IAM Service Integration Engineer

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a IAM Service Integration Engineer based in United States. This role combines IAM service integration with hands-on identity engineering across a broad enterprise technology environment. You will support the delivery, design, configuration, and onboarding of identity solutions including SSO, MFA, IGA, PAM, and PKI. The position involves working closely with application owners and stakeholders to translate business and technical requirements into secure identity integrations. You will contribute to authentication, provisioning, access management, and entitlement design while helping validate end-to-end identity workflows. The role also provides opportunities to troubleshoot complex integration challenges using logs, tokens, assertions, and other technical evidence. Success requires a collaborative, customer-focused mindset and the ability to operate effectively in complex environments. This is a fully remote opportunity with a strong focus on enterprise identity and security.

Collaborate with stakeholders and application owners to gather IAM requirements, understand business needs, and assess application readiness for identity service integration. Analyze systems and existing processes to identify opportunities for IAM integration and determine gaps between application requirements and available identity capabilities. Support the technical onboarding of users and enterprise applications to IAM services, including authentication flows, access models, provisioning, and deprovisioning. Assist with the configuration and technical validation of IAM solutions, including SailPoint IIQ, CyberArk, SSO, and MFA. Analyze and validate authentication methods and protocols such as SAML 2.0, OAuth, OpenID Connect, and LDAP. Participate in application owner design interviews, onboarding assessments, and readiness discussions to ensure integrations meet technical and security requirements. Validate Joiner/Mover/Leaver processes, user provisioning and deprovisioning workflows, RBAC structures, entitlement mappings, and access designs. Troubleshoot IAM integration issues by analyzing system logs, tokens, SAML assertions, and other technical information to identify and resolve root causes. Develop and maintain clear IAM documentation covering integration requirements, configurations, workflows, and onboarding processes. Provide ongoing support for IAM-related issues and remain current with evolving identity and access management technologies, practices, and industry trends. Requirements Bachelor's degree or equivalent professional experience. 2–5 years of experience in IAM, security engineering, identity operations, or a closely related field. Hands-on experience with SailPoint IIQ and CyberArk. Solid understanding of authentication and identity protocols, including SAML 2.0, OAuth, OpenID Connect, and LDAP. Ability to interpret SAML assertions and JWT tokens and use this knowledge to troubleshoot authentication and integration issues. Understanding of Joiner/Mover/Leaver identity lifecycle processes, including provisioning and deprovisioning workflows. Experience gathering, analyzing, documenting, and translating technical and business requirements into IAM integration solutions. Ability to engage application owners and stakeholders in onboarding readiness assessments and technical design discussions. Strong communication, collaboration, stakeholder engagement, and customer-service skills. Ability to work effectively in complex enterprise environments and navigate ambiguous or evolving technical requirements. Self-starter mentality, strong learning agility, and willingness to stay current with IAM and security industry developments. Scripting experience is a plus but is not required. Benefits Salary: $100,000–$130,000. Work Arrangement: Fully remote position, with the role designed to be performed from a non-company worksite, most commonly the employee's residence. Healthcare: Medical, dental, and vision insurance. Retirement: 401(k) plan. Paid Leave: Paid leave benefits. Education: Tuition reimbursement. Additional Perks: Access to a variety of discounts and other employee perks. Technical Scope: Opportunity to work across SSO, MFA, IGA, PAM, PKI, identity lifecycle management, authentication protocols, and enterprise application integrations. Professional Development: Exposure to complex IAM environments and evolving identity and security technologies. Collaborative Environment: Cross-functional work with application owners, stakeholders, and technical teams on enterprise identity initiatives.

laptop-ats-crawler v3