More jobs:
IAM Engineer
Job in
Cary, Wake County, North Carolina, 27518, USA
Listed on 2026-03-03
Listing for:
TATA Consulting Services
Full Time
position Listed on 2026-03-03
Job specializations:
-
IT/Tech
Cybersecurity, Systems Engineer, Data Security, IT Support
Job Description & How to Apply Below
* Strong understanding of IAM concepts: RBAC, ABAC, PBAC, SoD, governance workflows.
* Hands on experience with at least one major platform:
* IGA:
SailPoint / Saviynt / OIG
* SSO/AM:
Okta / Azure AD / Ping / Forge Rock
* PAM:
Cyber Ark / Delinea / Beyond Trust
* Proficiency in scripting:
Power Shell (mandatory), Python preferred.
* Deep understanding of SAML, OAuth 2.0, OIDC, SCIM, JWT.
* Experience with Active Directory, Entra , and directory synchronization tools.
* Familiarity with cloud IAM across AWS / Azure / GCP.
Roles & Responsibilities
1. Identity Governance & Administration (IGA)
* Implement and maintain IGA platforms (e.g., SailPoint, Saviynt, Oracle Identity).
* Manage user lifecycle processes (Joiner-Mover-Leaver).
* Execute role engineering, access certifications, entitlement governance, and SoD controls.
* Develop identity workflows, provisioning connectors, and automated approval processes.
2. Access Management / SSO / Federation
* Configure and support SSO integrations using SAML, OAuth 2.0, and OIDC.
* Implement MFA, conditional access, adaptive authentication, and passwordless solutions.
* Manage and troubleshoot identity federation with cloud and on prem applications.
* Support both workforce and B2B/B2C identity requirements.
3. Privileged Access Management (PAM)
* Administer PAM tools (Cyber Ark, Beyond Trust, Delinea, Hashi Corp Vault).
* Onboard privileged accounts, manage vaulting, session control, and credential rotation.
* Implement least privilege models and privileged identity workflows.
4. Directory Services & Identity Infrastructure
* Manage Active Directory / Entra , GPO policies, domain trust, and conditional access.
* Support LDAP, Kerberos, RADIUS, and identity protocols for infrastructure authentication.
* Troubleshoot identity replication, authentication failures, and directory issues.
5. Cloud IAM
* Implement IAM controls for AWS, Azure, and/or GCP (RBAC, service accounts, policies).
* Manage enterprise cloud identity integrations, workload identities, and cloud SSO.
* Support identity posture management and cloud access reviews.
6. Automation, Scripting & Dev Ops
* Develop automation using Power Shell, Python, Bash, REST APIs.
* Build integration scripts, provisioning connectors, and identity workflows.
* Use Terraform, CI/CD pipel ines, or automation frameworks for IAM deployments.
7. Security, Compliance & Governance
* Support audits (SOX, PCI DSS, ISO 27001, FFIEC, HIPAA if applicable).
* Implement identity controls aligned with Zero Trust Architecture.
* Perform risk assessments, access reviews, and provide remediation support.
* Document IAM processes, standards, runbooks, and architectural diagrams.
Salary Range: $100,000 to $120,000 per year
To View & Apply for jobs on this site that accept applications from your location or country, tap the button below to make a Search.
(If this job is in fact in your jurisdiction, then you may be using a Proxy or VPN to access this site, and to progress further, you should change your connectivity to another mobile device or PC).
(If this job is in fact in your jurisdiction, then you may be using a Proxy or VPN to access this site, and to progress further, you should change your connectivity to another mobile device or PC).
Search for further Jobs Here:
×