Senior IAM Engineer: RBAC, PAM & Identity Automation

GreatAmerica Bank National Association; Cedar Rapids (IA); Hybrid; USD 120,000 - 150,000; Full time

Benefits offered by this job

Health Insurance

Hybrid work arrangements

401(k) and Company Match

Paid Time Off

Tuition Assistance

Job summary

GreatAmerica Financial Services is seeking a Senior IAM Engineer to design, implement, and enhance identity governance, access management, and privileged access capabilities across the organization. You will work across SailPoint, Okta, and CyberArk, delivering automated identity lifecycle processes, RBAC models, and secure authentication services.

Collaborating with Security, Audit, Compliance, Infrastructure, and Application teams, you will advance automation, governance maturity, and

Qualifications

• 5+ years in Identity and Access Management engineering/administration roles.
• 3+ years with SailPoint IdentityIQ/IdentityNow (workflows, cert campaigns, connectors).
• RBAC design experience including role mining/engineering and lifecycle governance.
• Experience with CyberArk PAM—vaulting, session isolation, privileged onboarding.
• Strong PowerShell and REST API automation for entitlement, reconciliation, audit evidence.

Responsibilities

• Build automated identity lifecycle workflows and connectors in SailPoint IdentityNow/IdentityIQ.
• Design and roll out RBAC models with ongoing governance.
• Manage Okta as enterprise identity provider for SSO, MFA, and SCIM provisioning.
• Implement and support CyberArk PAM and privileged access onboarding.
• Automate JML provisioning and deprovisioning across enterprise systems.

Skills

IAM engineering

SailPoint (IdentityIQ/IdentityNow)

RBAC design

CyberArk PAM

Okta SSO/MFA/SCIM

PowerShell scripting

REST API automation

Education

Bachelor's degree in cybersecurity/computer science or related field

Tools

SailPoint IdentityNow/IdentityIQ

Okta

CyberArk

ServiceNow

Job description

GreatAmerica Financial Services is seeking a Senior IAM Engineer to design, implement, and enhance identity governance, access management, and privileged access capabilities across the organization. You will work across SailPoint, Okta, and CyberArk, delivering automated identity lifecycle processes, RBAC models, and secure authentication services.

Collaborating with Security, Audit, Compliance, Infrastructure, and Application teams, you will advance automation, governance maturity, and