Sr IAM Engineer
Acrisure
A complete application in a minute — tailored resume and cover letter, ready to send.
Job summary
Acrisure is seeking a Senior Identity & Access Management Engineer to lead architecture, design, and scalability of IAM across hybrid and multi-cloud environments.
The role requires deep knowledge of CIAM, PAM, IGA, and automation, with hands-on scripting in PowerShell, Python, or Bash, and experience with major IAM tools. Remote-work options may apply for collaboration and leadership across teams.
Qualifications
- Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related field.
- Minimum 5 years of hands‑on experience in Identity and Access Management
- Deep expertise in Zero Trust frameworks and modern IAM principles.
- Extensive experience with IAM technologies (IGA, PAM, SSO/MFA, federation, directory services).
- Strong proficiency in scripting languages such as PowerShell, Python, or Bash.
- Experience with regulatory and compliance standards (NYDFS, HIPAA, NIST, etc.).
- Strong understanding of cloud-native IAM services (AWS IAM, Azure AD/Entra ID, GCP IAM).
- Excellent communication skills, with the ability to articulate complex IAM concepts to stakeholders at all levels.
Responsibilities
- Lead the design, implementation, and optimization of enterprise IAM solutions with a strong emphasis on CIAM, PAM, and IGA.
- Architect scalable integrations across hybrid, multi-cloud, and SaaS environments.
- Serve as a SME for PAM platforms (e.g., Delinea, CyberArk, BeyondTrust), including design of vaulting, session monitoring, credential rotation, and least-privilege models.
- Lead complex integrations for IGA platforms (e.g., Veza, SailPoint, Saviynt) and establish enterprise lifecycle automation, role engineering, and access certification frameworks.
- Build advanced automation using PowerShell, Python, or Bash to improve provisioning, deprovisioning, access certification, and compliance activities.
- Partner with HR, Cybersecurity, Infrastructure, Cloud, and Application teams to ensure cohesive identity architecture.
- Architect and maintain identity federation and SSO solutions using SAML, OAuth 2.0, OpenID Connect, and SCIM across hybrid and SaaS ecosystems.
- Architect and maintain identity federation and SSO solutions using SAML, OAuth 2.0, OpenID Connect, and SCIM across hybrid and SaaS ecosystems.
- Establish standards and automation for securing service accounts, API keys, secrets management, and machine identities.
- Collaborate with Security Operations to mature ITDR capabilities and identity-risk monitoring, including behavioral analytics and anomalous access detection.
- Act as a technical lead and mentor for junior IAM engineers.
Skills
Education
Tools
Job description
A global fintech leader, Acrisure empowers millions of ambitious businesses and individuals with the right solutions to grow boldly forward. Bringing cutting-edge technology and top-tier human support together, we connect clients with customized solutions across a range of insurance, reinsurance, payroll, benefits, cybersecurity, mortgage services – and more.
A global fintech leader, Acrisure empowers millions of ambitious businesses and individuals with the right solutions to grow boldly forward. Bringing cutting-edge technology and top-tier human support together, we connect clients with customized solutions across a range of insurance, reinsurance, payroll, benefits, cybersecurity, mortgage services – and more. In the last twelve years, Acrisure has grown in revenue from $38 million to almost $5 billion and employs over 19,000 colleagues in more than 20 countries. Acrisure was built on entrepreneurial spirit. Prioritizing leadership, accountability, and collaboration, we equip our teams to work at the highest levels possible.
We are seeking a highly skilled and forward-thinking Senior Identity & Access Management Engineer to drive the design, development, and scalability of Acrisure’s enterprise IAM capabilities within a Zero Trust Security framework. This senior-level role will serve as a technical leader, guiding the evolution of IAM strategy, engineering advanced identity solutions, and ensuring secure, frictionless access across a complex global environment. The ideal candidate brings deep expertise in IAM architecture, identity governance, privileged access, automation, and cloud identity ecosystems, with the ability to lead initiatives, influence standards, and mentor other engineers.
- Lead the design, implementation, and optimization of enterprise IAM solutions with a strong emphasis on CIAM, PAM, and IGA.
- Architect scalable integrations across hybrid, multi-cloud, and SaaS environments.
- Serve as a SME for PAM platforms (e.g., Delinea, CyberArk, BeyondTrust), including design of vaulting, session monitoring, credential rotation, and least-privilege models.
- Lead complex integrations for IGA platforms (e.g., Veza, SailPoint, Saviynt) and establish enterprise lifecycle automation, role engineering, and access certification frameworks.
- Build advanced automation using PowerShell, Python, or Bash to improve provisioning, deprovisioning, access certification, and compliance activities.
- Partner with HR, Cybersecurity, Infrastructure, Cloud, and Application teams to ensure cohesive identity architecture.
- Architect and maintain identity federation and SSO solutions using SAML, OAuth 2.0, OpenID Connect, and SCIM across hybrid and SaaS ecosystems.
- Architect and maintain identity federation and SSO solutions using SAML, OAuth 2.0, OpenID Connect, and SCIM across hybrid and SaaS ecosystems.
- Establish standards and automation for securing service accounts, API keys, secrets management, and machine identities.
- Collaborate with Security Operations to mature ITDR capabilities and identity-risk monitoring, including behavioral analytics and anomalous access detection.
- Act as a technical lead and mentor for junior IAM engineers.
- Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related field.
- Minimum 5 years of hands‑on experience in Identity and Access Management
- Deep expertise in Zero Trust frameworks and modern IAM principles.
- Extensive experience with IAM technologies (IGA, PAM, SSO/MFA, federation, directory services).
- Strong proficiency in scripting languages such as PowerShell, Python, or Bash.
- Experience with regulatory and compliance standards (NYDFS, HIPAA, NIST, etc.).
- Strong understanding of cloud-native IAM services (AWS IAM, Azure AD/Entra ID, GCP IAM).
- Excellent communication skills, with the ability to articulate complex IAM concepts to stakeholders at all levels.
At Acrisure, we’re building more than a business, we’re building a community where people can grow, thrive, and make an impact. Our benefits are designed to support every dimension of your life, from your health and finances to your family and future.
Making a lasting impact on the communities it serves, Acrisure has pledged more than $22 million through its partnerships with Corewell Health Helen DeVos Children’s Hospital in Grand Rapids, Michigan, UPMC Children’s Hospital in Pittsburgh, Pennsylvania and Blythedale Children’s Hospital in Valhalla, New York.
We also offer our employees a comprehensive suite of benefits and perks, including:
- Physical Wellness: Comprehensive medical insurance, dental insurance, and vision insurance; life and disability insurance; fertility benefits; wellness resources; and paid sick time.
- Mental Wellness: Generous paid time off and holidays; Employee Assistance Program (EAP); and a complimentary Calm app subscription.
- Financial Wellness: Immediate vesting in a 401(k) plan; Health Savings Account (HSA) and Flexible Spending Account (FSA) options; commuter benefits; and employee discount programs.
- Family Care: Paid maternity leave and paid paternity leave (including for adoptive parents); legal plan options; and pet insurance coverage.
- and so much more!
This list is not exhaustive of all available benefits. Eligibility and waiting periods may apply to certain offerings. Benefits may vary based on subsidiary entity and geographic location.
We consider qualified applicants without regard to race, color, religion, sex, national origin, disability, or protected veteran status. Applicants may request reasonable accommodation by contacting leaves@acrisure.com.
Final candidates will be required to complete post‑offer verification processes related to the role and in accordance with applicable laws.
Learn more about our privacy practices for applicants by visiting the Acrisure California Applicant Privacy Policy.
'/%3e%3cpath%20d='M101.744%2012.4726L102.894%2016.1947L99.0021%2013.2201L101.744%2012.4726ZM105.3%208.40937H100.488L99.0026%203.59473L97.5116%208.41047L92.7%208.40385L96.5965%2011.3834L95.1055%2016.1942L99.0021%2013.2196L101.408%2011.3834L105.3%208.40992V8.40937Z'%20fill='white'/%3e%3cdefs%3e%3clinearGradient%20id='paint0_linear_5593_1381'%20x1='90'%20y1='9.44471'%20x2='99'%20y2='9.44471'%20gradientUnits='userSpaceOnUse'%3e%3cstop%20stop-color='%2300AD70'/%3e%3cstop%20offset='0.998594'%20stop-color='%2300B67A'/%3e%3cstop%20offset='1'%20stop-color='%23DCDCE6'/%3e%3c/linearGradient%3e%3c/defs%3e%3c/svg%3e){kind=small}
