Senior Identity and Access Management Engineer

Insight Global; Atlanta (GA); On-site; USD 140,000 - 180,000; Full time

Job summary

A dynamic cybersecurity firm in Atlanta is seeking a Senior Identity and Access Management (IAM) Engineer. This role involves leading the implementation and maintenance of IAM solutions, providing expert guidance, and collaborating closely with IT teams. Candidates should have a Bachelor’s degree, 5+ years of IAM experience, and hands-on experience with SailPoint ISC. The ideal candidate will possess strong knowledge of cybersecurity practices and automation scripting. A passion for enhancing security measures within organizations is essential.

Qualifications

• 5+ years of experience in IAM, Cybersecurity, or related field.
• Hands-on experience implementing and managing SailPoint ISC in complex environments.
• Strong understanding of PAM principles and working knowledge of similar tools.
• Strong knowledge of PAM and PAM tools.
• Proficiency with PowerShell, Python, REST APIs.

Responsibilities

• Lead the implementation and maintenance of IAM solutions.
• Provide subject matter expertise on Microsoft Entra ID-native service accounts.
• Evaluate and automate Identity Management requirements within Azure AD environments.
• Assist in defining and implementing access policies, conditional access, entitlement models, and RBAC principles across applications and systems.
• Evaluating and automating Identity Management requirements within Azure AD environments
• Ensuring federated access across Active Directory, Azure AD, and other environments
• Troubleshooting and resolving Azure environment performance issues, connectivity issues, security issues, etc.
• Work closely with cybersecurity, cloud, and infrastructure teams to align IAM strategies with organizational security objectives.
• Collaborate with internal stakeholders and external vendors to support the implementation and integration of StrongDM for privileged access management
• Provide technical guidance and mentorship to junior IAM engineers and IAM Analyst
• Ability to drive their own workload and take initiative.
• Work with the IAM Architect to execute a comprehensive IAM strategy aligned with the organization's goals and objectives.

Skills

Identity administration

Cybersecurity

Microsoft Entra ID

Automation scripting

Interpersonal skills

PAM tools

RBAC

Identity governance

Identity lifecycle

Hybrid cloud

Communication

Education

Bachelor’s degree in Computer Science or related field

Tools

SailPoint ISC

StrongDM

Azure AD

PowerShell

Azure Key Vault

Job description

The Cybersecurity Team is seeking a Senior Identity and Access Management (IAM) Engineer to support full-time on the Identity and Access Management team. The person will perform daily functions required to maintain the rules and controls for Information Security to protect Insight Global assets, works with critical and sensitive information, and is relied upon to maintain security and least privileged safeguards. This person will be accountable for providing day-to-day engineering and architectural strategy, and tactical direction of IAM services, as well as supporting IAM-related project-based activities. The role is required to provide expert-level guidance and application of both real-world experiences, along with following education-based best practices. This person will seek to drive value and enhancement in the products and services that are provided on behalf of the group to our businesses and work closely with IT teams to ensure secure and efficient access to systems and applications. This position will report directly to the Manager of Identity and Access Management and support the CISO to provide the highest quality service to Insight Global business units and customers.

Responsibilities

• Lead the implementation and maintenance of IAM solutions, including identity administration, identity governance, multi-factor authentication, and privilege access management.
• Implement and maintain a modern service account framework, including standards, lifecycle processes, naming conventions, and governance for all types of service accounts.
• Provide subject matter expertise on Microsoft Entra ID-native service accounts, including Managed identities (system-assigned and user-assigned), Azure AD application registrations and service principals, Microsoft Entra Workload Identities, and Group Managed Service Accounts (gMSAs)
• Assist in defining and implementing access policies, conditional access, entitlement models, and RBAC principles across applications and systems.
• Evaluating and automating Identity Management requirements within Azure AD environments
• Ensuring federated access across Active Directory, Azure AD, and other environments
• Troubleshooting and resolving Azure environment performance issues, connectivity issues, security issues, etc.
• Work closely with cybersecurity, cloud, and infrastructure teams to align IAM strategies with organizational security objectives.
• Collaborate with internal stakeholders and external vendors to support the implementation and integration of StrongDM for privileged access management
• Provide technical guidance and mentorship to junior IAM engineers and IAM Analyst
• Ability to drive their own workload and take initiative.
• Work with the IAM Architect to execute a comprehensive IAM strategy aligned with the organization's goals and objectives.

Qualifications

• Bachelor’s degree in Computer Science, Information Technology, or related field.
• 5+ years of experience in IAM, Cybersecurity, or related field.
• Hands-on experience implementing and managing SailPoint ISC in complex environments.
• Strong understanding of PAM principles and working knowledge of StrongDM or similar PAM tools (e.g., CyberArk, BeyondTrust, Delinea, Azure Key Vault).
• Deep knowledge of Microsoft Entra ID (Azure AD) and service account types, including their creation, usage, governance, and security best practices
• Proficiency with IAM-related scripting and automation (e.g., PowerShell, Python, REST APIs).
• Experience working with hybrid and cloud environments (Azure, M365, SaaS integrations).
• Strong knowledge of identity lifecycle management, access reviews, provisioning/deprovisioning, and RBAC.
• Excellent communication and interpersonal skills, with the ability to collaborate effectively with technical and non-technical stakeholders.
• Certifications such as CISSP, CIAM, or Azure are highly desirable.

If you have a passion for cybersecurity and a proven track record of leading successful IAM initiatives, we encourage you to apply for this exciting opportunity!