Senior IAM Engineer

Guardian Life; Bethlehem (Northampton County); Hybrid; USD 99,000 - 163,000; Full time

Job summary

Guardian Life seeks a Senior IAM Engineer to design and implement IAM solutions, crafting governance, access controls, and privileged access management. You will develop IAM policies, collaborate with IT for seamless integration, and lead regular audits to mitigate risks.

The role requires 5+ years in IAM, strong problem-solving, and security certifications; it offers a hybrid two-location setup in Bethlehem, PA and Holmdel, NJ with salary between $99,150 and $162,885.

Qualifications

• Bachelor’s degree in computer science, information technology, or a related field.
• Minimum 5 years of IAM engineering experience.
• Strong knowledge of IAM concepts, technologies, and standard processes.
• Experience with IAM platforms (Okta, PingFederate, SailPoint, CyberArk, Azure AD/Entra ID).
• Experience with reverse proxy solutions (Okta Access Gateway, Microsoft App Proxy).
• Excellent problem-solving and communication skills.
• Relevant certifications such as CISSP or CISM are a plus.
• Ability to work independently and in a team.

Responsibilities

• Design and implement IAM solutions including identity governance and access management.
• Develop and maintain IAM policies and standards for compliance.
• Collaborate with IT and security teams to integrate IAM with systems.
• Conduct audits and assess IAM risks to mitigate security gaps.
• Provide support and troubleshooting for IAM issues.
• Stay current with IAM trends and propose improvements.
• Mentor junior IAM engineers and teammates.

Skills

IAM

Okta

PingFederate

SailPoint

CyberArk

Azure AD/Entra ID

Okta Access Gateway

Microsoft App Proxy

DevOps

AWS

Communication

Mentoring

Education

Bachelor's degree in CS/IT or related

Tools

Okta

PingFederate

SailPoint

CyberArk

Azure AD/Entra ID

Okta Access Gateway

Microsoft App Proxy

Job description

Hybrid - In office 3 days per week

Bethlehem

Holmdel

Full time

R000109487

The Senior IAM Engineer will be responsible for designing, implementing, and handling identity and access management (IAM) solutions to ensure the security and efficiency of the organization's IT infrastructure. This role involves working closely with various groups to understand their IAM needs and providing expert guidance on standard methodologies and solutions.

You Will:

• Design and implement IAM solutions, including identity governance, access management, and privileged access management.

• Develop and maintain IAM policies, procedures, and standards to ensure compliance with regulatory requirements and industry best practices.

• Collaborate with IT and security teams to integrate IAM solutions with existing systems and applications.

• Conduct regular audits and assessments of IAM systems to identify and mitigate potential security risks.

• Provide technical support and troubleshooting for IAM-related issues.

• Stay up to date with the latest trends and technologies in IAM and recommend improvements to existing systems and processes.

• Mentor and provide guidance to junior IAM engineers and other team members.

You Have:

• Bachelor’s degree in computer science, Information Technology, or a related field.

• At least 5 years of experience in IAM engineering or a related field.

• Strong knowledge of IAM concepts, technologies, and standard processes.

• Experience with IAM platforms, including Okta, PingFederate, SailPoint, CyberArk, and Microsoft Azure AD/Entra ID.

• Experience with reverse proxy solutions, including Okta Access Gateway and Microsoft App Proxy.

• Excellent problem-solving skills and attention to detail.

• Good communication and interpersonal skills.

• Relevant certifications such as CISSP, CISM, or similar are a plus.

• Passion for problem-solving and continuous curiosity to learn.

• Understanding of security control concepts and their application in IAM.

• Ability to work independently and as part of a team.

• Strong organizational and time management skills.

You Are:

• Experience with cloud-based IAM solutions and integrations.

• Knowledge of regulatory requirements and standards related to IAM, such as GDPR, HIPAA, and SOX.

• Experience with DevOps, CI/CD, and AWS.

• Experience with scripting and automation tools to streamline IAM processes.

Location:

• Three days a week at a Guardian Location in Holmdel, NJ or Bethlehem, PA

Salary Range

$99,150.00 - $162,885.00

The salary range reflected above is a good faith estimate of base pay for the primary location of the position. The salary for this position ultimately will be determined based on the education, experience, knowledge, and abilities of the successful candidate. In addition to salary, this role may also be eligible for annual, sales, or other incentive compensation.

Our Promise

At Guardian, you’ll have the support and flexibility to achieve your professional and personal goals. Through skill-building, leadership development and philanthropic opportunities, we provide opportunities to build communities and grow your career, surrounded by diverse colleagues with high ethical standards.

Inspire Well-Being

As part of Guardian’s Purpose – to inspire well-being – we are committed to offering contemporary, supportive, flexible, and inclusive benefits and resources to our colleagues. Explore our company benefits at www.guardianlife.com/careers/corporate/benefits . Benefits apply to full-time eligible employees. Interns are not eligible for most Company benefits.

Equal Employment Opportunity

Guardian is an equal opportunity employer. All qualified applicants will be considered for employment without regard to age, race, color, creed, religion, sex, affectional or sexual orientation, national origin, ancestry, marital status, disability, military or veteran status, or any other classification protected by applicable law.

Accommodations

Guardian is committed to providing access, equal opportunity and reasonable accommodation for individuals with disabilities in employment, its services, programs, and activities. Guardian also provides reasonable accommodations to qualified job applicants (and employees) to accommodate the individual's known limitations related to pregnancy, childbirth, or related medical conditions, unless doing so would create an undue hardship. If reasonable accommodation is needed to participate in the job application or interview process, to perform essential job functions, and/or to receive other benefits and privileges of employment, please contact [e-mail] .

Visa Sponsorship

Guardian is not currently or in the foreseeable future sponsoring employment visas. In order to be a successful applicant. you must be legally authorized to work in the United States, without the need for employer sponsorship.

Notice Regarding Guardian’s Use of Artificial Intelligence in Recruitment

As part of Guardian’s job application process, Guardian may use artificial intelligence tools ("AI Tools") to automate the sorting and filtering of information provided by applicants as part of its preliminary screening. This preliminary screening may be used to help identify applicant materials and resumes relative to their indication that the applicant meets the requirements for the specific job for which they are applying, as specified in the listing posted on Guardian’s jobs website (Careers at Guardian at https://www.guardianlife.com/careers (http://%20https://www.guardianlife.com/careers) ). At Guardian, we do not use AI Tools to substantially assist or replace human judgment or discretionary decision making in our hiring process. All hiring decisions will be made by Guardian colleagues.

Additionally, at applicable times, Guardian will make public the most recent bias audit results for such AI tools, which may be found here (https://assets.ctfassets.net/gau1nv66ynug/1M2AOzFsFCirlWeAmIh4MD/23463b78b6cdd8ebdce9410b98d7a080/Audit.pdf) .

Visa Sponsorship

Guardian Life is not currently or in the foreseeable future sponsoring employment-based visas (e.g., such as an H-1B). In order to be a successful applicant, you must be legally authorized to work in the United States, without the need for employer sponsorship/support now or at any time in the future.