Remote IAM Engineer II — Identity & Access Pro

Equiliem; United States; On-site; USD 96,000 - 103,000; Full time

Benefits offered by this job

Medical Insurance

Vision & Dental Insurance

Life Insurance

Matching 401(k)

Commuter Benefits

Employee Discounts & Rewards

Payroll Payment Options

Job summary

Equiliem is seeking an IAM Engineer II for a remote role responsible for daily identity and access management operations across platforms. You will support user onboarding/offboarding, SSO integrations, access requests, entitlement administration, and basic privileged access functions to ensure secure identity controls.

Onboard applications via REST APIs, use SAML/OIDC templates for SSO, and maintain runbooks while adhering to change management and audit processes.

Qualifications

• Strong understanding of identity security concepts including MFA, RBAC, provisioning and JML workflows.
• Familiarity with SAML, OIDC and basic authentication/authorization principles.
• Understanding of IAM concepts such as least privilege and SoD.

Responsibilities

• Onboard applications to identity platforms using REST APIs and JSON field mapping.
• Onboard applications for SSO using standard SAML/OIDC templates.
• Ensure adherence to least privilege and separation of duties (SoD) requirements.
• Collect and maintain evidence for audits and identity reviews.
• Follow established change management, documentation, and incident management processes.
• Use PowerShell or basic REST API calls for simple identity queries or repeatable tasks.
• Maintain runbooks, knowledge base articles, and user-facing guides.
• Participate in identity-related incident handling and troubleshooting.
• Automate Joiner/Mover/Leaver (JML) processes, including provisioning, de-provisioning, access requests, and access reviews.
• Ensure group-based and role-based access is assigned accurately and timely.
• Troubleshoot identity issues such as failed provisioning tasks, directory sync, and entitlement assignments.
• Process access requests and approvals; maintain entitlement catalogs and birthright access definitions.
• Assist in quarterly and ad hoc access certification campaigns.
• Perform all other duties as assigned.

Skills

Identity security concepts

SAML/OIDC familiarity

SoD / least privilege understanding

Onboarding/offboarding processes

Analytical/troubleshooting

Documentation adherence

Tools

PowerShell

Python

JavaScript

Job description

Equiliem is seeking an IAM Engineer II for a remote role responsible for daily identity and access management operations across platforms. You will support user onboarding/offboarding, SSO integrations, access requests, entitlement administration, and basic privileged access functions to ensure secure identity controls.

Onboard applications via REST APIs, use SAML/OIDC templates for SSO, and maintain runbooks while adhering to change management and audit processes.