Senior IAM Engineer: Identity Governance

Jack Henry and Associates, Inc.; United States; Remote; USD 140,000 - 170,000; Full time

Job summary

Jack Henry is seeking an IAM Senior Engineer to lead development and enhancements of IAM products such as SailPoint, Saviynt, and Okta. You will influence stakeholders, manage identity lifecycles with Active Directory, and integrate with cloud platforms while automating processes and improving security.

The role supports remote work within the United States (CA exception) and requires coordination with East Coast applicants for central or Mountain Time hours. Onsite interviews may be required.

Qualifications

• 6+ years of Identity and Access Management experience.
• 4+ years of SailPoint engineering/architecture experience.
• Experience with SailPoint Identity Security Cloud (ISC).
• Advanced understanding of IAM platforms (SailPoint, Saviynt, Okta).
• Experience creating/updating scripts and code.
• Experience with APIs (REST, JSON) and cloud infrastructure.

Responsibilities

• Plan, design, develop and implement IAM products (SailPoint, Saviynt, Okta).
• Implement authorization methods (RBAC/ABAC/PBAC) and lifecycle management.
• Configure and tailor IAM products to client needs.
• Review IAM technical documents and guide future offerings.
• Manage Identity Lifecycle with Active Directory and Access Certifications.
• Integrate directories (cloud/on-prem) and cloud platforms (AWS, GCP, Azure).
• Create/update metrics and automate data collection.
• Build automation via scripting, RPA, SQL and Power Automate.
• Participate in client meetings to determine needs and outcomes.

Skills

Leadership

Analytical skills

Problem-solving

Communication

Education

Bachelor's degree (CS/IT/Cybersecurity)

Tools

SailPoint

Saviynt

Okta

Active Directory

PowerShell

RPA

SQL

Power Automate

Job description

At Jack Henry, we deliver technology solutions that are digitally transforming and empowering community banks and credit unions to provide enhanced and streamlined user experiences to their customers and members. Our best-in-class products are just the start as we lay the groundwork for the future of digital banking and payments. We hope you'll join us. We can't do it without you.

The Identity & Access Management (IAM) Senior Engineer will independently lead the development and enhancement of IAM products like SailPoint, Saviynt, and Okta, and influences stakeholders on future improvements. Implements role management, lifecycle management, and access certifications, while solving business problems and coaching peers. Stays updated on industry trends, solves technical issues, supports IAM applications, and trains users. Manages identity lifecycle with Active Directory, troubleshoots with SIEM tools, implements IAM policies, integrates with cloud platforms, automates processes, and enhances security initiatives.

This position may be worked remotely within the United States, with the exception of California.

East coast applicants MUST be willing to work central or mountain time zone hours.

All positions, regardless of location, may require an onsite interview or in-person onboarding requirements to verify your identity. This position is ineligible for immigration sponsorship and support. Please do not apply if at any time you will need immigration support now or in the future (i.e., H-1B, PERM).

What you’ll be responsible for:

• Plans, designs, develops, redesigns, and implements various technology IAM products, such as Sailpoint, Saviynt, Okta and recommendations to influence key stakeholders on additional/future enhancements.
• Performs the analyzing and implementation of authorization methods such as, RBAC/ABAC/PBAC role management, Lifecycle Management, Separation of Duties (SOD), Access Certifications, etc.
• Develops the configuring, integrating, and tailoring of existing IAM products to solve identified business problems or to suit a client's requirements.
• Reviews IAM technical white papers and provides guidance to team on future offerings to help people better understand the technology behind them.
• Manages Identity Lifecycle Management with Microsoft Active Directory which includes developing and managing the Access Certifications lifecycle accounts (assign permissions, delete accounts, and complete appropriate modifications for role changes).
• Performs integrations with directories (both in the cloud and on-prem) and cloud platforms (ex. AWS, GCP, and Azure).
• Integrates the business needs with technology and standards related to identity creation, deletions, vaulting and password management.
• Creates and updates metrics, including automating data collection and aggregation.
• Builds automation through integrations using Powershell scripts, RPA, SQL, and other automation tools and Power Automate.
• Participates in information gathering meetings with clients to determine the client’s needs, business goals, and desired outcomes.
• Performs other duties as assigned.

What you’ll need to have:

• Minimum of 6 years’ experience with Identity and Access Management.
• Minimum of 4 years’ experience with SailPoint engineering and/or architecting.
• Experience with SailPoint Identity Security Cloud (ISC).
• Advanced understanding of IAM platforms (SailPoint, Saviynt, Okta) to develop and scale with the organization.
• Experience with creating and updating scripts and code.
• Experience with API’s (REST, JSON) and cloud infrastructure.

What would be nice for you to have:

• Bachelor’s degree in Computer Science, Information Technology, Cybersecurity preferred.
• Expert knowledge of access management frameworks (RBAC/ABAC/PBAC).
• Deep understanding of Microsoft Active Directory and cloud platforms (AWS, GCP, Azure).
• Comprehensive understanding of security and access certification processes.
• Proficiency in automation tools (PowerShell, RPA, SQL, Power Automate).
• Experience with cloud and on-premises directory integrations.
• Expertise in access certification and SOD implementation.
• Strong leadership capabilities in technical project implementation.
• Strong analytical and problem-solving skills.
• Ability to translate complex technical concepts for various audiences.
• Ability to generate and interpret metrics and reports.
• Experience with Privileged Access Management tools (eg. Delinea Secret Server).

Why Jack Henry?

At Jack Henry, we pride ourselves through our motto of, 'Do the right thing, do whatever it takes, and have fun.' We recognize the value of our associates and believe much of our company's strength and success depends on their well-being.

We demonstrate our commitment by offering outstanding benefit programs to ensure the physical, mental & financial well-being of our people is always met.

Culture of Commitment

Ask our associates why they love Jack Henry, and many will tell you it is because our culture is exceptional. We do great things together. Rising to meet challenges and seeking opportunities is part of who we are as an organization. Our culture has helped us stay strong through challenging times and we credit our dedicated associates for our success. Visit our Corporate Responsibility site to learn more about our culture and commitment to our people, customers, community, environment, and shareholders.

Equal Employment Opportunity

At Jack Henry, we know we are better together. We value, respect, and protect the uniqueness each of us brings. Innovation flourishes by including all voices and makes our business - and our society - stronger. Jack Henry is an equal opportunity employer and we are committed to providing equal opportunity in all of our employment practices, including selection, hiring, performance management, promotion, transfer, compensation, benefits, education, training, social, and recreational activities to all persons regardless of race, religious creed, color, national origin, ancestry, physical disability, mental disability, genetic information, pregnancy, marital status, sex, gender, gender identity, gender expression, age, sexual orientation, and military and veteran status, or any other protected status protected by local, state or federal law.

No one will be subject to, and Jack Henry prohibits, any form of discipline, reprisal, intimidation, or retaliation for good faith reports or complaints of discrimination of any kind, pursuing any discrimination claim, or cooperating in related investigations.

Requests for full corporate job descriptions may be requested through the interview process at any time.