Senior Associate - IAM Engineer

New York Life Insurance Co; United States; Remote; USD 124,000 - 177,000; Full time

Job summary

New York Life Insurance Co. seeks an experienced IAM Engineer to design, implement, and operate IAM solutions across IGA, PAM, Directory, and WAM, spanning on‑premises and cloud environments.

You will automate lifecycles, integrate with MFA and passwordless methods, and collaborate with security and infra teams to meet compliance and audit needs. The role requires deep experience with SailPoint, CyberArk, Ping Identity, Entra, and AD, plus scripting in PowerShell, Python, or Java.

Qualifications

• Bachelor’s degree in CS or IS or equivalent experience.
• 10+ years hands-on engineering across IAM domains.
• Strong knowledge of SailPoint, CyberArk, PingOne, PingFederate, Ping Directory, Entra and Active Directory.
• Proven experience integrating IAM solutions in hybrid (cloud + on-prem) environments.
• Familiarity with identity protocols such as SAML, OAuth 2.0, OIDC, SCIM, LDAP, SPIFFE, DCR, and PKCE.
• Strong scripting skills (PowerShell, Python, Java) for automation and integration.
• Understanding of IAM‑related compliance and regulatory requirements (e.g., NYS DFS, NIST).
• Ability to work effectively in a team‑oriented, collaborative environment, with strong problem‑solving skills

Responsibilities

• Engineer, configure, and maintain IAM solutions across IGA, PAM, Directory, and WAM domains.
• Collaborate with architecture teams to design IAM solutions that integrate securely with on‑premises and cloud applications (AWS, SaaS, hybrid models).
• Develop and maintain workflows, connectors, policies, and scripts to automate identity lifecycle and access management processes.
• Integrate IAM solutions with enterprise authentication and authorization frameworks, including MFA, passwordless authentication, and emerging NHI standards (e.g., SPIFFE, DCR, PKCE).
• Partner with Information Security, Application, and Infrastructure teams to ensure IAM solutions meet security, compliance, and audit requirements.
• Troubleshoot and resolve complex IAM‑related incidents, performance issues, and integration challenges.
• Support roadmap delivery for IAM initiatives, including cloud adoption, Zero Trust enablement, and modernization of legacy IAM services.
• Contribute to solution design reviews, platform upgrades, and security hardening initiatives.
• Explore and implement AI/ML‑based anomaly detection for identity risk scoring and adaptive authentication.
• Build automation scripts (Python, PowerShell, Java) to enhance IAM workflows.
• Collaborate on introducing AI‑driven decision‑making for access governance, identity‑based threat detection, and identity intelligence.
• Stay engaged with emerging identity, cloud, and AI‑related technologies; bring forward ideas to evolve IAM for the future.

Skills

IAM engineering

SailPoint

CyberArk

Ping Identity

Active Directory

OAuth 2.0

OIDC

PowerShell

Python

Java

Cloud + on-prem

Education

Bachelor's degree in CS/IS or equivalent

Tools

SailPoint IdentityNow

CyberArk

PingFederate

PingOne

Azure AD

AWS IAM

Entra

Ping Directory

Active Directory

Job description

As part of Technology, you'll have the opportunity to contribute to groundbreaking initiatives that shape New York Life's digital landscape. Leverage cutting‑edge technologies like Generative AI to increase productivity, streamline processes, and create seamless experiences for clients, agents, and employees. Your expertise fuels innovation, agility, and growth driving the company's success.

The IAM Engineer will play a key role in designing, engineering, and maintaining NYL’s Identity & Access Management solutions across all IAM domains: Identity Governance & Administration (IGA), Privileged Access Management (PAM), Directory Services, and Web Access Management (WAM). This role blends hands‑on engineering with solution architecture, ensuring that IAM capabilities are robust, scalable, secure, and aligned with enterprise standards. The IAM Engineer will support both on‑premises and cloud environments, working with a mix of commercial, SaaS, and custom platforms.

Experience in SailPoint, CyberArk, Ping, Entra and Active Directory is strongly preferred. The ideal candidate will bring technical depth, a strong learning mindset, and genuine enthusiasm for advancing their craft. We are building the identity foundation for a more connected, AI‑enabled, and technology‑driven future so curiosity, adaptability, and readiness to embrace new capabilities will be essential.

What You’ll Do:

• Engineer, configure, and maintain IAM solutions across IGA, PAM, Directory, and WAM domains.
• Collaborate with architecture teams to design IAM solutions that integrate securely with on‑premises and cloud applications (AWS, SaaS, hybrid models).
• Develop and maintain workflows, connectors, policies, and scripts to automate identity lifecycle and access management processes.
• Integrate IAM solutions with enterprise authentication and authorization frameworks, including MFA, passwordless authentication, and emerging NHI standards (e.g., SPIFFE, DCR, PKCE).
• Partner with Information Security, Application, and Infrastructure teams to ensure IAM solutions meet security, compliance, and audit requirements.
• Troubleshoot and resolve complex IAM‑related incidents, performance issues, and integration challenges.
• Support roadmap delivery for IAM initiatives, including cloud adoption, Zero Trust enablement, and modernization of legacy IAM services.
• Contribute to solution design reviews, platform upgrades, and security hardening initiatives.
• Explore and implement AI/ML‑based anomaly detection for identity risk scoring and adaptive authentication.
• Build automation scripts (Python, PowerShell, Java) to enhance IAM workflows.
• Collaborate on introducing AI‑driven decision‑making for access governance, identity‑based threat detection, and identity intelligence.
• Stay engaged with emerging identity, cloud, and AI‑related technologies; bring forward ideas to evolve IAM for the future.

What You’ll Bring:

• Bachelor’s degree in Computer Science, Information Systems, or equivalent experience.
• 10+ years of hands‑on engineering experience across multiple IAM domains.
• Strong knowledge of and experience with SailPoint, CyberArk, PingOne, PingFederate, Ping Directory, Entra and Active Directory.
• Proven experience integrating IAM solutions in hybrid (cloud + on‑premises) environments.
• Familiarity with identity protocols such as SAML, OAuth 2.0, OIDC, SCIM, LDAP, SPIFFE, DCR, and PKCE.
• Strong scripting skills (e.g., PowerShell, Python, Java) for automation and integration.
• Understanding of IAM‑related compliance and regulatory requirements (e.g., NYS DFS, NIST).
• Ability to work effectively in a team‑oriented, collaborative environment, with strong problem‑solving skills

Proctored technical exam (including code writing, where appropriate) will be required

In person interview will be required in NY Home Office before any offer can be extended

• In person interview will be required in NY Home Office before any offer can be extended
• Experience with cloud identity platforms (e.g., Azure AD, AWS IAM).
• Exposure to Zero Trust architectures, modern authentication strategies, and AI‑enabled security capabilities.
• Prior experience in a large enterprise or financial services environment.
• IAM vendor certifications (e.g., SailPoint IdentityNow Engineer, CyberArk Trustee/Defender, Ping Identity Certified Professional).

Pay Transparency

Salary Range:$124,000-$177,000

Discretionary bonus eligible:Yes

Actual base salary will be determined based on several factors but not limited to individual’s experience, skills, qualifications, and job location. Additionally, employees are eligible for an annual discretionary bonus. In addition to base salary, employees may also be eligible to participate in an incentive program.

Company Overview

At New York Life, our 180-year legacy of purpose and integrity fuels our future. As we evolve into a more technology‑, data‑, and AI‑enabled organization, we remain grounded in the values that drive lasting impact.

Our diverse business portfolio creates opportunities to make a difference across industries and communities—inviting bold thinking, collaborative problem‑solving, and purpose‑driven innovation. Here, you’ll find the rare balance of long‑standing stability and forward momentum, supported by an inclusive team that honors tradition while embracing progress.

As a Fortune 100 mutual company, we offer a place to grow your skills, contribute to meaningful work, and deliver solutions that matter. Your ideas drive what’s next, and your growth powers it.

Our Commitment to Inclusion

At New York Life, fostering an inclusive workplace is fundamental to who we are and how we serve our communities. We have a longstanding commitment to creating an environment where individuals can contribute their best and succeed together. This foundation is rooted in our core values of humanity and integrity, ensuring that every employee feels valued and supported. By embracing a broad range of perspectives and experiences, we achieve greater success and fulfill our promise of providing financial security and peace of mind to families across all communities.

Recognized as one of Fortune’s World’s Most Admired Companies, New York Life is committed to improving local communities through a culture of employee giving and volunteerism, supported by the Foundation .We're proud that due to our mutuality, we operate in the best interests of our policy owners. To learn more about career opportunities at New York Life, please visit the Careers page of www.NewYorkLife.com

Visit our LinkedIn to see how our employees and agents are leading the industry and impacting communities.

Visit our Newsroom to learn more about how our company is constantly evolving to meet our clients' and employees’ needs.

About NY Life Insurance Company

Diversity & Humanity–two values that are deeply rooted in the New York Life culture and have laid the foundation for over 175 years of commitment to our employees, agents, policy owners, and the communities where we live and work. At New York Life you become a valued part of a welcoming, inclusive, and caring culture that has a long‑standing legacy in stability and growth. The strength of New York Life revolves around our diversified, multi‑dimensional business portfolio that goes beyond life insurance, and we want you to be a part of our legacy.

As a Fortune 100 company and industry leader, we provide an environment where you can explore your career ambitions, offering opportunities to tackle meaningful challenges and stretch your skills while balancing work and life priorities. You willbe part of a diverse team guided by our belief to always be there for each other–providing the support and flexibility to grow and reach new heights while making an impact in the lives of others.

You are our future, and we commit to investing in you accordingly.

Visit our Linkedin to see how our employees and agents are leading the industry and impacting communities.

Visit our Newsroom to learn more about how our company is constantly evolving to meet our clients' and employees’ needs.