Plain ID IAM Engineer

System One; Birmingham (AL); Hybrid; USD 100,000 - 140,000; Full time

Job summary

System One is seeking a Plain ID IAM Engineer to support identity and access management in a large-scale financial services environment. The role focuses on PlainID onboarding, policy-based authorization, testing, analysis, and production support, while contributing to migration from the existing PlainID environment to the PlainID SaaS platform.

The ideal candidate will have 5+ years of hands-on experience with PlainID and IAM concepts, plus experience with OPA, Cedar, SailPoint, Ping Identity,

Qualifications

• 5+ years hands-on with PlainID and policy-based access control.
• Strong IAM concepts and enterprise security practices.
• Experience onboarding, testing, analysis, and production support.
• Knowledge of authorization tech such as OPA and Cedar.
• Familiarity with Ping Identity and SailPoint.
• Experience migrating IAM services to SaaS/cloud platforms.
• Working knowledge of AWS environments and cloud security.

Responsibilities

• Onboard applications and services with PlainID and ensure policy enforcement.
• Support testing, analysis, and production IAM activities.
• Assist migration efforts from traditional PlainID to SaaS platform.
• Collaborate with security, application, and business teams to resolve access issues.

Skills

PlainID IAM

Policy-based authorization

AWS knowledge

Onboarding & migration

Open Policy Agent (OPA)

Amazon Cedar

Ping Identity

SailPoint

SaaS migration

ServiceNow integration

Education

Bachelor's degree in Computer Science, Information Systems, or related field

Tools

ServiceNow

AWS

SailPoint

OPA

Amazon Cedar

Ping Identity

Job description

Job Title: Plain ID IAM Engineer

Duration: Full Time / Permanent Position
Location: Birmingham, AL, Knoxville, TN, Columbia, SC or Lafayette, LA.

Work Mode: Hybrid

System One is seeking a PlainID IAM Engineer to support identity and access management (IAM) services within a large-scale financial services environment. This role will focus on PlainID service onboarding, policy-based authorization, testing, analysis, and production support, while contributing to the migration from the existing PlainID environment to the PlainID SaaS platform.

Your future duties and responsibilities

The ideal candidate will have hands on experience with authorization technologies and IAM platforms, along with the ability to troubleshoot production issues and support application teams through onboarding and migration activities. Experience working in AWS based enterprise environments is highly valuable.

Required qualifications to be successful in this role

• 5+ years of hands on experience with PlainID and policy based authorization/access control.
• Strong understanding of Identity and Access Management (IAM) concepts and enterprise security practices.
• Experience supporting application or service onboarding, testing, analysis, and production support.
• Experience with or knowledge of authorization technologies such as OPA (Open Policy Agent) and Amazon Cedar.
• Familiarity with Ping Identity and SailPoint.
• Experience supporting or migrating IAM/security services to SaaS or cloud based platforms.
• Working knowledge of AWS environments and cloud security concepts.
• Strong troubleshooting and problem solving skills, particularly for production IAM and authorization issues.
• Ability to work with application, security, and business teams to understand requirements and resolve access related issues.

Role Focus

Authorization and IAM support using PlainID, integrated with SailPoint and ServiceNow.

Educational Requirements

• Bachelor's degree in Computer Science, Information Systems, or a related field.

Ref: #404-IT Pittsburgh