Senior IAM Engineer — Identity Security & Access Automation

GreatAmerica; Town of Texas (WI); On-site; USD 140,000 - 190,000; Full time

Benefits offered by this job

401(k) match

Profit sharing

Paid time off

Hybrid work arrangements

Gym reimbursement

Health insurance

Job summary

GreatAmerica is hiring a Senior Identity & Access Management (IAM) Engineer to design, implement, and enhance identity governance and access controls across the organization. You will work across SailPoint, CyberArk, and Okta to automate lifecycle workflows, RBAC models, and privileged access solutions, partnering with Security, Audit, Compliance, and Application teams.

The role emphasizes automation, governance maturity, and regulatory alignment, with opportunities to influence SOX ICFR

Qualifications

• 5+ years in IAM engineering or administration roles.
• 3+ years with SailPoint IdentityIQ/IdentityNow.
• Experience designing and deploying RBAC models (role mining/engineering).
• Experience with CyberArk PAM (vaulting, monitoring, onboarding).
• PowerShell and REST API automation for entitlement and audit evidence.

Responsibilities

• Build and maintain automated identity lifecycle workflows and connectors within SailPoint IdentityNow (ServiceNow, ILS).
• Design, build, and roll out RBAC models with ongoing governance.
• Integrate and administer Okta (SSO, MFA, SCIM provisioning).
• Implement and support CyberArk PAM (vaulting, session isolation, JIT elevation).
• Automate joiner/mover/leaver provisioning and deprovisioning across enterprise systems.
• Develop self-service and automated access request workflows (approval routing and fulfillment).
• Automate access certification campaigns and quarterly configuration reviews for ICFR.

Skills

IAM engineering

RBAC design

PowerShell scripting

REST API automation

Automation & workflows

Risk & compliance awareness

Education

Bachelor's degree in cybersecurity or related field

Tools

SailPoint IdentityIQ/IdentityNow

CyberArk PAM

Okta

Job description

GreatAmerica is hiring a Senior Identity & Access Management (IAM) Engineer to design, implement, and enhance identity governance and access controls across the organization. You will work across SailPoint, CyberArk, and Okta to automate lifecycle workflows, RBAC models, and privileged access solutions, partnering with Security, Audit, Compliance, and Application teams.

The role emphasizes automation, governance maturity, and regulatory alignment, with opportunities to influence SOX ICFR