Senior IAM Engineer: RBAC, PAM & Identity Automation

GreatAmerica Bank National Association

Cedar Rapids (IA)

Hybrid

USD 120,000 - 150,000

Full time

6 days ago

Be an early applicant

Application generator

Don’t send a generic resume — generate a resume and cover letter tailored to this exact role.

Get past ATS filters

Benefits offered by this job

Health Insurance

Hybrid work arrangements

401(k) and Company Match

Paid Time Off

Tuition Assistance

Job summary

GreatAmerica Financial Services is seeking a Senior IAM Engineer to design, implement, and enhance identity governance, access management, and privileged access capabilities across the organization. You will work across SailPoint, Okta, and CyberArk, delivering automated identity lifecycle processes, RBAC models, and secure authentication services.

Collaborating with Security, Audit, Compliance, Infrastructure, and Application teams, you will advance automation, governance maturity, and

Qualifications

5+ years in Identity and Access Management engineering/administration roles.
3+ years with SailPoint IdentityIQ/IdentityNow (workflows, cert campaigns, connectors).
RBAC design experience including role mining/engineering and lifecycle governance.
Experience with CyberArk PAM—vaulting, session isolation, privileged onboarding.
Strong PowerShell and REST API automation for entitlement, reconciliation, audit evidence.

Responsibilities

Build automated identity lifecycle workflows and connectors in SailPoint IdentityNow/IdentityIQ.
Design and roll out RBAC models with ongoing governance.
Manage Okta as enterprise identity provider for SSO, MFA, and SCIM provisioning.
Implement and support CyberArk PAM and privileged access onboarding.
Automate JML provisioning and deprovisioning across enterprise systems.