Senior IAM Engineer — Hybrid, Cloud & Zero-Trust

New York Life; New York (NY); Hybrid; USD 124,000 - 177,000; Full time

Benefits offered by this job

Discretionary bonus eligibility

Annual incentive program

Job summary

New York Life is seeking an experienced IAM Engineer to design, engineer, and maintain Identity & Access Management solutions across IGA, PAM, Directory Services, and Web Access Management. The role supports both on-premises and cloud environments, collaborating with architecture, security, and infrastructure teams to ensure secure, scalable identity capabilities.

The ideal candidate brings 10+ years of hands-on IAM engineering, strong scripting skills, and expertise with SailPoint, CyberArk,

Qualifications

• Bachelor’s degree in Computer Science, Information Systems, or equivalent experience.
• 10+ years of hands-on engineering experience across multiple IAM domains.
• Strong knowledge of SailPoint, CyberArk, PingOne, PingFederate, Ping Directory, Entra and Active Directory.
• Proven experience integrating IAM solutions in hybrid (cloud + on-premises) environments.
• Familiarity with identity protocols such as SAML, OAuth 2.0, OIDC, SCIM, LDAP, SPIFFE, DCR, and PKCE.
• Strong scripting skills (PowerShell, Python, Java) for automation and integration.
• Understanding of IAM-related compliance and regulatory requirements (e.g., NYS DFS, NIST).
• Ability to work effectively in a team-oriented, collaborative environment.

Responsibilities

• Engineer, configure, and maintain IAM solutions across IGA, PAM, Directory, and WAM domains.
• Collaborate with architecture teams to design IAM solutions that integrate securely with on-premises and cloud applications (AWS, SaaS, hybrid).
• Develop and maintain workflows, connectors, policies, and scripts to automate identity lifecycle and access management processes.
• Integrate IAM solutions with enterprise authentication and authorization frameworks, including MFA and passwordless auth.
• Partner with Information Security, Application, and Infrastructure teams to meet security, compliance, and audit requirements.
• Troubleshoot and resolve complex IAM-related incidents, performance issues, and integration challenges.
• Support roadmap delivery for IAM initiatives, including cloud adoption and Zero Trust enablement.
• Contribute to solution design reviews, platform upgrades, and security hardening initiatives.
• Explore and implement AI/ML-based anomaly detection for identity risk scoring and adaptive authentication.
• Build automation scripts (Python, PowerShell, Java) to enhance IAM workflows.
• Collaborate on introducing AI-driven decision-making for access governance and identity intelligence.

Skills

Identity & Access Management

Scripting (PowerShell, Python, Java)

Education

Bachelor’s degree in Computer Science or related field

Tools

SailPoint

CyberArk

PingOne

PingFederate

Ping Directory

Entra

Active Directory

Azure AD

AWS IAM

Job description

New York Life is seeking an experienced IAM Engineer to design, engineer, and maintain Identity & Access Management solutions across IGA, PAM, Directory Services, and Web Access Management. The role supports both on-premises and cloud environments, collaborating with architecture, security, and infrastructure teams to ensure secure, scalable identity capabilities.

The ideal candidate brings 10+ years of hands-on IAM engineering, strong scripting skills, and expertise with SailPoint, CyberArk,