Identity and Access Engineer

Clayco

St. Louis (MO)

On-site

USD 90,000 - 120,000

Full time

14 days+

Get more replies from employers

Send a job-specific resume in minutes.

Benefits offered by this job

Discretionary annual bonus

Comprehensive benefits package

Flexible spending accounts

Job summary

A leading construction firm located in St. Louis, MO is seeking an Identity & Access Engineer. This full-time role focuses on the implementation and support of advanced Identity and Access Management (IAM) solutions. Responsibilities include configuring IAM platforms, ensuring compliance, and serving as a technical escalation point. The ideal candidate will have a Bachelor’s degree in Computer Science or related fields, with 4-6 years of IAM engineering experience. The firm offers competitive compensation, a comprehensive benefits package, and a dynamic work environment.

Qualifications

Bachelor’s degree in a relevant field or equivalent hands-on work experience.
7-9 years of technical work experience in Information Technology.
4-6 years of IAM engineering experience.

Responsibilities

Implement, integrate, and support IAM solutions across the organization.
Design and implement Directory Services integrations.
Maintain automated provisioning/deprovisioning workflows.

Skills

Identity and Access Management solutions

Active Directory Services

Privileged Access Management

Scripting languages (Python, PowerShell)

Communication skills

Education

Bachelor’s Degree in Computer Science or Information Technology

Certified Identity Management Professional (CIMP)

Microsoft Certified: Identity and Access Administrator Associate

Tools

IAM solutions

Cloud identity providers

Certificate Services

Job description

Get AI-powered advice on this job and more exclusive features.

Direct message the job poster from Clayco

Clayco is a full-service, turnkey real estate development, master planning, architecture, engineering, and construction firm that safely delivers clients across North America the highest quality solutions on time, on budget, and above and beyond expectations. With $7.6 billion in revenue for 2024, Clayco specializes in the "art and science of building," providing fast track, efficient solutions for industrial, commercial, institutional, and residential related building projects.

The Role We Want You For

Under the direction of the Identity and Access Manager, the Identity & Access Engineer will play a critical role in the implementation, integration, and support of advanced Identity and Access Management (IAM) solutions across the Clayco Enterprise. This role contributes to the design, configuration, and lifecycle management of IAM platforms and policies that enforce secure, scalable, and compliant access to internal systems, cloud services, and third‑party applications. This role focuses on the engineering and integration of IAM capabilities, such as directory services, SSO/MFA platforms, PKI, and access provisioning automation, while also serving as a technical escalation point for operational IAM functions.

The Identity & Access Engineer also contributes to the ongoing adoption and expansion of data‑driven identity life‑cycles and the dynamic modification of access and entitlements as identity context and details change. This role also ensures compliance with regulatory requirements, enhancing security through access control and identity verification mechanisms.

The Specifics of the Role

As a member of the Information Security Team, contributes however and whenever necessary to Incident Response efforts as circumstance dictates
Design and implement Directory Services integrations and Identity Provider (IdP) connections for both internal and third‑party applications
Collaborate on standard integrations of cloud and on‑premise apps into the SSO/MFA ecosystem, leveraging standards like SAML 2.0, OAuth 2.0, and SCIM; lead on more complex integrations
Maintain and support automated provisioning/deprovisioning workflows using tools like SCIM, orchestration workflows, API‑based connectors, etc.
Collaborate with the Information Security and Architecture teams on the design and implementation of new IAM services, including PKI, PIM/PAM, federated authentication, and certificate‑based access control
Contribute to infrastructure readiness assessments and configuration planning during IAM‑related project initiatives and system rollouts
Participate in solution evaluations, proof of concept testing, and implementation planning for emerging IAM capabilities
Serve as technical escalation point and operational coverage when necessary for the following technologies:
- Identity Providers (IdP) supporting SSO/MFA including Access Gateways
- Integrations of identity management solutions with in‑house applications, third‑party applications, and cloud services
- Active Directory Services & Entra ID Services
- Privileged Access Management (PAM) and Privileged Identity Management (PIM)
- Certificate Services, Hosted PKI, and Auto‑Enrollment Gateway (AEG)
- Automation of access provisioning / deprovisioning
- Physical Access Control identity management and integrations with Directory Services
- Integration & tuning of related IAM security log sources for SIEM ingestion
Ensure all IAM integrations and implementations align with least‑privilege, role‑based access models, identity governance policies, and regulatory/contractual requirements
Lead the implementation, deployment, and maturing of PKI services to support certificate‑based authentication and trust mechanisms across Clayco’s email infrastructure, client infrastructure, and document signing processes
Document system and component configurations, integrations, testing, and validation procedures, and knowledge‑base articles for long‑term operational sustainability

Requirements

Bachelor’s Degree in Computer Science, Information Technology, or Information Systems (preferred), or equivalent hands‑on work experience
Certified Identity Management Professional (CIMP); Microsoft Certified: Identity and Access Administrator Associate; and Okta Certified Professional certifications (current status or obtained within 12 months of assuming role)
7‑9 years of technical work experience in Information Technology
4‑6 years of direct work‑related IAM engineering experience, including IAM solution design, integrations, and advanced configuration planning
Experience with Active Directory Services (AD) related to identity and access
Experience with cloud identity providers (IdP)
Experience with Privileged Access Management (PAM)
Experience with Privileged Identity Management (PIM)
Knowledge and experience with identity management protocols and solutions, Kerberos, LDAP, SSO (OAuth & SAML 2.0), PKI (authentication & digital signatures)
Experience in client‑server, cloud, & hybrid environments, specifically their associated authentication mechanisms and protocols
Experience with scripting or programming languages like Python, PowerShell, BASH, etc.
Current knowledge of physical and logical identity‑focused attacker exploits including techniques, tools, artifacts, and procedures involved
Excellent oral and written communication skills, including the ability to document functional requirements, test and validation criteria, develop communication plans, report on performance and compliance, and other relevant operational communications
Excellent research, analysis, and problem‑solving skills
Ability to respond to incidents or outages 24/7, including holidays and weekends
Thrive in fast‑paced environment

Some Things You Should Know

No other builder can offer the collaborative design‑build approach that Clayco does
We work on creative, complex, award‑winning, high‑profile jobs
The pace is fast

Why Clayco?

2025 Best Places to Work – St. Louis Business Journal, Los Angeles Business Journal, and Phoenix Business Journal
2025 ENR Midwest – Midwest Contractor (#1)
2025 ENR Top 100 Design‑Build Firms – Design‑Build Contractor (Top 5)
2025 ENR Top 25 Data Center Builders – Data Center Contractor (Top 3)
Discretionary annual bonus: subject to company and individual performance
Comprehensive benefits package including medical, dental, and vision plans; 401(k); generous PTO and paid company holidays; employee assistance program; flexible spending accounts; life insurance; disability coverage; learning & development programs and more

Compensation

The salary range for this position considers a wide range of factors in making compensation decisions, including but not limited to: education, qualifications, skills, training, certifications, internal equity, and location. Compensation decisions are dependent on the facts and circumstances of each case.

Seniority level