IAM Engineer

Location: Raleigh, NC / Charlotte, NC / Dallas, TX / Minneapolis, MN / Chandler, AZ - Hybrid Role (3 Days Onsite / 2 Days WFH)

Duration: 12‑24 Months

Job Title: IAM Engineer

Job Overview: Need strong profiles with IAM core concepts, SAML OAuth, and SSO products. Candidates are expected to excel in configuring, troubleshooting, and integrating these solutions.

• Explain and implement identity federation protocols (SAML, OAuth, OIDC).
• Work with SSO products beyond simple configuration—handling integrations, flows, and security requirements.
• Apply IAM core concepts to real‑world automation and network identity scenarios.

They still need a person to attend an in‑person interview; if the candidate is successful, the process will conclude.

Ask scenario‑based questions: "Explain how OAuth differs from SAML and when you'd use each." "Walk me through the SAML authentication flow between an IdP and SP."

• Look for hands‑on integration experience with SSO products, not just platform administration.
• Probe for security awareness: token expiration, replay attacks, certificate management.

• IAM Core Concepts
• Principles of authentication vs. authorization
• Role‑based access control (RBAC), attribute‑based access control (ABAC)
• Identity lifecycle management (provisioning, de‑provisioning, governance)
• Federation and trust models
• SAML, OAuth, and OpenID Connect
• SAML 2.0:
  Assertions, bindings, metadata, IdP vs. SP roles
• OAuth 2.0:
  Grant types (Authorization Code, Client Credentials, Implicit, Device Flow), scopes, tokens (access, refresh, )
• OpenID Connect (OIDC):
  Identity layer on top of OAuth,  structure, claims
• JWT:
  Structure, validation, signature verification
• SSO Products & Ecosystem
• Hands‑on with enterprise SSO platforms (Okta, Ping Identity, Azure AD, Forge Rock, etc.)
• Experience integrating apps with SSO (SAML/OAuth flows)
• Understanding of MFA, adaptive authentication, and conditional access policies

• Strong configuration and troubleshooting skills in IAM environments.
• Deep understanding of IAM core concepts, SAML, OAuth, and SSO products.
• Demonstrated ability to apply security best practices in token handling and federation.