Identity and Access Management (IAM) Engineer

Kellermeyer Bergensons Services, LLC; South Carolina; Remote; USD 115,000 - 125,000; Full time

Job summary

A leading company in facility services is hiring an accomplished Identity and Access Management (IAM) Engineer. The role is focused on enhancing cybersecurity through effective identity governance and ensuring secure access across systems. Candidates will manage IAM solutions using tools like Azure AD and AWS, implement modern authentication protocols, and enforce Zero Trust access control principles. This is a fully remote position, with a competitive salary and comprehensive benefits.

Benefits

Paid Time Off

Life Insurance

401(k) with match

Pet Insurance

Discounts on travel and electronics

Qualifications

• 5+ years of experience with Microsoft Entra ID, Azure AD, and AWS IAM.
• Strong knowledge of IAM standards like SCIM, SAML, and OIDC.
• Experience in designing enterprise IAM solutions.

Responsibilities

• Design and manage identity solutions supporting cloud architectures.
• Integrate applications using SCIM, SAML, OAuth2.
• Conduct access reviews and audits for compliance.

Skills

Microsoft Entra ID

Azure AD

AWS IAM

Zero Trust principles

Scripting (Python, PowerShell)

Identity standards (SCIM, SAML, OIDC)

Problem-solving

Communication skills

Education

Bachelor's degree in Computer Science, Cybersecurity, or related field

Tools

Microsoft Graph API

Terraform

Job description

Identity and Access Management (IAM) Engineer

About KBS
Kellermeyer Bergensons Services (KBS) is the largest privately held provider of facility services in North America, servicing over 2 billion square feet of space daily. We help industry leaders across various sectors—including retail, industrial, healthcare, education, and manufacturing—maintain clean, efficient, and welcoming environments. As we grow, we seek dedicated, reliable team members committed to a culture of respect, opportunity, and pride in service.

Job Description

KBS is looking for a skilled and security-focused Identity & Access Management (IAM) Engineer to join our Cybersecurity team. This role is vital in ensuring secure, reliable access across our on-premises and cloud systems, emphasizing modern identity governance, authentication protocols, and Zero Trust access controls. If you are interested, apply now!

LOCATION: 100% remote; candidates must reside in the Pacific or Central time zones.

SALARY: $115,000 - $125,000 annually.

The salary is based on market data and may vary depending on experience, qualifications, skills, internal equity, and location. The final offer will be determined during the hiring process.

Key Responsibilities

• Design, implement, and manage identity solutions using Microsoft Entra ID / Azure AD, Active Directory, AWS IAM, and OneLogin, supporting hybrid and cloud architectures.
• Integrate cloud and on-premises applications with SCIM, SAML, OIDC, OAuth2, and WebAuthn.
• Manage identity lifecycle processes (Joiner, Mover, Leaver) using tools like Python, PowerShell, and Microsoft Graph API for provisioning and deprovisioning.
• Enforce Conditional Access policies, including MFA, device trust, RBAC, and risk-based controls.
• Troubleshoot IAM issues across environments and collaborate with infrastructure and application teams.
• Conduct access reviews, audits, and governance activities to ensure compliance with standards like SOC2 and NIST CSF.
• Partner with stakeholders to define IAM use cases and manage project dependencies.
• Document IAM processes, policies, and workflows.
• Stay updated on IAM technologies, threats, and best practices to enhance security and support Zero Trust.
• Perform other duties as assigned.

Required Skills & Qualifications

• 5+ years of experience with:
  • Microsoft Entra ID / Azure AD, including Conditional Access, Governance, PIM, JIT access
  • AWS IAM and Identity Center
  • OneLogin or similar platforms
• Strong knowledge of IAM standards: SCIM, SAML, OIDC, OAuth2, FIDO2/WebAuthn
• Scripting and automation skills (Python, PowerShell, Graph API, Terraform)
• Experience with Zero Trust security principles
• Excellent documentation and communication skills
• Strong analytical and problem-solving abilities
• Ethical judgment and critical thinking
• Interpersonal and customer service skills
• Ability to manage time and meet deadlines

Education & Experience

• Bachelor's degree in Computer Science, Cybersecurity, or related field (or equivalent experience)
• Preferred certifications: SC-300, SC-100, or similar
• At least 5 years designing and supporting enterprise IAM solutions
• Knowledge of identity governance, RBAC, and security best practices
• Familiarity with Microsoft tools: Defender for Identity, Intune, Purview, Graph API
• Experience with IAM projects, audits, or compliance (e.g., NIST, SOC2)

Benefits

Full-time employment (30+ hours/week) may include benefits such as medical, dental, vision, prescriptions, and more:

• Paid Time Off, Holidays, Sick Leave
• Life Insurance, Short & Long Term Disability
• Supplemental Health Insurance
• 401(k) with match or Deferred Compensation
• Pet Insurance
• PerkSpot discounts on travel, gyms, electronics, etc.

KBS is an equal opportunity employer and provides accommodations for individuals with disabilities in accordance with applicable laws.