IAM Security Engineer

Job Title: IAM Security Engineer

Position Summary

We are seeking an experienced IAM Security Engineer to support the architecture, design, and hands-on implementation of an enterprise identity modernization initiative. This role will help define and operationalize the target IAM model for a portfolio of approximately 28 applications transitioning to centralized authentication and access management.

The ideal candidate combines strong IAM architecture knowledge with practical implementation experience and can work across identity design, user and role alignment, security controls, claims strategy, and federation enablement.

Key Responsibilities

Support the design and implementation of the target-state IAM architecture for centralized authentication and access management.

Help define standards for user, group, role, and claims mapping across integrated applications.

Ensure identity integration patterns align with enterprise security, governance, and operational requirements.

Partner with Okta and application integration engineers to validate architecture and guide implementation decisions.

Assess application onboarding requirements and determine how users, roles, entitlements, and access models should map into the centralized identity approach.

Support user migration planning and identity data alignment as applications move into the new model.

Provide hands-on technical support for identity and access configurations where needed.

Review authentication and authorization designs to ensure consistency, scalability, and security.

Help establish repeatable patterns, controls, and guardrails for OIDC and SAML adoption.

Assist with MFA, access policy, and identity-related security control implementation.

Troubleshoot IAM-related issues affecting authentication, authorization, and access provisioning.

Contribute to architecture documentation, standards, and client-facing guidance.

Required Qualifications

7+ years of experience in IAM, security engineering, identity architecture, or access management.

Strong experience with enterprise IAM concepts including authentication, authorization, federation, user lifecycle, roles, groups, and claims.

Strong experience with OIDC, SAML, and centralized identity provider models.

Experience designing or implementing IAM controls in enterprise environments.

Strong understanding of identity security architecture and governance considerations.

Hands-on experience supporting identity integration across multiple applications.

Ability to translate business and security requirements into practical identity patterns.

Strong communication skills and ability to work across architecture, engineering, and client stakeholder groups.

Preferred Qualifications

• Experience with Okta in engineering, architecture, or implementation roles.

• Experience with identity governance / administration concepts and tools such as SailPoint.

• Experience with user migration, entitlement mapping, and access model rationalization.

• Familiarity with MFA, conditional access, and identity-related security controls.

• Experience in highly regulated or public sector environments.

• Experience working in rapid delivery or transformation programs with compressed timelines.