Senior IAM Engineer - Machine Identities & Secrets

Edward Jones

St. Louis (MO)

On-site

USD 130,000 - 180,000

Full time

14 days+

Get more replies from employers

Send a job-specific resume in minutes.

Benefits offered by this job

Medical insurance

Dental & Vision

401k with matching

HSA/FSA

Paid holidays

Vacation & sick leave

Bonuses and profit sharing

Employee Assistance Program

Job summary

Edward Jones seeks a highly technical Senior Non-Human Identity Engineer to lead engineering, automation, onboarding, remediation, and operational management of machine identities across cloud, on‑premises, and hybrid environments. You will personally build solutions, automate tasks, and work with DevOps, cybersecurity, and infrastructure teams to secure lifecycles of service accounts and credentials.

The role requires deep IAM expertise, strong scripting (PowerShell, Python), and comfort in a

Qualifications

Bachelor's degree in Information Technology, Cybersecurity, Computer Science, Engineering, or equivalent experience.
7+ years hands-on Identity and Access Management / cybersecurity engineering / cloud security.
5+ years direct experience managing non-human identities, service accounts, workload identities, or machine authentication technologies.
Strong hands-on experience with Microsoft Entra ID, Active Directory, or similar identity platforms.
Experience implementing and supporting secrets management and privileged access solutions.
Strong scripting and automation skills (PowerShell, Python, Bash).
Experience with OAuth 2.0, OpenID Connect, SAML, Kerberos, LDAP, PKI.
Experience supporting multi-cloud (Azure, AWS, GCP).
Ability to analyze logs and troubleshoot identity-related issues.
Experience with enterprise change management and incident response processes.
Strong communication and collaboration across tech teams.

Responsibilities

Engineer, implement, and support enterprise non-human identity solutions across cloud, on-premises, and hybrid environments.
Develop and maintain automated provisioning, credential rotation, secret management, certificate lifecycle management, and deprovisioning processes.
Onboard and migrate service accounts, managed identities, workload identities, application accounts, and machine credentials.
Configure, deploy, and support privileged access controls for non-human identities using PAM and secrets management.
Eliminate hardcoded credentials and modernize authentication methods across applications.
Design and maintain automation using PowerShell, Python, REST APIs, Terraform, and other tools.
Integrate identity controls into CI/CD and DevSecOps workflows.
Troubleshoot authentication, authorization, federation, certificates, tokens, and credential issues across apps.
Support large-scale remediation for dormant accounts, excessive permissions, and identity security risks.
Configure and administer identity platforms including directory services, cloud ID providers, PAM, and PKI.
Monitor identity activity and investigate suspicious events or policy violations.
Conduct access reviews and entitlement analysis to enforce least-privilege.
Create runbooks, guides, engineering standards, and technical docs.
Collaborate with Security Operations and Incident Response during investigations.
Participate in after-hours support and major incidents when required.