Zero-Trust IAM Engineer: Identity & Access Governance

Johnson Financial Group; Racine (WI); On-site; USD 110,000 - 150,000; Full time

Job summary

Johnson Financial Group is seeking an Information Security IAM Engineer to design, implement, and support enterprise identity and access capabilities across cloud and on-prem environments. You will manage identity lifecycle, IGA, and PAM while ensuring least-privilege access and auditable compliance.

Collaborate with IT, architecture, HR, and business stakeholders to deliver scalable identity solutions and runbooks, driving automation and security for EIAM and CIAM initiatives.

Qualifications

• Bachelor’s degree in information security, cybersecurity, computer science, information systems, or related field.
• 5–8 years of experience.
• Cybersecurity certifications preferred (e.g., Microsoft AZ-500, Security+, SSCP, JFG InfoSec Platforms).
• Experience with Python and PowerShell scripting languages for automation preferred.

Responsibilities

• Design, implement, and maintain enterprise IAM solutions, including identity lifecycle, authentication, authorization, and federation.
• Engineer and operate IGA capabilities such as provisioning/deprovisioning, access certifications, and RBAC.
• Implement and support PAM controls including vaulting, session management, and least privilege enforcement.
• Support EIAM and CIAM solutions across cloud and hybrid environments.
• Operate and enhance user access reviews and certification processes for audit compliance.
• Maintain visibility and reporting on user access activity, entitlements, and privileged usage.
• Collaborate with IT Architects to design scalable IAM architectures aligned to zero trust principles.
• Integrate IAM with enterprise platforms (e.g., Microsoft Entra ID, SaaS apps, on-prem AD).
• Build automation for identity provisioning workflows, access enforcement, and reporting.
• Develop and maintain runbooks, workflows, and SOPs.
• Drive continuous improvement through process optimization and measurable efficiency gains.
• Partner with HR, IT, app owners, and business units to align access models to job functions.
• Act as technical SME for IAM and translate security requirements into business-aligned solutions.
• Deliver IAM operational metrics, dashboards, and KPIs.

Skills

IAM engineering

RBAC

Zero Trust

Stakeholder management

Communication

Education

Bachelor’s Degree in Information Security

Tools

Python

PowerShell

Microsoft Entra ID

Active Directory

Linux

Job description

Johnson Financial Group is seeking an Information Security IAM Engineer to design, implement, and support enterprise identity and access capabilities across cloud and on-prem environments. You will manage identity lifecycle, IGA, and PAM while ensuring least-privilege access and auditable compliance.

Collaborate with IT, architecture, HR, and business stakeholders to deliver scalable identity solutions and runbooks, driving automation and security for EIAM and CIAM initiatives.