Identity & Access Management (IAM) Engineer

Royal Abstract of New York LLC; Atlanta (GA); On-site; USD 110,000 - 170,000; Full time

Benefits offered by this job

Medical, dental, vision insurance

401(k) with company match

Paid time off and holidays

Wellness programs

Job summary

Acrisure is seeking an experienced Identity and Access Management Engineer to advance IAM initiatives within a Zero Trust framework. You will work on CIAM, PAM, and IGA, deploy and manage PAM tools, and integrate IGA platforms with HR and cloud services.

The role requires hands-on IAM experience, scripting skills, and familiarity with cloud IAM services. On-site collaboration and cross-functional partnership are encouraged.

Qualifications

• 3–7 years of hands-on Identity and Access Management experience.
• Experience with NYDFS, HIPAA, or NIST compliance.
• Proficient in scripting for automation tasks.
• Familiarity with cloud-native IAM services such as AWS IAM, Azure AD/Entra ID, GCP IAM.
• Excellent communication skills, with the ability to articulate complex security concepts to stakeholders.

Responsibilities

• Design, implement, and support IAM solutions focused on CIAM, PAM and IGA.
• Deploy and manage PAM tools (Delinea, CyberArk, BeyondTrust) for privileged access.
• Configure and build IGA integrations (Veza, SailPoint, Saviynt) for lifecycle management and RBAC.
• Develop automation with PowerShell, Python, or Bash for provisioning, de-provisioning, access reviews, and reporting.
• Integrate IAM with HR, ITSM, directory services (Active Directory, LDAP) and cloud platforms (AWS, Azure).
• Implement federation and SSO using SAML, OAuth 2.0, OpenID Connect, and SCIM across hybrid/SaaS.
• Manage non-human identities: service accounts, API keys, machine identities.
• Automate IAM infrastructure with IaC tools (Terraform, Ansible).
• Apply Policy-as-Code (Open Policy Agent) to enforce access controls.
• Collaborate with Security Operations for ITDR and anomaly monitoring.

Skills

Zero Trust

IAM principles

PAM

IGA platforms

Scripting: PowerShell, Python, Bash

CIAM

SSO/OIDC/SAML/SCIM

Cloud IAM services

Automation

Education

Bachelor's degree in Computer Science or related field

Experience with NYDFS, HIPAA, or NIST compliance

Tools

Delinea

CyberArk

BeyondTrust

Veza

SailPoint

Saviynt

Terraform

Ansible

Job description

About Acrisure

A global fintech leader, Acrisure empowers millions of ambitious businesses and individuals with the right solutions to grow boldly forward. Bringing cutting-edge technology and top-tier human support together, we connect clients with customized solutions across a range of insurance, reinsurance, payroll, benefits, cybersecurity, mortgage services – and more.

In the last twelve years, Acrisure has grown in revenue from $38 million to almost $5 billion and employs over 19,000 colleagues in more than 20 countries. Acrisure was built on entrepreneurial spirit. Prioritizing leadership, accountability, and collaboration, we equip our teams to work at the highest levels possible.

Job Summary

We are seeking an experienced Identity and Access Management Engineer to join our IAM initiatives within the Zero Trust Security framework. The ideal candidate will have a strong understanding of IAM principles, identity governance, automation, and access controls. This role requires hands-on experience with Privilege Access Management (PAM) solutions, Identity Governance and Administration (IGA) platforms, and scripting/automation for process efficiency and security enhancements.

Responsibilities

• Design, implement, and support IAM solutions with a focus on CIAM, PAM and IGA.
• Deploy and manage PAM tools (e.g., Delinea, CyberArk, BeyondTrust,) to control and monitor privileged access.
• Configure and build custom integration for IGA platforms (e.g., Veza, SailPoint, Saviynt) for lifecycle management, access reviews, and role-based access controls.
• Develop automation using PowerShell, Python, or Bash to streamline provisioning, de‑provisioning, access reviews, and compliance reporting.
• Integrate IAM systems with HR, ITSM, directory services (e.g., Active Directory, LDAP), and cloud platforms (e.g., AWS, Azure AD).
• Implement identity federation and SSO using SAML, OAuth 2.0, OpenID Connect, and SCIM for seamless access across hybrid and SaaS environments.
• Manage and secure non‑human identities, including service accounts, API keys, and machine identities.
• Automate IAM infrastructure using Infrastructure as Code (IaC) tools such as Terraform, Ansible, or CI/CD pipelines.
• Leverage Policy‑as‑Code frameworks (e.g., Open Policy Agent) to enforce consistent access control policies.
• Collaborate with Security Operations to enable Identity Threat Detection and Response (ITDR) and monitor anomalous identity behaviors.

Requirements

• Strong knowledge of Zero Trust security principles and frameworks.
• Hands on experience with IAM technologies (e.g., Identity Governance, Single Sign-On, Multi‑Factor Authentication, PAM, etc).
• Proficient in scripting languages such as PowerShell, Python, or Bash for automation tasks.
• Familiarity with cloud‑native IAM services such as AWS IAM, Azure AD/Entra ID, GCP IAM, and SaaS identity integrations.
• Excellent communication skills, with the ability to articulate complex security concepts to both technical and non‑technical stakeholders.

Education and Experience

• 3-7 years of hands‑on experience in Identity and Access Management
• Experience with compliance standards such as NYDFS, HIPAA, or NIST.

#LI-CH1

Candidates should be comfortable with an on-site presence to support collaboration, team leadership, and cross‑functional partnership.

Why Join Us

At Acrisure, we’re building more than a business, we’re building a community where people can grow, thrive, and make an impact. Our benefits are designed to support every dimension of your life, from your health and finances to your family and future.

Making a lasting impact on the communities it serves, Acrisure has pledged more than $22 million through its partnerships with Corewell Health Helen DeVos Children's Hospital in Grand Rapids, Michigan, UPMC Children's Hospital in Pittsburgh, Pennsylvania and Blythedale Children's Hospital in Valhalla, New York.

Employee Benefits

We also offer our employees a comprehensive suite of benefits and perks, including:

• Physical Wellness: Comprehensive medical insurance, dental insurance, and vision insurance; life and disability insurance; fertility benefits; wellness resources; and paid sick time.
• Mental Wellness: Generous paid time off and holidays; Employee Assistance Program (EAP); and a complimentary Calm app subscription.
• Financial Wellness: Immediate vesting in a 401(k) plan; Health Savings Account (HSA) and Flexible Spending Account (FSA) options; commuter benefits; and employee discount programs.
• Family Care: Paid maternity leave and paid paternity leave (including for adoptive parents); legal plan options; and pet insurance coverage.
• … and so much more!

This list is not exhaustive of all available benefits. Eligibility and waiting periods may apply to certain offerings. Benefits may vary based on subsidiary entity and geographic location.

Acrisure is an Equal Opportunity Employer. We consider qualified applicants without regard to race, color, religion, sex, national origin, disability, or protected veteran status. Applicants may request reasonable accommodation by contacting [e-mail].

Final candidates will be required to complete post-offer verification processes related to the role and in accordance with applicable laws.

California Residents: Learn more about our privacy practices for applicants by visiting the Acrisure California Applicant Privacy Policy.

Welcome, your new opportunity awaits you.