Principle IAM Engineer

Quantum Technologies. LLC; Sandy Springs (GA); On-site; USD 82,000 - 117,000; Full time

Job summary

Quantum Technologies. LLC is seeking a Principal IAM Engineer in Sandy Springs, GA for an 8-month engagement. You will design, implement, and operate identity integrations, connectors, and migrations as the senior hands-on technical authority.

You will build automation for joiner-mover-leaver processes, manage privileged access, and help guide enterprise directory consolidation. Strong communication with security leadership is essential.

Qualifications

• Principal-level, hands-on identity engineering experience across the full lifecycle.
• Demonstrated experience personally building and operating identity solutions in production.
• Deep identity governance platform engineering experience.
• Experience developing custom connectors and scripts using Java, Ruby or PowerShell.
• Experience leading or executing live migrations between identity platforms.

Responsibilities

• Design, implement, and operate identity integrations, connectors, and migrations across the full identity lifecycle.
• Build and enhance joiner-mover-leaver automation, authoritative-source integrations, and certification campaigns.
• Engineer and administer identity governance platforms, including scripting and automation, provisioning/deprovisioning logic.
• Lead migrations between major identity governance platforms, including target-state design and data migration.
• Support directory and tenant consolidation efforts, including forest and trust configuration and hybrid synchronization troubleshooting.
• Design integrations across identity governance, privileged access management, and SSO/federation environments.

Skills

Identity engineering

Hands-on production

Security leadership

Excellent communication

Automation scripting

Tools

Java

Ruby

PowerShell

Job description

US Citizen, Green Card, H-1B, OPT-EAD, CPT, Other

Job Title:Principle IAM Engineer
Location: Sandy Springs, GA
Duration: 8 Months + Extension
Bill Rate: $72/hour (C2C)
Job Type: W-2, 1099, C2C
Client: To Be Discussed Later
Work Authorization: US Citizen, Green Card, OPT-EAD, CPT, H-1B, H4-EAD, Other

Job Summary:
We are seeking a Principal IAM Engineer to serve as the senior hands-on technical authority for identity engineering during an active consolidation and modernization effort. This role is focused on building and operating solutions-not solely on policy or advisory architecture.
You will personally design and implement integrations, connectors, and migrations; establish engineering standards; resolve complex technical challenges; and help expand the capabilities of the engineering team.

Key Responsibilities:

• Design, implement, and operate identity integrations, connectors, and migrations across the full identity lifecycle.
• Build and enhance joiner-mover-leaver automation, authoritative-source integrations, access request and approval workflows, role models, and certification campaigns.
• Engineer and administer identity governance platforms, including:
• Scripting and automation
• Provisioning and deprovisioning logic
• Lead or execute migrations between major identity governance platforms, including target-state design, data and configuration migration, and governance rebuilding.
• Support directory and tenant consolidation efforts, including:
• Forest and trust configuration
• Schema and group policy work
• Hybrid synchronization troubleshooting
• Object migration activities
• Design integrations across identity governance, privileged access management, and single sign-on or federation environments.
• Review the work of specialist engineers and provide technical direction across identity access domains.
• Establish engineering standards, review designs and code, mentor engineers, and document repeatable technical patterns.
• Communicate technical decisions and tradeoffs clearly with security leadership, application owners, and audit stakeholders.
• Contribute to service account and non-human identity lifecycle management, including naming standards, reconciliation, and automated credential rotation.
• Apply awareness of workload identity and AI-agent authorization patterns, including federated identity and just-in-time credentialing.

Required Qualifications:

• Principal-level, hands-on identity engineering experience across the full lifecycle.
• Demonstrated experience personally building and operating identity solutions in production, with the ability to explain the code, configuration, and results.
• Deep identity governance platform engineering experience.
• Experience developing custom connectors and scripts using one or more of the following:
• Java
• Ruby
• PowerShell
• Experience with provisioning and deprovisioning logic, role modeling, role mining, access workflows, and certification processes.
• Experience leading or executing a live migration between major identity governance platforms, including target-state design, data and configuration migration, and governance rebuilding.
• Hands-on experience with enterprise directory services and cloud identity directories.
• Experience with forest and trust configuration, schema and group policy work, hybrid synchronization troubleshooting, and object migration tooling.
• Experience supporting a real directory or tenant consolidation.
• Working experience with privileged access management platforms.
• Experience with single sign-on and federation technologies, including SAML, OIDC, and conditional access.
• Ability to design integrations across identity governance, privileged access management, and access management domains.
• Demonstrated technical leadership through engineering standards, design and code reviews, mentorship, and documentation.
• Strong communication skills, including the ability to explain technical tradeoffs to security leadership, application owners, and audit stakeholders.

Preferred Qualifications:

• Experience with service account and non-human identity lifecycle management.
• Familiarity with naming standards, reconciliation, and automated credential rotation.
• Awareness of workload identity and AI-agent authorization patterns, including federated identity and just-in-time credentialing.
• Experience working with directory owners while maintaining responsibility for identity engineering rather than directory ownership.
• Experience supporting consolidation efforts following organizational mergers.

We are an equal opportunity employer. All aspects of employment including the decision to hire, promote, discipline, or discharge, will be based on merit, competence, performance, and business needs. We do not discriminate on the basis of race, color, religion, marital status, age, national origin, ancestry, physical or mental disability, medical condition, pregnancy, genetic information, gender, sexual orientation, gender identity or expression, national origin, citizenship/ immigration status, veteran status, or any other status protected under federal, state, or local law.