Information Technology System Engineer

ARK Solutions, Inc.; Memphis (TN); Hybrid; USD 140,000 - 190,000; Full time

Job summary

ARK Solutions, Inc. seeks a senior identity engineering professional to lead the implementation, configuration, automation, operation, and troubleshooting of identity platforms for agent identities within a complex enterprise environment.

This role drives integration of traditional workforce identity with agentic identity solutions across AI, cloud, and application stacks. You will design repeatable onboarding patterns, build provisioning workflows, integrate data sources into the IAM data

Qualifications

• Deep expertise in IAM engineering within complex enterprise environments.
• Experience implementing controls for non-human identities (AI agents, service accounts, workload identities).
• Strong knowledge of SailPoint IdentityIQ, PingFederate, PingDirectory, Microsoft Entra, and Active Directory.

Responsibilities

• Deploy, configure, integrate, and operate identity capabilities for AI agents, workloads, service accounts, and other non-human identities.
• Engineer SailPoint Agentic Fabric, PingFederate, PingAuthorize, and Ping Agent IAM Core capabilities for discovery, governance, runtime authorization, authentication, lifecycle control, and audit.
• Integrate agentic identity controls with enterprise identity platforms, AI platforms, API and MCP gateways, cloud platforms, directories, secrets platforms, monitoring tools, and business applications.
• Build repeatable implementation patterns for agent onboarding, ownership, policy enforcement, access certification, provisioning, deprovisioning, authentication, authorization, and kill‑switch processes.
• Build and maintain provisioning workflows, connectors, integrations, authentication policies, and data stores for non-human identity data.
• Leverage evolving capabilities to maintain updated non-human and agentic identity inventories and ownership, operate and enforce lifecycle controls, produce reporting, detect anomalies, and perform mitigation activities.
• Establish platform operating procedures, installation plans, and configuration runbooks covering agent platform onboarding, connector configuration, NHI discovery, lifecycle workflows, certifications, OAuth client registration, credential management, authorization policies, and SIEM monitoring controls.
• Plan and execute platform upgrades, migrations, configuration changes, and technical remediation activities.
• Provide advanced incident support and diagnose complex failures across identity, application, network, cloud, data, and authentication layers.
• Improve platform reliability, scalability, security, observability, and performance through automation, monitoring, testing, and engineering standards.
• Develop secure APIs, scripts, and automation routines that streamline provisioning, operational processing, monitoring, access governance, and compliance evidence collection.
• Integrate new human and non-human identity and access data sources into the IAM data warehouse using reliable extraction, transformation, validation, reconciliation, and error‑handling patterns.
• Create monitoring, alerting, dashboards, and operational analytics using platforms such as Datadog and Splunk.
• Maintain architecture diagrams, operational runbooks, implementation documentation, source-control practices, and engineering standards.

Skills

IAM engineering

SailPoint IdentityIQ

PingFederate

Datadog

Splunk

CI/CD

IaC

OAuth/OpenID

Tools

Agentic Fabric

PingAuthorize

Microsoft Entra

Active Directory

Job description

Location: Hybrid role at offices in McLean, VA, Dallas, TX or Memphis, TN 2-3 days/week

Job Summary:

Seeking a highly skilled and experienced identity engineering professional to lead the implementation, configuration, automation, operation, and troubleshooting of identity platforms supporting agent identities within a complex enterprise environment. This role is at the forefront of an emerging and rapidly evolving discipline, responsible for turning agentic identity and access management strategy into reliable, scalable operating capability. The position requires deep technical expertise across both traditional workforce identity platforms and cutting‑edge agentic identity solutions, with a strong emphasis on integrating these capabilities across enterprise AI, security, cloud, and application stacks. A secondary but equally important focus involves identity integration engineering, including onboarding new applications and identity data sources into the IAM data warehouse to strengthen governance, reporting, monitoring, and audit readiness. This is a contract‑to‑hire opportunity, and the successful candidate will be expected to demonstrate the technical depth, leadership behaviors, collaboration skills, and delivery discipline consistent with a permanent role, while building durable documentation, operating practices, and knowledge transfer to ensure long‑term supportability and scalability.

Responsibilities:

• Deploy, configure, integrate, and operate identity capabilities for AI agents, workloads, service accounts, and other non-human identities.
• Engineer SailPoint Agentic Fabric, PingFederate, PingAuthorize, and Ping Agent IAM Core capabilities for discovery, governance, runtime authorization, authentication, lifecycle control, and audit.
• Integrate agentic identity controls with enterprise identity platforms, AI platforms, API and MCP gateways, cloud platforms, directories, secrets platforms, monitoring tools, and business applications.
• Build repeatable implementation patterns for agent onboarding, ownership, policy enforcement, access certification, provisioning, deprovisioning, authentication, authorization, and kill‑switch processes.
• Build and maintain provisioning workflows, connectors, integrations, authentication policies, and data stores for non-human identity data.
• Leverage evolving capabilities to maintain updated non-human and agentic identity inventories and ownership, operate and enforce lifecycle controls, produce reporting, detect anomalies, and perform mitigation activities.
• Establish platform operating procedures, installation plans, and configuration runbooks covering agent platform onboarding, connector configuration, NHI discovery, lifecycle workflows, certifications, OAuth client registration, credential management, authorization policies, and SIEM monitoring controls.
• Plan and execute platform upgrades, migrations, configuration changes, and technical remediation activities.
• Provide advanced incident support and diagnose complex failures across identity, application, network, cloud, data, and authentication layers.
• Improve platform reliability, scalability, security, observability, and performance through automation, monitoring, testing, and engineering standards.
• Develop secure APIs, scripts, and automation routines that streamline provisioning, operational processing, monitoring, access governance, and compliance evidence collection.
• Integrate new human and non-human identity and access data sources into the IAM data warehouse using reliable extraction, transformation, validation, reconciliation, and error‑handling patterns.
• Create monitoring, alerting, dashboards, and operational analytics using platforms such as Datadog and Splunk.
• Maintain architecture diagrams, operational runbooks, implementation documentation, source-control practices, and engineering standards.

Skills:

• Deep expertise in IAM engineering, platform engineering, and identity integration within complex enterprise environments.
• Proficiency in implementing controls for non-human identities, including AI agents, service accounts, machine accounts, service principals, OAuth clients, workload identities, and associated credentials and certificates.
• Strong working knowledge of traditional workforce identity platforms, including SailPoint IdentityIQ, PingFederate, PingDirectory, Microsoft Entra, and Microsoft Active Directory.
• Familiarity with support, monitoring, and observability platforms such as ServiceNow, Datadog, and Splunk.
• Proven ability to design, implement, and debug identity lifecycle, authentication, federation, authorization, directory, and provisioning solutions.
• Experience building APIs, connectors, scripts, and automation for operational processing, monitoring, and audit or compliance use cases.
• Working knowledge of HRIS integrations, identity data models, SQL, ETL or data pipelines, logging, and reconciliation controls.
• Strong troubleshooting, documentation, communication, and cross‑functional delivery skills.
• Hands‑on experience with SailPoint Identity Security Cloud, Agentic Fabric, Entro, Ping Agent IAM Core, PingAuthorize, API or MCP gateways, or comparable non-human identity platforms.
• Experience with privileged access management platforms such as HashiCorp Vault and OneIdentity Safeguard.
• Experience with CI/CD, infrastructure as code, automated testing, Git‑based workflows, and production support practices.