Sr. IAM Engineer

Insight Global (United States); Milwaukee (WI); On-site; USD 110,000 - 170,000; Full time

Job summary

Insight Global is seeking a Senior IAM Engineer to support a major Privileged Identity Management initiative for a leading utility provider in the Midwest. You will help design, implement, and mature privileged-access capabilities across the enterprise with a focus on CyberArk and Just‑in‑Time privileged access.

This hands‑on role reduces standing privileged access, enforces least‑privilege, and creates a secure, scalable approach to managing elevated permissions within a regulated enterprise

Qualifications

• 5+ years in IAM, PAM, or Identity Security.
• Hands‑on CyberArk engineering experience.
• Experience implementing Privileged Access Management (PAM/PIM) and Just‑in‑Time access.

Responsibilities

• Serve as a senior technical resource for the client’s enterprise PIM/PAM initiative.
• Design, configure, and enhance privileged‑access solutions within CyberArk.
• Implement and mature Just‑in‑Time privileged‑access workflows.
• Reduce standing administrative privileges and enforce least‑privilege principles.
• Configure privileged accounts, roles, policies, approval workflows, and access controls.
• Integrate CyberArk with IAM, infrastructure, cloud, and enterprise applications.
• Troubleshoot complex identity and privileged‑access issues.
• Support testing, deployment, documentation, and access reviews.
• Identify opportunities to automate IAM and privileged‑access processes.
• Provide technical guidance and mentorship to junior IAM resources.

Skills

CyberArk

Just‑in‑Time

PAM/PIM

RBAC

Azure AD

Entra ID

PowerShell

Automation

Identity Security

Access Controls

Scripting

MFA

Tools

PVWA

CPM

PSM

Job description

Job Description

Job DescriptionInsight Global is seeking a Senior IAM Engineer to support a major Privileged Identity Management (PIM) initiative for a leading utility provider in the Midwest. This individual will help design, implement, and mature privileged-access capabilities across the enterprise, with a strong focus on CyberArk and Just-in-Time (JIT) privileged access.This is a hands‑on senior engineering role for someone who can help a leading utility provider in the Midwest reduce standing privileged access, implement least‑privilege principles, and create a more secure and scalable approach to managing elevated permissions.

Day-to-Day

• Serve as a senior technical resource for the client's enterprise PIM/PAM initiative
• Design, configure, and enhance privileged‑access solutions within CyberArk
• Implement and mature Just‑in‑Time privileged‑access workflows
• Reduce standing administrative privileges and enforce least‑privilege principles
• Configure privileged accounts, roles, policies, approval workflows, and access controls
• Integrate CyberArk with IAM, infrastructure, cloud, and enterprise applications
• Troubleshoot complex identity and privileged‑access issues
• Support testing, deployment, documentation, and access reviews
• Identify opportunities to automate IAM and privileged‑access processes
• Provide technical guidance and mentorship to junior IAM resources

Skills and Requirements

• 5+ years of experience within Identity & Access Management (IAM), PAM, or Identity Security
• Strong hands‑on CyberArk engineering experience
• Experience implementing, configuring, or supporting Privileged Access Management (PAM) / Privileged Identity Management (PIM)
• Hands‑on experience with Just‑in‑Time (JIT) privileged access
• Strong understanding of least privilege, RBAC, privileged accounts, access controls, and identity security
• Experience working with Microsoft Entra ID / Azure AD
• Ability to troubleshoot complex IAM and privileged‑access issues within an enterprise environment
• Experience partnering with security, infrastructure, application, and identity teams
• Experience integrating CyberArk with Microsoft Entra ID and other enterprise systems
• Experience with CyberArk capabilities such as Privileged Vault, Password Vault Web Access (PVWA), Central Policy Manager (CPM), and Privileged Session Manager (PSM)
• PowerShell or other scripting/automation experience
• Experience with Conditional Access, MFA, access reviews, or identity governance
• Previous experience supporting IAM/PAM transformation or modernization projects
• Experience within a regulated or critical‑infrastructure environment

We are a company committed to creating diverse and inclusive environments where people can bring their full, authentic selves to work every day. We are an equal employment opportunity/affirmative action employer that believes everyone matters. Qualified candidates will receive consideration for employment without regard to race, color, ethnicity, religion, sex (including pregnancy), sexual orientation, gender identity and expression, marital status, national origin, ancestry, genetic factors, age, disability, protected veteran status, military or uniformed service member status, or any other status or characteristic protected by applicable laws, regulations, and ordinances. If you need assistance and/or a reasonable accommodation due to a disability during the application or the recruiting process, please send a request to [e-mail].