Identity and Access Management Engineer

Jobtailor; San Diego (CA); On-site; USD 110,000 - 140,000; Full time

Job summary

Jobtailor is seeking an experienced IAM Architect/Administrator to lead the design and operation of our enterprise IAM programs. You will configure core platforms, implement integration with major SaaS and on-premises systems, and develop automation to enable efficient identity management.

Responsibilities include maintaining AD/LDAP, writing SOPs, and contributing to our cybersecurity roadmap within the identity domain. Join a team driving secure access across the organization.

Qualifications

• Bachelor's degree required or equivalent years of experience in this field.
• Minimum 6 years in IT/Cybersecurity with at least 4 years focused on IAM administration and federation protocols (SAML, OIDC, OAuth).
• Certifications such as CISSP, CompTIA Security+, or vendor credentials preferred.
• Experience writing technical documentation, SOPs, and runbooks for identity management.
• Hands-on experience with Microsoft Active Directory and LDAP.
• Experience integrating IAM with SaaS (Salesforce, Workday, Office 365) and on-premises systems.

Responsibilities

• Administers and configures core IAM platforms and technologies (e.g., Clear Skye, Veza, Entra ID Governance, Okta, Ping Identity).
• Integrates IAM platforms with target applications using SAML 2.0, OAuth 2.0, OIDC, and SCIM.
• Develops connectors and workflows to integrate non-standard or legacy apps into IAM framework.
• Manages and secures directory services including Active Directory and LDAP, ensuring data integrity.
• Develops automation scripts (PowerShell, Python) to streamline IAM tasks such as provisioning and health checks.
• Contributes to cybersecurity strategy and technology roadmap within the identity domain.
• Architects and maintains enterprise IAM infrastructure, including IGA, AM, and PAM.

Skills

IAM administration

Directory services

SAML/OIDC/OAuth

AD/LDAP

SaaS integration

Technical writing SOPs

Education

Bachelor's degree

Tools

PowerShell

Python

Okta

Entra ID

Job description

Responsibilities

• Administers and configures core IAM platforms and technologies, such as (e.g., Clear Skye, Veza, Entra ID Governance, Okta, Ping Identity), or similar enterprise-grade solutions.
• Engineers and supports integration between the IAM platform and target applications using standard protocols like SAML 2.0, OAuth 2.0, OpenID Connect (OIDC), and SCIM.
• Develops custom connectors and workflows to integrate non-standard, legacy, or homegrown applications into the centralized IAM framework.
• Manages and secures the organization’s directory services, including Active Directory and LDAP, ensuring data integrity, synchronization, and replication health.
• Develops and maintains automation scripts (using PowerShell, Python, etc.) to streamline repetitive IAM tasks, such as user provisioning, report generation, and system health checks.
• Looks ahead, and contributes to the development and refinement of the organization’s broader cybersecurity strategy and technology roadmap, specifically within the identity domain.
• Architects, designs, deploys, and maintains the enterprise-wide Identity and Access Management (IAM) infrastructure, including core platforms for Identity Governance (IGA), Access Management (AM), and Privileged Access Management (PAM).

Requirements

• Bachelor’s degree required, equivalent years of experience in this specific field may be substituted for a degree.
• Minimum of 6 years of experience in IT/Cybersecurity, with at least 4-years heavily focused on IAM administration, directory services, and federation protocols (SAML, OIDC, OAuth).
• Certifications such as CISSP, CompTIA Security+, and/or vendor-specific credentials (e.g., Okta Certified Professional, Microsoft Certified: Identity and Access Administrator Associate) preferred.
• Demonstrated experience writing technical documentation, standard operating procedures (SOPs), and runbooks for identity management.
• Hands-on experience managing enterprise directory services, particularly Microsoft Active Directory (AD) and LDAP.
• Experience in integrating IAM solutions with a wide range of applications, including SaaS (e.g., Salesforce, Workday, Office 365) and on-premises systems.