Senior IAM & Identity Security Engineer (Hybrid)

Talent Mappers; Denver (CO); Hybrid; USD 140,000 - 160,000; Full time

Job summary

Talent Mappers in Denver is seeking a Senior Identity Security Engineer to design, implement, and operate IAM, identity governance, and Zero Trust controls across on-prem and cloud.

You will collaborate with Security Engineering, Infrastructure, HR Systems, and App teams to automate access, enforce least privilege, and maintain MFA and passwordless auth, with a hybrid schedule (4 days in office).

Qualifications

• Bachelor's degree in Computer Science, Information Security, or related field.
• 6+ years of Identity Engineering or Security Engineering experience.
• Experience with Entra ID, Active Directory, or similar identity platforms.
• Experience implementing IAM and Identity Governance solutions.
• Experience with Conditional Access, MFA, SAML, OAuth, OpenID Connect, SCIM.
• Experience with PowerShell and Microsoft Graph.
• Experience integrating SaaS applications using enterprise SSO.
• Familiarity with Zero Trust architecture.
• Experience with NIST, CIS Controls, and identity security best practices.

Responsibilities

• Design and implement enterprise IAM solutions.
• Engineer authentication and authorization architectures using SAML, OAuth, OpenID Connect, SCIM.
• Design and maintain Conditional Access policies and adaptive authentication controls.
• Implement MFA, passwordless authentication, and phishing-resistant authentication technologies.
• Engineer lifecycle automation for Joiner, Mover, and Leaver processes.
• Design identity governance capabilities and RBAC models.
• Automate access reviews, certifications, and segregation-of-duty controls.
• Develop integrations between HR systems, directories, SaaS platforms, and business applications.
• Develop identity provisioning and reporting workflows.
• Provide identity architecture guidance for new applications.

Skills

Identity engineering

Security engineering

IAM concepts

Zero Trust

PowerShell

Graph API

SaaS integrations

RBAC

Education

Bachelor's degree in Computer Science or related field

Tools

Microsoft Graph

Entra ID

Active Directory

Job description

Talent Mappers in Denver is seeking a Senior Identity Security Engineer to design, implement, and operate IAM, identity governance, and Zero Trust controls across on-prem and cloud.

You will collaborate with Security Engineering, Infrastructure, HR Systems, and App teams to automate access, enforce least privilege, and maintain MFA and passwordless auth, with a hybrid schedule (4 days in office).