Remote IAM Engineer — SSO, PAM & Identity Governance

Silpa Consulting LLC; Houston (TX); Remote; USD 83,000 - 165,000; Full time

Job summary

Silpa Companies is seeking an IAM Engineer to deliver enterprise identity programs at scale, spanning SSO, conditional access, joiner-mover-leaver workflows, and privileged access management. You will work across Okta, Entra ID, Ping, SailPoint, Saviynt, and CyberArk to design durable solutions that stand up to audits and executive reviews.

The role requires hands-on IAM engineering experience with major IDPs, IAM tooling, and scripting skills, plus willingness to travel for client engagements.

Qualifications

• 4 or more years of hands-on IAM engineering experience.
• Production experience with at least one IDP (Okta, Entra ID, Ping).
• Hands-on experience with SAML, OIDC, SCIM, and OAuth at protocol depth.
• Working knowledge of at least one IGA platform (SailPoint, Saviynt, Okta Identity Governance).
• Experience implementing PAM (CyberArk, BeyondTrust, Delinea, or Entra PIM).
• Strong scripting skills in PowerShell or Python.
• Authorized to work in the U.S.
• Candidates located in the Houston, Texas area will be given preference; remote consultants will also be considered.
• Reliable, secure internet connection and ability to travel to client sites as required by engagement scope.

Responsibilities

• Design and implement enterprise SSO programs across Okta, Entra ID, or Ping.
• Build conditional-access policies aligned to client risk posture and audit obligations.
• Implement joiner-mover-leaver lifecycle workflows in SailPoint, Saviynt, or Okta Lifecycle Management.
• Design and harden privileged access management using CyberArk, BeyondTrust, or Entra Privileged Identity Management.
• Build SCIM provisioning and federation for client SaaS portfolios at scale.
• Implement passwordless and phishing-resistant authentication using FIDO2 / WebAuthn.
• Run access-recertification campaigns and tie outcomes back to the GRC program.
• Partner with cloud security on workload identity (managed identities, IAM roles, OIDC federation).
• Author identity runbooks, break-glass procedures, and recovery playbooks.

Skills

IAM engineering

Scripting (PowerShell/Python)

Client engagements

Travel ability

Tools

Okta

Entra ID / Azure AD

Ping

SailPoint

Saviynt

CyberArk

BeyondTrust

Delinea

Job description

Silpa Companies is seeking an IAM Engineer to deliver enterprise identity programs at scale, spanning SSO, conditional access, joiner-mover-leaver workflows, and privileged access management. You will work across Okta, Entra ID, Ping, SailPoint, Saviynt, and CyberArk to design durable solutions that stand up to audits and executive reviews.

The role requires hands-on IAM engineering experience with major IDPs, IAM tooling, and scripting skills, plus willingness to travel for client engagements.