IAM Engineer: Identity Governance
Jack Henry & Associates8 days ago
Remote, United StatesSenior
Responsibilities
- Plan, design, develop, redesign, configure, integrate, and implement IAM products including SailPoint, Saviynt, and Okta.
- Implement RBAC, ABAC, and PBAC role management, lifecycle management, separation of duties, and access certifications.
- Manage identity lifecycles and access certification accounts using Microsoft Active Directory.
- Integrate cloud and on-premises directories with AWS, GCP, Azure, and other cloud platforms.
- Implement identity creation, deletion, vaulting, and password-management processes.
- Build automation using PowerShell, RPA, SQL, Power Automate, integrations, and other automation tools.
- Create and update metrics, automate data collection and aggregation, support IAM applications, troubleshoot technical issues, and train users.
- Gather client requirements, provide technical guidance, and influence stakeholders on future IAM enhancements.
Requirements
- At least 6 years of experience in Identity and Access Management.
- At least 4 years of experience engineering or architecting with SailPoint.
- Experience with SailPoint Identity Security Cloud.
- Advanced knowledge of SailPoint, Saviynt, and Okta IAM platforms.
- Experience creating and updating scripts and code, and working with REST APIs, JSON, and cloud infrastructure.
- Preferred bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related field.
- Expertise in RBAC, ABAC, PBAC, access certifications, separation of duties, Microsoft Active Directory, cloud platforms, directory integrations, and privileged access management.
- Proficiency with PowerShell, RPA, SQL, Power Automate, and tools such as Delinea Secret Server.
- Strong technical leadership, analytical, problem-solving, communication, and metrics/reporting skills.
Benefits
- Remote work is available within the United States except California.
- East Coast applicants must be willing to work Central or Mountain time zone hours.
- The role may require an onsite interview or in-person onboarding to verify identity.
- Jack Henry offers benefit programs supporting employees’ physical, mental, and financial well-being.
- The position is ineligible for immigration sponsorship or support, including H-1B and PERM sponsorship.