Identity and Access Management Engineer

Silpa Consulting LLC; Houston (TX); Remote; USD 83,000 - 165,000; Full time

Job summary

Silpa Companies is seeking an IAM Engineer to deliver enterprise identity programs at scale, spanning SSO, conditional access, joiner-mover-leaver workflows, and privileged access management. You will work across Okta, Entra ID, Ping, SailPoint, Saviynt, and CyberArk to design durable solutions that stand up to audits and executive reviews.

The role requires hands-on IAM engineering experience with major IDPs, IAM tooling, and scripting skills, plus willingness to travel for client engagements.

Qualifications

• 4 or more years of hands-on IAM engineering experience.
• Production experience with at least one IDP (Okta, Entra ID, Ping).
• Hands-on experience with SAML, OIDC, SCIM, and OAuth at protocol depth.
• Working knowledge of at least one IGA platform (SailPoint, Saviynt, Okta Identity Governance).
• Experience implementing PAM (CyberArk, BeyondTrust, Delinea, or Entra PIM).
• Strong scripting skills in PowerShell or Python.
• Authorized to work in the U.S.
• Candidates located in the Houston, Texas area will be given preference; remote consultants will also be considered.
• Reliable, secure internet connection and ability to travel to client sites as required by engagement scope.

Responsibilities

• Design and implement enterprise SSO programs across Okta, Entra ID, or Ping.
• Build conditional-access policies aligned to client risk posture and audit obligations.
• Implement joiner-mover-leaver lifecycle workflows in SailPoint, Saviynt, or Okta Lifecycle Management.
• Design and harden privileged access management using CyberArk, BeyondTrust, or Entra Privileged Identity Management.
• Build SCIM provisioning and federation for client SaaS portfolios at scale.
• Implement passwordless and phishing-resistant authentication using FIDO2 / WebAuthn.
• Run access-recertification campaigns and tie outcomes back to the GRC program.
• Partner with cloud security on workload identity (managed identities, IAM roles, OIDC federation).
• Author identity runbooks, break-glass procedures, and recovery playbooks.

Skills

IAM engineering

Scripting (PowerShell/Python)

Client engagements

Travel ability

Tools

Okta

Entra ID / Azure AD

Ping

SailPoint

Saviynt

CyberArk

BeyondTrust

Delinea

Job description

Pay Contract rate commensurate with experience and engagement scope.

Silpa Companies is hiring an IAM Engineer for client engagements that focus on modern identity at scale: SSO, federation, conditional access, joiner-mover-leaver lifecycle, and privileged access management. You will work across Okta, Microsoft Entra ID (Azure AD), Ping, and SailPoint or Saviynt to deliver durable identity programs that survive the audit and the next CIO transition.

What you /
will do

• Design and implement enterprise SSO programs across Okta, Entra ID, or Ping.
• Build conditional-access policies aligned to client risk posture and audit obligations.
• Implement joiner-mover-leaver lifecycle workflows in SailPoint, Saviynt, or Okta Lifecycle Management.
• Design and harden privileged access management using CyberArk, BeyondTrust, or Entra Privileged Identity Management.
• Build SCIM provisioning and federation for client SaaS portfolios at scale.
• Implement passwordless and phishing-resistant authentication using FIDO2 / WebAuthn.
• Run access-recertification campaigns and tie outcomes back to the GRC program.
• Partner with cloud security on workload identity (managed identities, IAM roles, OIDC federation).
• Author identity runbooks, break-glass procedures, and recovery playbooks.

What we /
look for

• 4 or more years of hands-on IAM engineering experience.
• Production experience with at least one IDP (Okta, Entra ID, Ping).
• Hands-on experience with SAML, OIDC, SCIM, and OAuth at protocol depth.
• Working knowledge of at least one IGA platform (SailPoint, Saviynt, Okta Identity Governance).
• Experience implementing PAM (CyberArk, BeyondTrust, Delinea, or Entra PIM).
• Strong scripting skills in PowerShell or Python.
• Authorized to work in the U.S.
• Candidates located in the Houston, Texas area will be given preference; remote consultants will also be considered.
• Reliable, secure internet connection and ability to travel to client sites as required by engagement scope.

Why /
join

Silpa Companies places Identity and Access Management Engineers on engagements where the work is real, the environments are non-trivial, and your contributions move the needle for client teams. Practitioners who deliver consistently are prioritized for follow-on and expanded scope engagements within the Silpa network.

• Real engagement ownership across diverse industries and technology environments
• Direct partnership with client engineering, data, security, or executive teams
• Priority for follow-on and expanded scope engagements based on quality of delivery
• Flexible contract and project-based structure
• Collaborative delivery team with experienced Silpa engagement leads

About /
us

Silpa Companies, LLC is a national IT consulting and staffing firm empowering organizations across multiple industries through a blend of AI adoption, Master Data Management, Data and Analytics, Cybersecurity, Cloud Engineering, DevSecOps/GitOps, Fractional C-Suite leadership, Digital Transformation, and M&A advisory for private equity and software ventures.