Identity and Access Management Engineer

Hruckus; United States; Remote; USD 110,000 - 160,000; Full time

Job summary

HRUCKUS invites applications for an Identity and Access Management Engineer to support a national pediatric healthcare organization. This remote role focuses on implementing enterprise IAM, PAM, and RBAC, provisioning users, and troubleshooting authentication issues across clinical and research operations.

The successful candidate will design integrations, improve security posture, and collaborate with cross-functional teams to support identity lifecycle management and enterprise application

Qualifications

• 3+ years of hands-on experience with CyberArk or comparable PAM solutions.
• Experience integrating enterprise applications using APIs and identity protocols (REST, SCIM, OAuth 2.0, OIDC).
• Strong understanding of identity governance, access provisioning, and enterprise security principles.

Responsibilities

• Implement, maintain, and support enterprise IAM solutions (IGA, PAM, RBAC).
• Manage user provisioning and access requests across IT and business stakeholders.
• Troubleshoot IAM authentication and access issues with established escalation procedures.
• Provide technical support to IT, clinical staff, operations, and research computing teams.
• Evaluate IAM architecture and configurations to strengthen security and efficiency.
• Design and implement customized IAM solutions and integrations for evolving needs.
• Collaborate with cross-functional teams to support enterprise application integrations and identity lifecycle management.

Skills

CyberArk PAM

APIs REST/SCIM/OIDC

IAM governance

Troubleshooting IAM

Job description

Veteran Firm Seeking a Identity and Access Management Engineer for a Remote Assignment in Boston; Massachusetts; Florida; Illinois; Missouri; or Texas

My name is Stephen Hrutka. I lead a Veteran‑Owned management consulting firm in Washington, DC. We specialize in Technical and Cleared Recruiting for the Department of Defense (DoD), the Intelligence Community (IC), and other advanced defense agencies.

At HRUCKUS, we support fellow Veteran‑Owned businesses by helping them recruit for positions across organizations such as the VA, SBA, HHS, DARPA, and other leading‑edge R&D‑focused defense agencies.

We seek to fill a Identity and Access Management Engineer role in Boston; Massachusetts; Florida; Illinois; Missouri; or Texas

The ideal candidate is a Boston; Massachusetts; Florida; Illinois; Missouri; or Texas resident with 3+ years of experience with CyberArk or comparable PAM solutions, and experience integrating enterprise applications using modern APIs (REST APIs, SCIM, OAuth 2.0, OpenID Connect). Preferred skills include CyberArk certifications, Workday Pro Integrations Certification, SailPoint experience, and experience using AI-assisted development tools.

Thanks,

www.hruckus.com

Executive Summary:

HRUCKUS is looking for an experienced Identity and Access Management Engineer to support a nationally recognized pediatric healthcare organization by implementing, maintaining, and enhancing enterprise identity governance, privileged access management, and cybersecurity solutions.

Position Description:

The Identity and Access Management Engineer will implement and support enterprise identity solutions (IGA, PAM, RBAC), manage user provisioning, troubleshoot complex authentication issues, and evaluate IAM architecture to recommend security improvements. Additionally, they will design customized integrations and collaborate with cross-functional teams to support enterprise application integrations across clinical and research operations.

Position Responsibilities:

• Implement, maintain, and support enterprise identity and access management solutions, including Identity Governance and Administration (IGA), Privileged Access Management (PAM), and Role-Based Access Control (RBAC).


• Manage and respond to user provisioning and access requests, collaborating with IT teams and business stakeholders to ensure appropriate access to technology resources.


• Troubleshoot and resolve identity governance, authentication, and access-related issues while following established escalation and resolution procedures.


• Provide technical support to IT teams, clinical staff, operational departments, research computing teams, and end-user services.


• Evaluate existing IAM architecture, processes, and configurations, recommending improvements to strengthen security, efficiency, and overall performance.


• Design and implement customized IAM solutions and integrations to meet evolving organizational and business requirements.


• Collaborate with cross-functional teams to support enterprise application integrations and identity lifecycle management.

Required Qualifications:

• 3 years of hands‑on experience with CyberArk or comparable Privileged Access Management (PAM) solutions.


• Experience integrating enterprise applications using modern APIs and identity management protocols, including REST APIs, SCIM, OAuth 2.0, OpenID Connect (OIDC), and related authentication and provisioning technologies.


• Strong understanding of identity governance, access provisioning, and enterprise security principles.


• Demonstrated ability to troubleshoot complex IAM-related issues and work collaboratively across technical teams.

Desired Qualifications:

• CyberArk certifications, including one or more of the following: CyberArk Engineering and Deployment, CyberArk Certified Delivery Engineer, or CyberArk Core Administration.


• Workday Pro Integrations (Core) Certification or comparable hands‑on experience.


• Experience implementing or administering SailPoint or a similar Identity Governance and Administration (IGA) platform.


• Experience using AI-assisted development tools such as OpenAI Codex or Claude Code to develop customized technical solutions.

Details:

Job Title: Identity and Access Management Engineer