Senior IAM Engineer - SailPoint/Okta & CyberArk

GreatAmerica Financial Services Corporation; Cedar Rapids (IA); On-site; USD 110,000 - 160,000; Full time

Benefits offered by this job

Hybrid work arrangements

Health, dental, vision insurance

401(k) with company match

Paid time off

Job summary

GreatAmerica Financial Services Corporation is seeking a Senior IAM Engineer to design, implement, and enhance identity governance, access controls, and privileged access programs across the enterprise. The role collaborates with Security, Audit, Compliance, Infrastructure, and Applications teams to deliver automated, scalable solutions.

The ideal candidate will drive SailPoint IdentityNow/IdentityIQ, Okta provisioning, and CyberArk PAM initiatives while advancing automation, governance

Qualifications

• 5+ years of hands-on experience in Identity and Access Management engineering or administration roles.
• 3+ years of direct, hands-on experience with SailPoint (IdentityIQ and/or IdentityNow), including lifecycle workflows, certification campaigns, and connector development or integration.
• Demonstrated experience designing and deploying RBAC models, including role mining, role engineering, and role lifecycle governance.
• Working experience with CyberArk PAM, including vaulting, session isolation and monitoring, and privileged account onboarding.
• Strong PowerShell scripting and REST API experience for automation, entitlement extracts, reconciliation, and audit evidence generation.
• Proven ability to build access request automation covering requests, approvals, and fulfillment.
• Experience automating JML provisioning and deprovisioning across multiple enterprise systems.

Responsibilities

• Build and maintain automated identity lifecycle workflows, certification campaigns, and connectors within SailPoint IdentityNow, including connector development and integration with enterprise applications (ServiceNow, ILS).
• Design, build, and roll out RBAC models, including role mining, role engineering, and ongoing role lifecycle governance.
• Integrate and administer Okta as the enterprise identity provider, including SSO, MFA, and lifecycle management through SCIM provisioning.
• Implement and support CyberArk privileged access management (PAM), including credential vaulting, session isolation and monitoring, JIT elevation policy administration, and onboarding.
• Develop self-service and automated access request workflows spanning request intake, approval routing, and fulfillment.
• Automate joiner, mover, and leaver provisioning and deprovisioning processes across enterprise systems to ensure timely access changes.
• Execute recurring access certification campaigns and quarterly configuration reviews (privileged access, password and authentication settings) for ICFR controls.

Job description

GreatAmerica Financial Services Corporation is seeking a Senior IAM Engineer to design, implement, and enhance identity governance, access controls, and privileged access programs across the enterprise. The role collaborates with Security, Audit, Compliance, Infrastructure, and Applications teams to deliver automated, scalable solutions.

The ideal candidate will drive SailPoint IdentityNow/IdentityIQ, Okta provisioning, and CyberArk PAM initiatives while advancing automation, governance