Remote IAM Subject Matter Expert: Access Governance & SSO

Gainwell Technologies LLC; Yorktown (VA); Remote; USD 95,000 - 136,000; Full time

Benefits offered by this job

Remote-based opportunity in the United

0-10% travel

Video interviews

401(k) employer match

Health benefits

Job summary

Gainwell Technologies is seeking an Identity & Access Management (IAM) Subject Matter Expert to evaluate, design, implement, and operate identity controls across on-prem and cloud environments. You will translate regulatory requirements into secure access policies and support audits with defensible evidence.

You will lead lifecycle governance, RBAC/ABAC design, federation, and PAM implementations while mentoring team members and shaping the long-term identity roadmap.

Qualifications

• 10+ years in IT / information security, with 7+ years hands-on IAM experience.
• Expert-level knowledge of IAM protocols (SAML, OAuth 2.0 / OIDC, SCIM, LDAP, Kerberos).
• Deep hands-on experience with AD and Microsoft Entra ID (Azure AD).
• Experience running IGA programs and/or PAM implementations.
• Experience enforcing least privilege across AWS and Azure.
• Strong automation capabilities (PowerShell or Python) and API integration.
• Experience supporting audits and mapping identity controls to frameworks.
• Project management experience leading IAM initiatives.
• Degree in a relevant field, or equivalent demonstrable experience.

Responsibilities

• Enforce IAM strategy, architecture, and roadmap aligned with business risks and regs.
• Oversee identity lifecycle, joiner-mover-leaver automation and access certification.
• Design RBAC/ABAC models and implement least-privilege policies and just-in-time elevation.
• Lead authentication, federation, SSO, SAML/OIDC/SCIM integrations, MFA policies.
• Guide PAM: vaulting, session management, credential rotation, privileged sessions.
• Administer AD, Entra ID, LDAP; ensure synchronization and trust hygiene.
• Enforce cloud IAM across AWS/Azure; manage service accounts and secret mgmt.
• Support audits; map controls to SOC 2, NIST, HIPAA, CMS; prepare evidence.
• Develop identity automation (PowerShell, Python, APIs) and SCIM provisioning.
• Deliver training, create runbooks, mentor teammates; evaluate IAM tooling.
• Plan IAM projects/migrations end-to-end from discovery to rollout.

Skills

IAM protocols (SAML,OIDC, OAuth, SCIM)

Active Directory / Azure AD

IGA / PAM programs

Least privilege enforcement

Automation: PowerShell / Python

Cloud IAM (AWS, Azure)

Audit support & mapping controls

IAM project management

SCIM provisioning

HRIS-to-directory integration

Education

Degree or equivalent experience

Tools

Okta

SailPoint

Saviynt

CyberArk

Job description

Gainwell Technologies is seeking an Identity & Access Management (IAM) Subject Matter Expert to evaluate, design, implement, and operate identity controls across on-prem and cloud environments. You will translate regulatory requirements into secure access policies and support audits with defensible evidence.

You will lead lifecycle governance, RBAC/ABAC design, federation, and PAM implementations while mentoring team members and shaping the long-term identity roadmap.