Principle IAM Engineer

Dexian; Georgia; On-site; USD 140,000 - 210,000; Full time

Job summary

Dexian is seeking a Principal IAM Engineer to serve as the senior hands-on authority for identity modernization, designing and operating integrations, connectors, and migrations.

You will establish engineering standards, mentor engineers, and collaborate with security leadership across on-prem and cloud identity directories, SSO, and federation. This role focuses on practical solutions and ongoing modernization.

Qualifications

• Principal-level hands-on identity engineering across the full lifecycle.
• Experience building and operating identity solutions in production.
• Deep identity governance platform engineering experience.
• Experience developing custom connectors and scripts.
• Experience leading live migrations between identity platforms.
• Experience with SAML, OIDC, and conditional access.

Responsibilities

• Design, implement, and operate identity integrations, connectors, and migrations.
• Develop automation for joiner/mover/leaver processes and workflows.
• Engineer and administer identity governance platforms with provisioning and deprovisioning logic.
• Lead migrations between major identity governance platforms and rebuild governance.
• Support directory consolidation, forest/trust configuration, and hybrid sync.
• Contribute to standards, design reviews, and document patterns.
• Communicate decisions clearly to security leadership and audit stakeholders.

Skills

Hands-on identity engineering

Identity governance

Systems integrations

Migration experience

Technical leadership

Tools

Java

JavaScript

Ruby

PowerShell

Job description

Position Summary

We are seeking a Principal IAM Engineer to serve as the senior hands-on technical authority for identity engineering during an active consolidation and modernization effort. This role is focused on building and operating solutions-not solely on policy or advisory architecture.
You will personally design and implement integrations, connectors, and migrations; establish engineering standards; resolve complex technical challenges; and help expand the capabilities of the engineering team.

Key Responsibilities

• Design, implement, and operate identity integrations, connectors, and migrations across the full identity lifecycle.
• Build and enhance joiner-mover-leaver automation, authoritative-source integrations, access request and approval workflows, role models, and certification campaigns.
• Engineer and administer identity governance platforms, including:
  • Custom connector development
  • Scripting and automation
  • Provisioning and deprovisioning logic
  • Role mining
• Lead or execute migrations between major identity governance platforms, including target-state design, data and configuration migration, and governance rebuilding.
• Support directory and tenant consolidation efforts, including:
  • Forest and trust configuration
  • Schema and group policy work
  • Hybrid synchronization troubleshooting
  • Object migration activities
• Design integrations across identity governance, privileged access management, and single sign-on or federation environments.
• Review the work of specialist engineers and provide technical direction across identity access domains.
• Establish engineering standards, review designs and code, mentor engineers, and document repeatable technical patterns.
• Communicate technical decisions and tradeoffs clearly with security leadership, application owners, and audit stakeholders.
• Contribute to service account and non-human identity lifecycle management, including naming standards, reconciliation, and automated credential rotation.
• Apply awareness of workload identity and AI-agent authorization patterns, including federated identity and just-in-time credentialing.

Required Qualifications

• Principal-level, hands-on identity engineering experience across the full lifecycle.
• Demonstrated experience personally building and operating identity solutions in production, with the ability to explain the code, configuration, and results.
• Deep identity governance platform engineering experience.
• Experience developing custom connectors and scripts using one or more of the following:
  • Java
  • JavaScript
  • Ruby
  • PowerShell
• Experience with provisioning and deprovisioning logic, role modeling, role mining, access workflows, and certification processes.
• Experience leading or executing a live migration between major identity governance platforms, including target-state design, data and configuration migration, and governance rebuilding.
• Hands-on experience with enterprise directory services and cloud identity directories.
• Experience with forest and trust configuration, schema and group policy work, hybrid synchronization troubleshooting, and object migration tooling.
• Experience supporting a real directory or tenant consolidation.
• Working experience with privileged access management platforms.
• Experience with single sign-on and federation technologies, including SAML, OIDC, and conditional access.
• Ability to design integrations across identity governance, privileged access management, and access management domains.
• Demonstrated technical leadership through engineering standards, design and code reviews, mentorship, and documentation.
• Strong communication skills, including the ability to explain technical tradeoffs to security leadership, application owners, and audit stakeholders.

Preferred Qualifications

• Experience with service account and non-human identity lifecycle management.
• Familiarity with naming standards, reconciliation, and automated credential rotation.
• Awareness of workload identity and AI-agent authorization patterns, including federated identity and just-in-time credentialing.
• Experience working with directory owners while maintaining responsibility for identity engineering rather than directory ownership.
• Experience supporting consolidation efforts following organizational mergers.

Why This Opportunity May Be Appealing

• Serve as the senior hands-on technical authority during a significant identity consolidation and modernization effort.
• Personally build the most complex integrations, connectors, and migrations while shaping solutions that the broader engineering team can extend.
• Establish standardized connector, workflow, and lifecycle patterns that reduce rework.
• Help deliver directory and tenant consolidation milestones while minimizing environment instability.
• Rebuild or strengthen governance processes as identity platforms change.
• Raise the capabilities of other engineers through mentorship, technical reviews, and well-documented patterns.
• Work across identity governance, directory services, privileged access management, single sign-on, federation, non-human identity, and AI-agent authorization.

Dexian stands at the forefront of Talent + Technology solutions with a presence spanning more than 70 locations worldwide and a team exceeding 10,000 professionals.
Dexian connects the right talent and the right technology with the right organizations to deliver trajectory-changing results that help everyone achieve their ambitions and goals.
Dexian is an Equal Opportunity Employer that recruits and hires qualified candidates without regard to race, religion, sex, sexual orientation, gender identity, age, national origin, ancestry, citizenship, disability, or veteran status.