

Get more replies from employers

Send a job-specific resume in minutes.

Job summary

Jobtailor in Maine is seeking an experienced Identity Governance and Administration (IGA) expert to implement and maintain enterprise-grade IAM solutions. The role emphasizes RBAC, access certifications, and lifecycle management across on‑premises and cloud environments.

You will design controls, automate provisioning and attestation workflows, and collaborate with security teams to mitigate identity-related risks. A strong scripting background with PowerShell and REST APIs is required.

Qualifications

5+ years of experience in Identity and Access Management, Identity Governance, or Security Engineering.
Experience implementing or administering IGA platforms such as Microsoft Entra ID Governance, SailPoint IdentityNow / IdentityIQ, Saviynt, Okta Identity Governance
Strong understanding of RBAC, Access Certifications, Entitlement Management, Identity Lifecycle Management
Experience managing Service Accounts, Managed Identities, Application Identities, API Credentials, Workload Identities
Experience with Microsoft Entra ID, Active Directory, Azure, AWS IAM, Google Cloud IAM
Proficiency with PowerShell, REST APIs, and automation scripting.

Responsibilities

Implement and maintain enterprise Identity Governance and Administration (IGA) solutions.
Design and manage access certification, access review, and entitlement management processes.
Develop and optimize joiner, mover, and leaver workflows.
Support role-based access control (RBAC) and access governance initiatives.
Partner with business stakeholders to define access models and governance controls.

Job description

Implement and maintain enterprise Identity Governance and Administration (IGA) solutions.
Design and manage access certification, access review, and entitlement management processes.
Develop and optimize joiner, mover, and leaver workflows.
Support role-based access control (RBAC) and access governance initiatives.
Partner with business stakeholders to define access models and governance controls.
Support audit, compliance, and regulatory requirements through reporting and attestation processes.
Establish governance standards for service accounts across on-premises and cloud environments.
Create and maintain inventory, ownership, classification, and lifecycle processes for service accounts.
Reduce interactive use of service accounts and implement secure authentication methods.
Design controls for credential rotation, privileged access management, and monitoring.
Conduct periodic reviews to identify orphaned, stale, or over-privileged service accounts.
Design and govern Azure Managed Identities and other cloud-native workload identities.
Develop standards for application authentication and authorization.
Partner with application teams to eliminate embedded credentials and secrets.
Implement least-privilege access models for cloud workloads and services.
Monitor and review workload identity permissions for excessive privilege.
Define governance frameworks for AI agents, automation platforms, bots, APIs, and machine identities.
Establish controls for identity creation, ownership, access reviews, and lifecycle management.
Develop policies for agent-to-agent and agent-to-application access.
Ensure visibility and traceability of non-human activity across enterprise systems.
Partner with security teams to mitigate emerging risks associated with autonomous systems and AI-enabled workflows.
Develop automation using PowerShell, Graph API, REST APIs, and cloud-native tooling.
Automate provisioning, deprovisioning, access reviews, reporting, and governance workflows.
Build integrations between IAM platforms, cloud providers, HR systems, ServiceNow, and enterprise applications.
Continuously improve IAM operational efficiency through scripting and workflow optimization.
Enforce least privilege and separation-of-duties controls.
Support security assessments, audit requests, and compliance reviews.
Develop metrics and reporting related to identity governance maturity.
Participate in incident response and investigations involving identity-related risks.
Maintain alignment with industry frameworks such as NIST, ISO 27001, SOC 2, and CIS controls.

Requirements

5+ years of experience in Identity and Access Management, Identity Governance, or Security Engineering.
Experience implementing or administering IGA platforms such as Microsoft Entra ID Governance, SailPoint IdentityNow / IdentityIQ, Saviynt, Okta Identity Governance
Strong understanding of RBAC, Access Certifications, Entitlement Management, Identity Lifecycle Management
Experience managing Service Accounts, Managed Identities, Application Identities, API Credentials, Workload Identities
Experience with Microsoft Entra ID, Active Directory, Azure, AWS IAM, Google Cloud IAM
Proficiency with PowerShell, REST APIs, and automation scripting.

Core Competencies

Demonstrates expertise in Identity Governance and Administration (IGA) solutions, with a strong focus on access management, compliance, and automation. Proficient in implementing least-privilege access models and managing service accounts across cloud and on-premises environments.

Highest-signal resume keywords