Senior IAM Engineer: RBAC, PAM & Identity Automation (Hybrid)

GreatAmerica; Des Moines (IA); Hybrid; USD 120,000 - 170,000; Full time

Benefits offered by this job

Hybrid work arrangements

401(k) with company match

Annual profit sharing

Paid time off

Job summary

GreatAmerica is seeking a Senior IAM Engineer to design, implement, and continually enhance identity governance and access controls across SailPoint, Okta and CyberArk ecosystems. You will influence automation, governance maturity, and regulatory alignment.

The role partners with Security, Audit, Compliance, Infrastructure and Applications teams to deliver scalable identity services and audit-ready evidence. Strong scripting and RBAC design are essential.

Qualifications

• 5+ years of hands-on IAM engineering or administration experience.
• 3+ years with SailPoint (IdentityIQ/IdentityNow) including lifecycle workflows and connectors.
• Experience designing and deploying RBAC models and role lifecycle governance.
• Working experience with CyberArk PAM including vaulting and privileged onboarding.
• Strong PowerShell scripting and REST API experience for automation and audit evidence generation.
• Experience building automated access request workflows across enterprise systems.

Responsibilities

• Build and maintain automated identity lifecycle workflows and connectors for SailPoint IdentityNow/IdentityIQ.
• Design and roll out RBAC models including role mining and lifecycle governance.
• Integrate and administer Okta as enterprise identity provider with SSO/MFA and SCIM provisioning.
• Implement CyberArk PAM including vaulting, session isolation, and JIT elevation policy administration.
• Develop self-service and automated access request workflows from intake to fulfillment.
• Automate joiner/mover/leaver provisioning and deprovisioning across enterprise systems.
• Support SOX/ICFR access controls and generate audit evidence for ICFR.

Skills

RBAC design

PowerShell scripting

REST API automation

JML provisioning

SOX/ICFR awareness

Automation

Education

Bachelor's degree in cybersecurity or CS

Tools

SailPoint IdentityIQ/IdentityNow

Okta

CyberArk PAM

ServiceNow

Job description

GreatAmerica is seeking a Senior IAM Engineer to design, implement, and continually enhance identity governance and access controls across SailPoint, Okta and CyberArk ecosystems. You will influence automation, governance maturity, and regulatory alignment.

The role partners with Security, Audit, Compliance, Infrastructure and Applications teams to deliver scalable identity services and audit-ready evidence. Strong scripting and RBAC design are essential.