Identity Ops Engineer — Access Lifecycle & Automation

Kalles Group; Seattle (WA); Hybrid; USD 120,000 - 140,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Vision insurance

401K with matching

PTO

Job summary

Kalles Group in Seattle, WA is seeking an Identity Operations Engineer Consultant to support enterprise clients with Entra ID and SailPoint Identity Security Cloud. This is a hands-on role focusing on joiner/mover/leaver events, access requests, provisioning, and audit evidence for SOX and PCI.

You will automate tasks with PowerShell, Graph, SailPoint ISC APIs, and Azure automation tools while collaborating with Identity Architecture, HR, ITSM, and Security Operations.

Qualifications

• Bachelor's/master's in CS, Cybersecurity, IT, or equivalent experience.
• 3+ years in IAM, IAM operations, or systems/security engineering, including hands-on JML processes.
• Hands-on Entra ID user/group/app admin; CA, PIM, Entitlement Management knowledge.
• Hands-on enterprise IGA operations – SailPoint ISC/IdentityNow preferred.
• PowerShell and Microsoft Graph API / Graph PowerShell SDK; Python and REST API integration.
• Working knowledge of SAML, OAuth 2.0, OIDC, SCIM for troubleshooting.
• Hybrid identity – on-prem AD, Entra Connect / Cloud Sync; sync/troubleshooting.
• ITSM ticketing (ServiceNow); SLAs; auditing.
• Strong troubleshooting and clear communication with technical and non-technical partners.

Responsibilities

• Fulfill JML requests from the ITSM queue within SLA – account creation, baseline/role-based access, transfers & promotions, deprovisioning.
• Operate SailPoint ISC day to day – access requests, provisioning failures, aggregations & identity refreshes.
• Administer Entra ID – users, groups (incl. dynamic), licensing, enterprise app role assignments, guests, lifecycle workflows.
• Troubleshoot HR-to-identity provisioning and hybrid sync – attribute mismatches, duplicate accounts.
• Handle privileged/elevated access with approvals and audit trail.
• Support app access – SSO assignments, SCIM errors, onboarding apps/connectors.
• Run access certification / review campaigns operationally and produce audit evidence (SOX, PCI).
• Ongoing account hygiene – orphaned/dormant/stale accounts, guest cleanup, service account inventory.

Skills

IAM operations

JML processes

PowerShell

Microsoft Graph

Python

REST API

Entra ID

Hybrid identity

ITSM

ServiceNow

Troubleshooting

SAML/OIDC

Education

Bachelor's/Master's in CS/IT

Tools

SailPoint ISC

IdentityNow

Entra Connect

ServiceNow

Graph SDK

Job description

Kalles Group in Seattle, WA is seeking an Identity Operations Engineer Consultant to support enterprise clients with Entra ID and SailPoint Identity Security Cloud. This is a hands-on role focusing on joiner/mover/leaver events, access requests, provisioning, and audit evidence for SOX and PCI.

You will automate tasks with PowerShell, Graph, SailPoint ISC APIs, and Azure automation tools while collaborating with Identity Architecture, HR, ITSM, and Security Operations.