Identity Operations Engineer - IAM & Automation Lead

Ekman Associates, Inc.; Los Angeles (CA); Hybrid; USD 120,000 - 150,000; Full time

Job summary

Ekman Associates, Inc. is seeking an Identity Operations Engineer to manage and optimize hybrid identity, access, and governance services. The role covers Workday-driven lifecycle processes, Saviynt/IGA, AD/Entra ID, 365, MFA, PAM, and application integrations across on-site and remote environments.

The engineer will handle incidents, requests, changes, and audits, maintain integration reliability, and support 24/7 operations with strong communication across diverse teams.

Qualifications

• Bachelor’s degree in computer science or related field.
• Experience with at least two of: PingOne/Aura, 1Password, HashiCorp Vault, Microsoft Graph, SAML/OIDC/OAuth.
• Experience integrating or troubleshooting ServiceNow orchestration with identity platforms.
• Understanding of Microsoft 365 identity and federation dependencies.
• Experience with PowerShell, Python, JSON/REST, SQL for IAM automation.
• IT Certifications in Identity Management or ITIL Foundations desired.
• International experience and multilingual skills a plus.
• Strong hands-on experience with Active Directory and Entra ID.

Responsibilities

• Operate and support identity lifecycle integrations with Workday and IGA workflows.
• Provide ITIL-based operational support across identity services.
• Troubleshoot identities, systems, access, authentication, and entitlements.
• Maintain ServiceNow CMDB relationships for identity services.
• Participate in security incident response related to IAM.
• Ensure auditable evidence for access approvals and reviews.

Skills

IAM operations

Troubleshooting

Automation

ServiceNow

Workday integration

Entra ID/AD

Education

Bachelor’s degree in CS/Engineering

IT Certifications (MCSE CAMS ITIL)

Tools

PowerShell

Python

JSON/REST

Microsoft Graph

Saviynt

CyberArk

Splunk

ServiceNow

Workday

Job description

Ekman Associates, Inc. is seeking an Identity Operations Engineer to manage and optimize hybrid identity, access, and governance services. The role covers Workday-driven lifecycle processes, Saviynt/IGA, AD/Entra ID, 365, MFA, PAM, and application integrations across on-site and remote environments.

The engineer will handle incidents, requests, changes, and audits, maintain integration reliability, and support 24/7 operations with strong communication across diverse teams.