Sr. IAM Engineer

Gravity IT Resources; Cincinnati (OH); On-site; USD 120,000 - 180,000; Full time

Job summary

Gravity IT Resources is seeking a senior Identity & Access Management Engineer to mature the enterprise identity security program. You will lead SailPoint administration, support AD/Entra ID, and design automation for access governance, provisioning, and SSO/MFA implementations.

The role requires 5+ years IAM experience, 3+ years with SailPoint IdentityNow/IdentityIQ, and strong collaboration with security, HR, and application teams. Onsite in Cincinnati, contract-to-hire.

Qualifications

• 5+ years of Identity & Access Management experience.
• 3+ years supporting SailPoint IdentityNow/ISC or IdentityIQ.
• Experience managing Active Directory and Entra ID environments.
• Experience in provisioning/deprovisioning, RBAC, attestations, SSO, MFA, PAM.
• Experience onboarding applications into IAM platforms.

Responsibilities

• Serve as SailPoint SME and platform administrator.
• Onboard enterprise applications into SailPoint.
• Design and maintain IAM workflows and automation.
• Support joiner/mover/leaver processes and access certification campaigns.
• Assist with SOX, audit, and compliance activities.

Skills

IAM expertise

SailPoint administration

Active Directory

Microsoft Entra ID / Azure AD

PowerShell scripting

REST APIs

RBAC design

SAML / OAuth / OpenID Connect

Tools

SailPoint IdentityNow / IdentityIQ

Microsoft Active Directory

Microsoft Entra ID (Azure AD)

PowerShell scripting

REST APIs

LDAP

SAML / OAuth / OpenID Connect

SCIM

Job description

Job Title: Identity & Access Management Engineer
Job Type: Contract to Hire

Location Requirement: Must work onsite in Cincinnati
This is not a remote role.
Ability to work closely with Security, Infrastructure, HR Systems, and Application Engineering teams.

Position Overview

Seeking a senior-level Identity & Access Management (IAM) Engineer to support and mature the enterprise identity security program. This engineer will serve as a key technical resource responsible for identity governance, access lifecycle automation, SailPoint administration, Active Directory integration, and enterprise access controls.

Required Experience

• 5+ years of Identity & Access Management experience.
• 3+ years supporting a major IAM/IGA platform (preferably SailPoint IdentityNow/ISC or IdentityIQ).
• Experience managing enterprise Active Directory and Microsoft Entra ID environments.
• Experience implementing and supporting:
  • Automated provisioning/deprovisioning
  • Role-based access control (RBAC)
  • Access certifications / attestation campaigns
  • Single Sign-On (SSO)
  • Multi-Factor Authentication (MFA)
  • Privileged Access Management (PAM)
• Experience onboarding applications into IAM platforms.
• Strong troubleshooting and operational support experience.

Preferred Technical Skills

• SailPoint IdentityNow / Identity Security Cloud (strong preference)
• Microsoft Active Directory
• Microsoft Entra ID (Azure AD)
• PowerShell scripting
• REST APIs and system integrations
• LDAP, SAML, OAuth, OpenID Connect, SCIM
• Microsoft 365 identity services
• Workday-to-IAM integrations
• Security group and entitlement management

Key Responsibilities

• Serve as a SailPoint SME and platform administrator.
• Onboard enterprise applications into SailPoint.
• Design and maintain IAM workflows and automation.
• Support joiner/mover/leaver processes.
• Manage access certification campaigns.
• Validate and improve RBAC models.
• Partner with HR and application owners to automate provisioning.
• Support SOX, audit, and compliance activities.
• Assist with PAM, MFA, and SSO initiatives.
• Maintain documentation and operational procedures.
• Act as a backup SME for critical identity infrastructure and services.

Soft Skills

• Strong communication and stakeholder management abilities.
• Can operate independently with minimal oversight.
• Comfortable engaging with security leadership, auditors, HR, and application owners.
• Process improvement mindset.

Equal Employment Opportunity Statement
Gravity IT Resources is an Equal Opportunity Employer. We are committed to creating an inclusive environment for all employees and applicants. We do not discriminate on the basis of race, color, religion, sex (including pregnancy, sexual orientation, or gender identity), national origin, age, disability, genetic information, veteran status, or any other legally protected characteristic. All employment decisions are based on qualifications, merit, and business needs.