Senior IAM Engineer

Air InfoSec; Austin, Northern (TX, KY); Hybrid; USD 120,000 - 155,000; Full time

Benefits offered by this job

Hybrid work arrangement

Job summary

Air InfoSec, LLC in Austin, TX, is seeking a Senior IAM Engineer to support the Texas Department of Public Safety. You will design and implement a centralized identity provider framework using SAML 2.0 and OIDC for SSO and MFA, develop lifecycle workflows, onboard applications via REST APIs, and enforce RBAC.

This hybrid role requires 8 years in IAM, strong scripting with PowerShell and Python, and experience with SailPoint Identity Security Cloud.

Qualifications

• 8 years of IAM platform governance, engineering, automation, and scripting.
• 8 years of application onboarding with IAM systems.
• 5 years designing RBAC, separating duties, and cert campaigns.
• 5 years managing centralized identity providers with SSO & MFA.
• 3 years with SailPoint Identity Security Cloud.
• 3 years implementing user access reviews with SailPoint.
• 3 years integrating apps with SailPoint Identity Security Cloud.
• 3 years using Privileged Access Management.
• 3 years automating user provisioning and reporting with PowerShell and Python.

Responsibilities

• Design and implement centralized identity provider framework with SSO/MFA.
• Develop identity lifecycle workflows and automate provisioning and reporting.
• Onboard and integrate business apps via REST APIs.
• Establish RBAC models and design access certification campaigns.
• Integrate IAM solutions across platforms and support IGA and Access Management.
• Deploy and maintain privileged access management with vaulting and rotation.
• Perform long-term maintenance, tuning, and troubleshoot provisioning errors.
• Collaborate with security and IT to maintain IAM practices.
• Assess IAM technologies and maintain technical documentation.
• Provide support for Directory and IAM services, servers, databases.

Skills

IAM governance

Engineering

Lifecycle automation

Scripting

Application onboarding

RBAC design

SSO

MFA

IGA

Access Management

Privileged Access Management

PowerShell

Python

REST APIs

Tools

SailPoint Identity Security Cloud

Job description

Austin, United States | Posted on 09/25/2026

• Client Name Texas Department of Public Safety
• Date Opened 09/25/2026
• Job Type Contract
• Work Location Arrangement Hybrid
• Work Experience 8 years
• Application Deadline 10/05/2026 17:00
• No. of Hours 2080
• Target Date 10/01/2026
• Contract End Date 08/31/2027
• Industry Government & Public Sector
• City Austin
• State/Province Texas
• Country United States

Job Description

This is a hybrid role; only local candidates will be considered.

The Senior IAM (Identity and Access Management) Engineer will support the Texas Department of Public Safety (TxDPS). This role manages the agency's enterprise IAM ecosystem, including the design and implementation of a centralized identity provider framework using SAML 2.0 and OIDC for single sign-on (SSO) and multi-factor authentication (MFA). The engineer will develop lifecycle workflows, onboard applications through REST APIs, and establish Role-Based Access Control (RBAC). The role also supports Identity Governance and Administration (IGA), Access Management, and Privileged Access Services, including the deployment and ongoing maintenance of a privileged access management solution. The engineer will collaborate with security and IT teams to maintain consistent IAM practices across the agency.

Responsibilities

• Design and implement a centralized identity provider framework using SAML 2.0 and OIDC to support SSO and MFA.
  
• Develop identity lifecycle workflows and automate user provisioning and reporting using PowerShell and Python.
  
• Onboard and integrate business applications with IAM systems through REST APIs.
  
• Establish RBAC models, enforce separation of duties, and design access certification campaigns.
  
• Integrate IAM solutions across platforms and support IGA, Access Management, and Privileged Access Services.
  
• Deploy a privileged access management solution featuring secure credential vaulting, automated password rotation, and just-in-time provisioning.
  
• Perform long-term system maintenance, including performance tuning and troubleshooting provisioning errors and connection failures.
  
• Collaborate with security and IT teams to maintain consistent IAM practices.
  
• Assess IAM technologies regularly and maintain technical documentation.
  
• Provide support for Directory and IAM services, servers, and databases.
  

Requirements

Minimum Qualifications

• 8 years of experience in IAM platform governance, engineering, lifecycle automation, and scripting.
  
• 8 years of experience in application onboarding and integrating business applications with IAM systems.
  
• 5 years of experience designing and implementing RBAC models, enforcing separation of duties, and designing certification campaigns.
  
• 5 years of experience managing a centralized identity provider and configuring SSO and MFA.
  
• 3 years of experience with SailPoint Identity Security Cloud.
  
• 3 years of experience implementing user access reviews with SailPoint Identity Security Cloud.
  
• 3 years of experience integrating applications with SailPoint Identity Security Cloud.
  
• 3 years of experience using Privileged Access Management.
  
• 3 years of experience automating user provisioning and reporting using PowerShell and Python.
  

Preferred Qualifications

• 2 years of experience working with a state government agency.
  

Additional Requirements

• Candidates must currently live within 50 miles of the Austin, Texas work location.
  
• Work outside normal business hours, including weekends, evenings, and holidays, may be required as requested.
  

Work Location and Schedule

Schedule: Monday through Friday, 8:00 AM to 5:00 PM, excluding State holidays.

Work Arrangement: Hybrid (on-site and telework).

Air InfoSec, LLC is an Equal Opportunity Employer and does not discriminate on the basis of race or ethnicity, religion, sex, national origin, age, veteran disability or genetic information or any other reason prohibited by law in employment.