Senior IAM Engineer: Lead Zero-Trust IAM & Automation

Acrisure

Atlanta (GA)

On-site

USD 120,000 - 190,000

Full time

42 hours ago

Be an early applicant

A complete application in a minute

Tailored resume and cover letter, ready to send.

Get past ATS filters

Benefits offered by this job

Health insurance

401(k) plan

HSA / FSA

Calm app subscription

Paid time off

Job summary

Acrisure is seeking a Senior Identity & Access Management Engineer to shape the design and deployment of enterprise IAM within a Zero Trust framework. You will guide IAM strategy, engineer identity solutions, and enable secure access across a global environment.

Expertise in CIAM, PAM, IGA, and cloud identity is essential. You will mentor engineers, collaborate with HR, Security, Infrastructure, and Cloud teams, and drive automation using PowerShell, Python, or Bash to improve provisioning,

Qualifications

Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related field.
Minimum 5 years of hands‑on experience in Identity and Access Management
Deep expertise in Zero Trust frameworks and modern IAM principles.
Extensive experience with IAM technologies (IGA, PAM, SSO/MFA, federation, directory services).
Strong proficiency in scripting languages such as PowerShell, Python, or Bash.
Experience with regulatory and compliance standards (NYDFS, HIPAA, NIST, etc.).
Strong understanding of cloud‑native IAM services (AWS IAM, Azure AD/Entra ID, GCP IAM).
Excellent communication skills, with the ability to articulate complex IAM concepts to stakeholders at all levels.

Responsibilities

Lead the design, implementation, and optimization of enterprise IAM solutions with a strong emphasis on CIAM, PAM, and IGA.
Architect scalable integrations across hybrid, multi‑cloud, and SaaS environments.
Serve as a SME for PAM platforms (e.g., Delinea, CyberArk, BeyondTrust), including design of vaulting, session monitoring, credential rotation, and least‑privilege models.
Lead complex integrations for IGA platforms (e.g., Veza, SailPoint, Saviynt) and establish enterprise lifecycle automation, role engineering, and access certification frameworks.
Build advanced automation using PowerShell, Python, or Bash to improve provisioning, deprovisioning, access certification, and compliance activities.
Partner with HR, Cybersecurity, Infrastructure, Cloud, and Application teams to ensure cohesive identity architecture.
Architect and maintain identity federation and SSO solutions using SAML, OAuth 2.0, OpenID Connect, and SCIM across hybrid and SaaS ecosystems.
Establish standards and automation for securing service accounts, API keys, secrets management, and machine identities.
Collaborate with Security Operations to mature ITDR capabilities and identity‑risk monitoring, including behavioral analytics and anomalous access detection.
Act as a technical lead and mentor for junior IAM engineers.