Senior IAM Engineer: RBAC, PAM & Automated Access (Hybrid)

GreatAmerica; Cedar Rapids (IA); On-site; USD 120,000 - 190,000; Full time

Benefits offered by this job

Monthly bonuses

401(k) and company match

Annual profit sharing

Paid time off

Health insurance

Dental insurance

Vision insurance

Disability insurance

Life insurance

HSA

FSA

Parental leave

Hybrid work arrangements

Paid parking

Job summary

GreatAmerica is a leading equipment financing provider in the U.S. seeking a Senior IAM Engineer to design, implement, and enhance identity governance, access management, and privileged access controls across the enterprise.

You will work with SailPoint, CyberArk, and Okta to automate identity lifecycles, RBAC, and PAM, partnering with Security, Audit, Compliance, and Infrastructure teams to deliver scalable security solutions and governance maturity.

Qualifications

• 5+ years of hands-on experience in Identity and Access Management engineering or administration roles.
• 3+ years of direct, hands-on experience with SailPoint (IdentityIQ and/or IdentityNow).
• Demonstrated experience designing and deploying RBAC models, including role mining, role engineering, and role lifecycle governance.
• Working experience with CyberArk PAM, including vaulting, session isolation and monitoring, and privileged account onboarding.
• Strong PowerShell scripting and REST API experience for automation, entitlement extracts, reconciliation, and audit evidence generation.
• Proven ability to build access request automation covering requests, approvals, and fulfillment.
• Experience automating JML provisioning and deprovisioning across multiple enterprise systems.

Responsibilities

• Build and maintain automated identity lifecycle workflows, certification campaigns, and connectors within SailPoint IdentityNow, including connector development and integration with enterprise applications (ServiceNow, ILS).
• Design, build, and roll out RBAC models, including role mining, role engineering, and ongoing role lifecycle governance.
• Integrate and administer Okta as the enterprise identity provider, including SSO, MFA, and lifecycle management through SCIM provisioning.
• Implement and support CyberArk privileged access management (PAM), including credential vaulting, session isolation and monitoring, just-in-time (JIT) elevation policy administration, elimination of standing privileges, and privileged account onboarding.
• Develop self-service and automated access request workflows spanning request intake, approval routing, and fulfillment.
• Automate joiner, mover, and leaver (JML) provisioning and deprovisioning processes across enterprise systems to ensure timely and accurate access changes.

Skills

IAM engineering

SailPoint IdentityIQ/IdentityNow

RBAC models

CyberArk PAM

Okta SSO/MFA/SCIM

PowerShell

REST API

Automation

JML provisioning

SSO

MFA

ICFR SOX

Education

Bachelor's degree in cybersecurity or CS

Tools

ServiceNow

ILS

IdentityNow

IdentityIQ

SCIM

Okta

Job description

GreatAmerica is a leading equipment financing provider in the U.S. seeking a Senior IAM Engineer to design, implement, and enhance identity governance, access management, and privileged access controls across the enterprise.

You will work with SailPoint, CyberArk, and Okta to automate identity lifecycles, RBAC, and PAM, partnering with Security, Audit, Compliance, and Infrastructure teams to deliver scalable security solutions and governance maturity.