Senior IAM Engineer - SailPoint, Okta & PAM Automation

greatamerica; Cedar Rapids (IA); On-site; USD 110,000 - 150,000; Full time

Job summary

GreatAmerica Financial Services seeks a Senior Identity & Access Management Engineer to design, implement, and enhance identity governance and privileged access across SailPoint, CyberArk, and Okta. You will develop automated identity lifecycle workflows and RBAC models, integrate enterprise identity providers, and support SOX/ICFR evidence generation in a collaborative security-focused environment.

The role emphasizes automation, governance maturity, and cross-team partnership with Security,

Qualifications

• 5+ years hands-on IAM engineering or admin roles.
• 3+ years with SailPoint IdentityIQ/IdentityNow incl. lifecycle workflows & connectors.
• Experience designing RBAC models and role governance.
• Experience with CyberArk PAM including vaulting and onboarding.
• Strong PowerShell and REST API automation for entitlement and auditing.
• Proven ability to automate access requests, approvals, and fulfillment.
• Experience automating JML provisioning across enterprise systems.
• Preferred: Okta as identity provider with SSO/MFA and SCIM provisioning; depth in two of SailPoint/CyberArk/Okta; ability to deepen the third.

Responsibilities

• Build and maintain automated identity lifecycle workflows and connectors.
• Design and roll out RBAC models with ongoing governance.
• Integrate and administer Okta as the enterprise identity provider (SSO, MFA, SCIM).
• Implement CyberArk PAM and privileged access controls.
• Support migration from CyberArk PAS to Privilege Cloud and related procedures.
• Develop self-service and automated access request workflows.
• Automate joiner, mover, and leaver provisioning across systems.
• Run access certification campaigns and produce audit evidence for ICFR.

Skills

IAM engineering

SailPoint IdentityIQ/IdentityNow

RBAC design & governance

CyberArk PAM

PowerShell scripting

REST API automation

JML provisioning automation

Tools

SailPoint (IdentityIQ/IdentityNow)

CyberArk PAM

Okta

ServiceNow

Job description

GreatAmerica Financial Services seeks a Senior Identity & Access Management Engineer to design, implement, and enhance identity governance and privileged access across SailPoint, CyberArk, and Okta. You will develop automated identity lifecycle workflows and RBAC models, integrate enterprise identity providers, and support SOX/ICFR evidence generation in a collaborative security-focused environment.

The role emphasizes automation, governance maturity, and cross-team partnership with Security,