Principle IAM Engineer

Robotic Process Automation LLC; Sandy Springs (GA); On-site; USD 99,000 - 114,000; Full time

Job summary

Robotic Technologies Automation in Sandy Springs, GA is seeking a Principal IAM Engineer to serve as the senior hands-on authority for identity engineering during a consolidation and modernization effort. You will design and implement integrations, connectors, and migrations, set engineering standards, resolve complex challenges, and help scale the engineering team.

You will lead design and implementation of joiner-mover-leaver automation, authoritative-source integrations, and certification

Qualifications

• Principal-level, hands-on identity engineering across the full lifecycle.
• Experience building and operating identity solutions in production with runnable code and configurations.
• Deep identity governance platform engineering experience.
• Experience developing custom connectors and scripts (Java, Ruby, PowerShell).
• Experience leading live migrations between identity governance platforms, including target-state design and data migration.
• Experience with directory services and cloud identity directories.
• Experience with SSO/federation technologies (SAML, OIDC, CA).

Responsibilities

• Design, implement, and operate identity integrations, connectors, and migrations across the full identity lifecycle.
• Build and enhance joiner-mover-leaver automation, source integrations, access workflows, roles, and certification campaigns.
• Engineer and administer identity governance platforms, including scripting and provisioning logic.
• Lead or execute migrations between major identity governance platforms with data migration and governance rebuilding.
• Support forest/trust configuration, schema work, and hybrid synchronization troubleshooting.
• Review work of engineers, set engineering standards, and mentor team members.
• Communicate decisions and tradeoffs to security leadership and stakeholders.

Skills

IAM engineering

Java

PowerShell

SAML

OIDC

Hybrid/automation

Code review

Mentorship

Education

Principal-level experience

Tools

Job description

US Citizen, Green Card, H-1B, OPT-EAD, CPT, Other

Job Title:Principle IAM Engineer
Location: Sandy Springs, GA
Duration: 8 Months + Extension
Bill Rate: $72/hour (C2C)
Job Type: W-2, 1099, C2C
Client: To Be Discussed Later
Work Authorization: US Citizen, Green Card, OPT-EAD, CPT, H-1B, H4-EAD, Other

Job Summary:
We are seeking a Principal IAM Engineer to serve as the senior hands-on technical authority for identity engineering during an active consolidation and modernization effort. This role is focused on building and operating solutions-not solely on policy or advisory architecture.
You will personally design and implement integrations, connectors, and migrations; establish engineering standards; resolve complex technical challenges; and help expand the capabilities of the engineering team.

Key Responsibilities:

• Design, implement, and operate identity integrations, connectors, and migrations across the full identity lifecycle.
• Build and enhance joiner-mover-leaver automation, authoritative-source integrations, access request and approval workflows, role models, and certification campaigns.
• Engineer and administer identity governance platforms, including:
• Scripting and automation
• Provisioning and deprovisioning logic
• Lead or execute migrations between major identity governance platforms, including target-state design, data and configuration migration, and governance rebuilding.
• Support directory and tenant consolidation efforts, including:
• Forest and trust configuration
• Schema and group policy work
• Hybrid synchronization troubleshooting
• Object migration activities
• Design integrations across identity governance, privileged access management, and single sign-on or federation environments.
• Review the work of specialist engineers and provide technical direction across identity access domains.
• Establish engineering standards, review designs and code, mentor engineers, and document repeatable technical patterns.
• Communicate technical decisions and tradeoffs clearly with security leadership, application owners, and audit stakeholders.
• Contribute to service account and non-human identity lifecycle management, including naming standards, reconciliation, and automated credential rotation.
• Apply awareness of workload identity and AI-agent authorization patterns, including federated identity and just-in-time credentialing.

Required Qualifications:

• Principal-level, hands-on identity engineering experience across the full lifecycle.
• Demonstrated experience personally building and operating identity solutions in production, with the ability to explain the code, configuration, and results.
• Deep identity governance platform engineering experience.
• Experience developing custom connectors and scripts using one or more of the following:
• Java
• Ruby
• PowerShell
• Experience with provisioning and deprovisioning logic, role modeling, role mining, access workflows, and certification processes.
• Experience leading or executing a live migration between major identity governance platforms, including target-state design, data and configuration migration, and governance rebuilding.
• Hands-on experience with enterprise directory services and cloud identity directories.
• Experience with forest and trust configuration, schema and group policy work, hybrid synchronization troubleshooting, and object migration tooling.
• Experience supporting a real directory or tenant consolidation.
• Working experience with privileged access management platforms.
• Experience with single sign-on and federation technologies, including SAML, OIDC, and conditional access.
• Ability to design integrations across identity governance, privileged access management, and access management domains.
• Demonstrated technical leadership through engineering standards, design and code reviews, mentorship, and documentation.
• Strong communication skills, including the ability to explain technical tradeoffs to security leadership, application owners, and audit stakeholders.

Preferred Qualifications:

• Experience with service account and non-human identity lifecycle management.
• Familiarity with naming standards, reconciliation, and automated credential rotation.
• Awareness of workload identity and AI-agent authorization patterns, including federated identity and just-in-time credentialing.
• Experience working with directory owners while maintaining responsibility for identity engineering rather than directory ownership.
• Experience supporting consolidation efforts following organizational mergers.

We are an equal opportunity employer. All aspects of employment including the decision to hire, promote, discipline, or discharge, will be based on merit, competence, performance, and business needs. We do not discriminate on the basis of race, color, religion, marital status, age, national origin, ancestry, physical or mental disability, medical condition, pregnancy, genetic information, gender, sexual orientation, gender identity or expression, national origin, citizenship/ immigration status, veteran status, or any other status protected under federal, state, or local law.