IAM (Identity & Access Management) Engineer (Okta / SailPoint)

Role overview

Identity platform delivery

• Configure IAM modules for onboarding, automated lifecycle states, and access-certification governance campaigns.
• Design and maintain SSO federation, SAML and OIDC profiles, and OAuth authorization parameters.
• Build automated provisioning workflows, transformations, and API connectors for directory and HR-system feeds.
• Implement adaptive MFA policies with context-aware profiles, geofencing, and sign-on thresholds.

Security and platform operations

• Govern access with RBAC, ABAC, and least-privilege controls.
• Work with infrastructure teams to secure connections to directories, databases, and SaaS applications.
• Lead regression validation and patch cycles; audit sandbox configurations to prevent authentication processing failures.

Required experience and technical knowledge

• 4 to 8 years of enterprise IT security experience, including 3+ years implementing and configuring Okta or SailPoint.
• Strong knowledge of SAML, OIDC, OAuth, LDAP, Active Directory, and SCIM.
• Understanding of zero-trust principles, cloud application architectures, security boundaries, and lifecycle tracking metrics.

Certification and preferred qualifications

• Mandatory certification is stated as Okta Certified Professional/Consultant or SailPoint Certified IdentityNow/IdentityIQ Engineer.
• JavaScript, Python, or PowerShell scripting proficiency is preferred.
• Familiarity with PAM architectures such as CyberArk or BeyondTrust is preferred.

Employment details

• Job details list the employment type as Contract.
• The job information header separately lists Job Type as Full time.