IAM Service Integration Engineer

Accountabilities:: Collaborate with stakeholders and application owners to gather IAM requirements, understand business needs, and assess application readiness for identity service integration. Analyze systems and existing processes to identify opportunities for IAM integration and determine gaps between application requirements and available identity capabilities. Support the technical onboarding of users and enterprise applications to IAM services, including authentication flows, access models, provisioning, and deprovisioning. Assist with the configuration and technical validation of IAM solutions, including SailPoint IIQ, CyberArk, SSO, and MFA. Analyze and validate authentication methods and protocols such as SAML 2.0, OAuth, OpenID Connect, and LDAP. Participate in application owner design interviews, onboarding assessments, and readiness discussions to ensure integrations meet technical and security requirements. Validate Joiner/Mover/Leaver processes, user provisioning and deprovisioning workflows, RBAC structures, entitlement mappings, and access designs. Troubleshoot IAM integration issues by analyzing system logs, tokens, SAML assertions, and other technical information to identify and resolve root causes. Develop and maintain clear IAM documentation covering integration requirements, configurations, workflows, and onboarding processes. Provide ongoing support for IAM-related issues and remain current with evolving identity and access management technologies, practices, and industry trends. Requirements Bachelor's degree or equivalent professional experience. 2–5 years of experience in IAM, security engineering, identity operations, or a closely related field. Hands-on experience with SailPoint IIQ and CyberArk. Solid understanding of authentication and identity protocols, including SAML 2.0, OAuth, OpenID Connect, and LDAP. Ability to interpret SAML assertions and JWT tokens and use this knowledge to troubleshoot authentication and integration issues. Understanding of Joiner/Mover/Leaver identity lifecycle processes, including provisioning and deprovisioning workflows. Experience gathering, analyzing, documenting, and translating technical and business requirements into IAM integration solutions. Ability to engage application owners and stakeholders in onboarding readiness assessments and technical design discussions. Strong communication, collaboration, stakeholder engagement, and customer-service skills. Ability to work effectively in complex enterprise environments and navigate ambiguous or evolving technical requirements. Self-starter mentality, strong learning agility, and willingness to stay current with IAM and security industry developments. Scripting experience is a plus but is not required. Benefits Salary: $100,000–$130,000. Work Arrangement: Fully remote position, with the role designed to be performed from a non-company worksite, most commonly the employee's residence. Healthcare: Medical, dental, and vision insurance. Retirement: 401(k) plan. Paid Leave: Paid leave benefits. Education: Tuition reimbursement. Additional Perks: Access to a variety of discounts and other employee perks. Technical Scope: Opportunity to work across SSO, MFA, IGA, PAM, PKI, identity lifecycle management, authentication protocols, and enterprise application integrations. Professional Development: Exposure to complex IAM environments and evolving identity and security technologies. Collaborative Environment: Cross-functional work with application owners, stakeholders, and technical teams on enterprise identity initiatives.