Remote Lead IAM Engineer - Cloud Security & Identity

FICO; Northern (KY); Hybrid; USD 119,000 - 187,000; Full time

Job summary

FICO is seeking a Senior/Lead Cyber Security IAM Engineer to design and implement cloud-based IGA capabilities, shaping enterprise identity architecture and governance. You will partner with Cybersecurity and business leaders to align human and non-human identities with policy, while enabling secure access across systems.

The role emphasizes hands-on IAM engineering, federation, and PKI considerations, with opportunities to influence security posture and risk management across the organization.

Qualifications

• In-depth hands-on experience with IGA platforms such as SailPoint or Saviynt.
• Strong experience with identity infrastructure including AD, Entra ID, AWS IAM, Okta and RHIM.
• Good working knowledge of federation and access protocols: SAML, SSO, SCIM, LDAP, RADIUS, Kerberos, MFA/FIDO2 passkeys.
• Extensive hands-on experience with AWS Cloud Platform and scripting in Python.
• Security analysis experience applying Segregation of Duties and Least Privilege principles.
• Experience automating identity processes tied to HRIS systems.
• PAM, ITDR, and NHI tooling (CyberArk, HashiCorp, Delinea, Clutch) are highly desired.
• Certificate management, PKI experience, and familiarity with post-quantum cryptography concepts are a plus.
• Relevant certifications (SANS, AWS Certified Security) are a plus.
• Bachelor’s degree in computer science, Cyber Security, Information Technology, or a related field or relevant experience.

Responsibilities

• Design and implement modern, cloud-based IGA (Identity Governance and Administration) platform capabilities that scale across the enterprise.
• Partner across Cybersecurity and with business and technology leaders to shape FICO's Identity engineering strategy, including human and non-human identity domains.
• Implement and support identity-based platforms, systems, and programs spanning governance, privileged access, and federation.
• Evaluate identity services on an ongoing basis and drive recommendations that close governance gaps and reduce risk exposure.
• Guide engineering decisions using observed access patterns and behavioral data to strengthen Segregation of Duties and Least Privilege enforcement.

Skills

SailPoint

Saviynt

IGA

AWS IAM

Okta

Entra ID

Active Directory

SAML

SSO

SCIM

LDAP

RADIUS

Kerberos

MFA/FIDO2

Python

Segregation of Duties

Least Privilege

HRIS automation

PAM

ITDR

NHI tooling

CyberArk

HashiCorp

Delinea

Clutch

PKI

Post-quantum crypto

SANS

AWS Certified Security

Education

Bachelor’s degree in Computer Science, Cyber Security, Information Technology, or related field

Tools

SailPoint

Saviynt

Active Directory

Entra ID

AWS IAM

Okta

RHIM

SAML

SSO

Job description

FICO is seeking a Senior/Lead Cyber Security IAM Engineer to design and implement cloud-based IGA capabilities, shaping enterprise identity architecture and governance. You will partner with Cybersecurity and business leaders to align human and non-human identities with policy, while enabling secure access across systems.

The role emphasizes hands-on IAM engineering, federation, and PKI considerations, with opportunities to influence security posture and risk management across the organization.