Senior IAM Engineer: RBAC, PAM & Identity Automation

GreatAmerica Financial Services; Cedar Rapids (IA); Hybrid; USD 110,000 - 160,000; Full time

Benefits offered by this job

Hybrid work arrangements

Paid Parking

Service Awards

Business casual environment

Strong organizational culture

Job summary

GreatAmerica Financial Services seeks a Senior IAM Engineer to design, implement, and enhance identity governance and access controls across our United States operations. You’ll work with SailPoint, CyberArk, Okta, and related technologies to automate lifecycle workflows, RBAC models, and privileged access management.

This role partners with security, compliance, and application teams to translate requirements into scalable solutions, reduce access risk, and ensure audit-ready ICFR evidence

Qualifications

• 5+ years of hands-on experience in Identity and Access Management engineering or administration roles.
• 3+ years of direct, hands-on experience with SailPoint (IdentityIQ and/or IdentityNow).
• Demonstrated experience designing and deploying RBAC models, including role mining, role engineering, and role lifecycle governance.
• Working experience with CyberArk PAM, including vaulting, session isolation and monitoring, and privileged account onboarding.
• Strong PowerShell scripting and REST API experience for automation and audit evidence generation.
• Proven ability to build access request automation covering requests, approvals, and fulfillment.

Responsibilities

• Build automated identity lifecycle workflows, certification campaigns, and connectors with SailPoint IdentityNow/IdentityIQ.
• Design and roll out RBAC models with ongoing governance.
• Integrate Okta as the enterprise identity provider (SSO, MFA, SCIM provisioning).
• Implement CyberArk PAM, including vaulting and privileged account onboarding.
• Support migration to CyberArk Privilege Cloud and update procedures.
• Develop self-service and automated access request workflows across enterprise systems.

Skills

PowerShell scripting

REST API automation

RBAC design

JML provisioning

Automation of IAM workflows

Education

Bachelor’s degree in cybersecurity, computer science or related field

Tools

SailPoint IdentityNow/IdentityIQ

CyberArk PAM

Okta

SCIM provisioning

ServiceNow

Job description

GreatAmerica Financial Services seeks a Senior IAM Engineer to design, implement, and enhance identity governance and access controls across our United States operations. You’ll work with SailPoint, CyberArk, Okta, and related technologies to automate lifecycle workflows, RBAC models, and privileged access management.

This role partners with security, compliance, and application teams to translate requirements into scalable solutions, reduce access risk, and ensure audit-ready ICFR evidence