Identity Operations Engineer

Confiz Limited; Seattle (WA); Híbrido; USD 120.000 - 170.000; Jornada completa

Descripción de la vacante

Confiz Limited in Seattle, WA seeks an Identity Operations Engineer to manage hands-on IAM tasks and automate identity workflows. You will handle JML provisioning, security gating, and escalations while collaborating with Identity Architecture, HR, and ITSM teams.

You will work in a hybrid model with onsite presence four days per week and remote Fridays, engaging in incident response, audit readiness, and automation projects using PowerShell, Graph, Python, and SailPoint ISC APIs.

Formación

• Bachelor’s degree or equivalent experience in computing, cybersecurity, or IT.
• 5+ years in IAM operations or security engineering with hands-on JML processing.
• Hands-on Entra ID administration, CA, PIM, and Entra ID Governance.
• Experience operating an enterprise IGA platform (SailPoint ISC/IdentityNow) and troubleshooting provisioning.
• Strong PowerShell and Graph scripting; Python and REST API knowledge.
• Working knowledge of SAML, OAuth 2.0, OIDC, and SCIM.
• Experience with hybrid identity and ITSM environments (ServiceNow).
• Certifications such as SC-300, AZ-500, Security+ are a plus.

Responsabilidades

• Fulfill JML requests from ITSM queue within SLA: create accounts, assign roles, process transfers, and deprovision when needed.
• Operate SailPoint ISC; manage provisioning, monitor aggregations, and fix identity issues.
• Administer Entra ID: users, groups, licenses, app roles, guest accounts, and entitlement workflows.
• Troubleshoot HR-to-identity provisioning and hybrid sync issues between Entra ID and on‑prem AD.
• Handle privileged access requests with approvals and audit trails.
• Run access reviews, clean orphaned accounts, and produce audit evidence (SOX, PCI).
• Develop automation with PowerShell, Graph, Python and SailPoint ISC APIs; create Azure/ITSM workflows.
• Contribute to incident response and runbooks; assist service desk escalation.

Conocimientos

Identity & access management (IAM)

PowerShell

Microsoft Graph

Python

SAML, OAuth 2.0, OIDC

Hybrid identity (AD, Entra Connect/SMB

Educación

Bachelor’s degree in Computer Science, Cybersecurity, IT, or equivalent

Herramientas

SailPoint ISC

IdentityNow

Azure Entra ID / Entra ID

ITSM tooling (ServiceNow)

Descripción del empleo

Confiz is seeking an Identity Operations Engineer for one of our largest retail clients in Seattle, WA. This is a hands‑on operations role, not an architecture role. You’ll spend most of your time working the identity ticket queue and troubleshooting provisioning and sync failures, and the rest automating the tickets and manual steps that shouldn’t exist. You’ll partner with Identity Architecture, HR, ITSM, application owners, and Security Operations.

Work Type: Hybrid: Onsite 4 days Per Week, Remote Fridays

Work Schedule: 8:00 AM - 5:00 PM PT

Responsibilities

• Fulfill JML requests from the ITSM queue within SLA: account creation, role-based access, access changes for transfers, and complete deprovisioning for terminations and leaves.
• Operate SailPoint ISC: process access requests, remediate provisioning failures, monitor aggregations and identity refreshes, and fix identity attribute issues.
• Administer Entra ID: users, groups, licenses, app role assignments, guest accounts, Lifecycle Workflows, and Entitlement Management requests.
• Troubleshoot HR-to-identity provisioning and hybrid sync issues between Entra ID and on-premises Active Directory (Entra Connect / Cloud Sync).
• Handle PIM and privileged access requests with proper approvals and audit trail.
• Run access review campaigns, clean up orphaned and dormant accounts, and produce audit evidence (e.g., SOX, PCI).
• Build automation with PowerShell, Microsoft Graph, Python, and SailPoint ISC APIs and workflows.
• Create event-driven workflows (Azure Automation, Logic Apps, Power Automate) with ITSM integration for auto‑fulfillment and closure.
• Analyze ticket trends to prioritize automation and track time saved.
• Treat automation as production code: source control, peer review, testing, and logging.
• Write runbooks and knowledge articles, and serve as an escalation point for the service desk.
• Participate in incident response and escalation coverage, including after‑hours support as needed.

Requirements

• Bachelor’s degree in Computer Science, Cybersecurity, IT, or equivalent experience.
• 5+ years in IAM operations or systems/security engineering, including hands‑on JML process work.
• Hands‑on Microsoft Entra ID administration, with working knowledge of Conditional Access, PIM, and Entra ID Governance.
• Hands‑on experience operating an enterprise IGA platform (SailPoint ISC / IdentityNow preferred), including troubleshooting failed provisioning.
• Strong PowerShell and Microsoft Graph scripting skills; Python and REST API experience valued.
• Working knowledge of SAML, OAuth 2.0, OIDC, and SCIM.
• Experience with hybrid identity (Active Directory, Entra Connect / Cloud Sync).
• Experience in an ITSM environment (e.g., ServiceNow) working against SLAs.

Nice to Have

• Certifications: SC‑300, SailPoint ISC, AZ‑500, Security+, or CISSP.
• ITSM‑integrated automation, low‑code tools, or Terraform/Bicep.
• HRIS‑driven provisioning (e.g., Workday) and audit/compliance experience.
• Familiarity with PAM (e.g., BeyondTrust), ITDR, or SIEM/SOAR integration.
• Retail or ecommerce

We have a global team of amazing individuals working on highly innovative enterprise projects & products. Our customer base includes Fortune 100 retail and CPG companies, leading store chains, fast growth fintech, and multiple Silicon Valley startups.

What makes Confiz stand out is our focus on processes and culture. Confiz is ISO 9001:2015 (QMS), ISO 27001:2022 (ISMS), ISO 20000‑1:2018 (ITSM) and ISO 14001:2015 (EMS) Certified. We have a vibrant culture of learning via collaboration and making workplace fun.

People who work with us work with cutting‑edge technologies while contributing success to the company as well as to themselves.

To know more about Confiz Limited, visit https://www.linkedin.com/company/confiz/