Senior IAM Engineer — Enterprise Identity & Access

Eleven Recruiting; New York (NY); On-site; USD 110,000 - 165,000; Full time

Job summary

Eleven Recruiting is assisting a leading investment client in New York, NY to hire a Senior Identity and Access Management Engineer. The role focuses on IAM architecture, SSO, and non-human identity management within a complex enterprise environment.

The engineer will own end-to-end IAM design, RBAC/ABAC models, and work with engineering teams to embed IAM practices. Strong scripting and multi-IDP experience are required.

Qualifications

• Deep understanding of identity risks and controls.

Responsibilities

• Work across environments with unique processes.

Skills

IAM risk controls

IDP integration

SSO technologies

Identity lifecycle

SQL

Python

PowerShell

Okta Workflows

Terraform

Communication skills

Education

Bachelor's Degree in CS/IT or related field

Tools

Terraform

Okta Workflows

Job description

We are a specialized technology staffing agency supporting professional and financial services companies. Why do we stand out in technology staffing? We listen and act as advisors for our candidates on how they can best add value, find interesting projects, and pave a path for career advancement. We advocate for the best pay, diversity in tech, and the best job fit for every candidate we place.

Our client, a leading investment firm, is seeking a Senior Identity and Access Management Engineer to join their team in New York, NY!

The ideal candidate will be expected to be an expert in the firm's Identity as a Service platform, driving internal changes to their implementations.

Responsibilities

• Work effectively across multiple environments that each have their own unique processes and procedures.
• Develop the technical NHI/AI security architecture.
• Build and operate the systems that discover, inventory, authenticate, and enforce least privilege for non-human identities across the enterprise.
• Partner with engineering and platform teams to embed NHI security practices into their workflows.
• Own the end-to-end design and governance of Joiner/Mover/Leaver (JML) workflows across the firm and its entities.
• Define RBAC/ABAC entitlement models in a way that balances least-privilege with user experience.
• Build upon the existing Identity as a Service platform to improve the end-user experience
• Proactively partner with various engineering and platform teams to understand pain points, and propose solutions to those problems.
• Serve as the internal subject matter expert for IAM.
• Onboard new applications to the firm’s SSO solutions.
• Maintain documentation for IAM processes.

Qualifications

• Deep understanding of Identity related risks and controls.
• Experience with working across multiple IDPs (Org2org, federation, CIAM/Workforce, etc.).
• Experience with Terraform.
• Deep understanding of SSO related technologies such as SAML, OIDC, SCIM, JIT.
• Deep understanding of identity lifecycle management.
• Experience with SQL and scripting (Python, Powershell, etc.).
• Experience with Okta Workflows.
• Bachelor's Degree in Computer Science, Information Technology or related field.
• 7-10 years of experience in IAM or other Cybersecurity related fields.
• Results oriented and the ability to manage multiple tasks and deadlines with attention to detail.
• Strong communication and self-management skills.

Pay Rate: $80 - $120/hr

Your safety matters to us. To protect yourself from potential scams, remember that Eleven recruiters only contact you from @elevenrecruiting.com email addresses. Be cautious of emails from other domains. Legitimate Eleven recruiters will never ask for money, fees, or banking information before your first day. If you're ever unsure about a communication, don't click any links—visit https://jobs.elevenrecruiting.com/directly for confirmed position openings.