Site Reliability Engineer (IAM) 5663

Tier4 Group; Atlanta (GA); Hybrid; USD 120,000 - 180,000; Full time

Job summary

Tier4 Group in Atlanta is seeking an SRE Infrastructure Engineer with deep Identity & Access Management expertise to join a high-performing technology team. The role is hybrid in Atlanta and a long-term contract, with a focus on modernizing identity services across a complex enterprise.

You’ll help automate user lifecycle, strengthen access controls, and build a scalable identity platform. This is not a pure IAM administration role but a hands-on engineering position at the intersection of SRE,

Qualifications

• 5–8+ years in SRE, infrastructure, IAM or cloud engineering.
• Hands-on Okta in an enterprise environment.
• Experience with SSO, MFA, SAML 2.0, OAuth 2.0, OIDC.
• Strong Active Directory and directory services experience.
• Automation and IaC with Terraform, Ansible, PowerShell, Python, Bash or APIs.

Responsibilities

• Engineer and operationalize identity capabilities including Okta.
• Automate joins/moves/leavers and reduce manual provisioning.
• Integrate IAM with HR systems, directories and apps.
• Implement SSO, MFA, federation and CIAM solutions.
• Automate identity provisioning/deprovisioning and CIAM workflows.
• Develop and maintain IAM tooling with IaC and APIs.
• Support monitoring, reliability and incident response for identity services.

Skills

Okta

SSO

MFA

SAML 2.0

OAuth 2.0

OIDC

SCIM

Federation

Active Directory

Terraform

Ansible

PowerShell

Python

Bash

APIs

Windows

Linux

GCP

AWS

Tools

Terraform

Ansible

PowerShell

Python

Bash

Job description

SRE Infrastructure Engineer, Identity & Access Management (IAM)

Atlanta, GA | Hybrid | Long-Term Contract | 12+ Months

Build the identity infrastructure behind a major security transformation.

We’re looking for an experienced SRE / Infrastructure Engineer with deep Identity & Access Management expertise to join a high-performing technology organization in Atlanta.

This is not an IAM administration role.

You’ll be part of the engineering team responsible for turning enterprise security strategy into working technology. You’ll help modernize identity services, automate the user lifecycle, strengthen access controls, and build a more scalable and reliable identity platform across a complex enterprise environment.

The organization is making a significant investment in security, and this role sits directly at the intersection of SRE, infrastructure, automation and identity engineering. The work is highly visible, business critical, and expected to continue well beyond the initial engagement.

What You’ll Be Doing

You’ll help engineer and operationalize the company’s next generation of identity capabilities, including:

• Advancing and automating the enterprise Okta environment
• Improving Joiner, Mover and Leaver processes and reducing manual provisioning
• Building integrations between identity platforms, Active Directory, HR systems, SaaS applications and enterprise applications
• Implementing SSO, MFA, federation, authentication and authorization solutions
• Supporting identity governance, access reviews and privileged-access initiatives
• Engineering and supporting Auth0 / CIAM capabilities
• Automating identity infrastructure and configuration using APIs, scripting and Infrastructure as Code
• Troubleshooting complex issues spanning identity, infrastructure, applications, networking and cloud services
• Improving monitoring, reliability, resiliency and operational processes for critical identity services
• Participating in incident response, root-cause analysis and continuous reliability improvements

What We’re Looking For

The strongest candidate will be an infrastructure or SRE engineer who developed serious depth in identity engineering, rather than someone whose background is primarily IAM administration.

You should bring:

• 5–8+ years of experience across SRE, infrastructure, systems, IAM or cloud engineering
• Strong hands-on experience with Okta in an enterprise environment
• Experience with SSO, MFA, SAML 2.0, OAuth 2.0, OIDC, SCIM and federation
• Strong Active Directory and enterprise directory-services experience
• Experience automating identity provisioning and deprovisioning
• Experience integrating IAM platforms with HR systems, directories, SaaS and enterprise applications
• Automation and Infrastructure as Code experience using tools such as Terraform, Ansible, PowerShell, Python, Bash or APIs
• Working knowledge of Windows and Linux environments
• Cloud experience, ideally GCP, although strong AWS experience is also relevant

Experience with Okta Lifecycle Management, Okta Identity Governance, Okta Workflows, Okta Privileged Access, Auth0, Workday-to-Okta integrations, RBAC/ABAC or Terraform-based Okta configuration will definitely get our attention.

Why This Role Is Interesting

This isn't a keep-the-lights-on IAM role. You’ll be joining during a significant security initiative where strategy is actively being translated into new technology, automation and operating practices.

You’ll have the opportunity to influence how identity works across the enterprise, solve meaningful engineering problems, and leave behind systems that are more automated, secure, scalable and reliable than what exists today.

This is a 12+ month contract opportunity with potential for future permanent employment. The role is hybrid in Atlanta with meaningful onsite collaboration.