Lead Cloud IAM Engineer - Identity & Access Security

FICO; United States; Remote; USD 119,000 - 187,000; Full time

Job summary

FICO is seeking a Lead IAM Engineer to define and implement cloud-based IGA capabilities across the enterprise. You will partner with Cybersecurity and business leaders to shape identity strategy, oversee governance, privileged access, and federation programs, and drive SD and LP controls with data-driven decisions.

The role emphasizes hands-on design, AWS cloud work, automation with Python, and collaboration across technology teams in a dynamic security environment.

Qualifications

• In‑depth hands‑on experience with IGA platforms such as SailPoint or Saviynt.
• Strong identity infrastructure experience: AD, Entra ID, AWS IAM, Okta, RHIM.
• Knowledge of federation and access protocols (SAML, SSO, SCIM, LDAP, RADIUS, Kerberos, MFA/FIDO2).
• Hands‑on experience with AWS Cloud; scripting in Python.
• Experience applying Segregation of Duties and Least Privilege.
• Experience automating identity processes tied to HRIS.
• PAM, ITDR, and NHI tooling (CyberArk, HashiCorp, Delinea, Clutch) desired.
• Certificate management, PKI knowledge; interest in post‑quantum cryptography.
• Relevant certifications (SANS, AWS Certified Security) are a plus.
• Bachelor's degree in CS, Cyber Security, IT or related field or relevant experience.

Responsibilities

• Design and implement modern, cloud-based IGA platform capabilities that scale across the enterprise.
• Partner across Cybersecurity and with business and technology leaders to shape Identity engineering strategy.
• Implement and support identity‑based platforms, systems, and programs spanning governance, privileged access, and federation.
• Evaluate identity services on an ongoing basis and drive recommendations that close governance gaps and reduce risk exposure.
• Guide engineering decisions using observed access patterns and behavioral data to strengthen Segregation of Duties and Least Privilege enforcement.

Skills

IGA platforms

Identity infra

Federation protocols

AWS Cloud

Automation with Python

Segregation of Duties

Least Privilege

HRIS automation

PAM tooling

PKI concepts

Post-quantum crypto

Certifications (SANS)

AWS Security

Education

Bachelor's degree in CS or related field

Tools

SailPoint

Saviynt

Active Directory

Entra ID

AWS IAM

Okta

RHIM

CyberArk

HashiCorp

Delinea

Clutch

SAML

SCIM

LDAP

RADIUS

Kerberos

MFA

FIDO2

PKI

Post-quantum crypto

SANS

AWS Security

Job description

FICO is seeking a Lead IAM Engineer to define and implement cloud-based IGA capabilities across the enterprise. You will partner with Cybersecurity and business leaders to shape identity strategy, oversee governance, privileged access, and federation programs, and drive SD and LP controls with data-driven decisions.

The role emphasizes hands-on design, AWS cloud work, automation with Python, and collaboration across technology teams in a dynamic security environment.