Senior IAM Engineer: Identity Governance
Jack Henry & Associates3 months ago
Remote, United States +2 moreSenior
Responsibilities
- Plan, design, develop, redesign, configure, integrate, and implement IAM products including SailPoint, Saviynt, and Okta.
- Implement authorization methods and identity governance capabilities such as RBAC, ABAC, PBAC, role management, lifecycle management, separation of duties, and access certifications.
- Manage identity lifecycles and access certification accounts using Microsoft Active Directory.
- Integrate directories, IAM products, and cloud platforms in cloud and on-premises environments.
- Implement identity creation, deletion, vaulting, and password management processes.
- Create and update metrics and automate data collection and aggregation.
- Build automation using PowerShell scripts, RPA, SQL, Power Automate, and other automation tools.
- Troubleshoot IAM applications and technical issues, support security initiatives, review technical materials, and coach or train peers and users.
- Meet with clients to gather needs, business goals, and desired outcomes and translate them into technology solutions.
Requirements
- At least 6 years of experience with Identity and Access Management.
- At least 4 years of experience engineering or architecting with SailPoint.
- Experience with SailPoint Identity Security Cloud.
- Advanced knowledge of SailPoint, Saviynt, and Okta IAM platforms.
- Experience creating and updating scripts and code.
- Experience with APIs, REST, JSON, and cloud infrastructure.
- Preferred bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related area.
- Preferred expert knowledge of RBAC, ABAC, and PBAC access management frameworks.
- Preferred deep understanding of Microsoft Active Directory, AWS, GCP, and Azure.
- Preferred experience with access certification, separation of duties, cloud and on-premises directory integrations, automation tools, metrics, and reports.
- Preferred experience with privileged access management tools such as Delinea Secret Server.
- Strong leadership, analytical, problem-solving, communication, and technical project implementation abilities.
Benefits
- Remote work is available within the United States except California.
- East Coast applicants must be willing to work Central or Mountain time zone hours.
- The role may require an onsite interview or in-person onboarding to verify identity.
- Jack Henry offers benefit programs supporting associates’ physical, mental, and financial well-being.