Identity and Access Management Engineer I

Stellenbeschreibung:

Operate and maintain the Python-based JML application, Azure Functions, Logic Apps, telemetry, troubleshooting portal, and related provisioning components
Process and troubleshoot ADP-driven onboarding, job changes, transfers, terminations, BPO guest-account workflows, and other identity lifecycle events
Administer and improve Entra ID Lifecycle Workflows, Access Packages, groups, access assignments, service principals, managed identities, and related identity controls
Maintain custom API integrations and screen-automation sequences for systems without SCIM or supported provisioning APIs
Maintain Git repositories, pull-request controls, GitHub Actions pipelines, deployment configurations, secrets, environment settings, and release documentation
Diagnose provisioning failures, trace events and telemetry, resolve user-impacting issues, and document durable fixes
Create IAM/JML execution tasks for Desktop Support Analysts, Systems Administrators, and other support staff; validate completion and provide technical guidance
Support IAM governance and access-control standards, including entitlement cleanup, access reviews, privileged-access review, and service-principal review
Provide identity-related audit evidence for GLBA, NIST CSF, SOC 1, PCI DSS, and applicable state lending requirements
Support security investigations involving accounts, access, identity risk, and IAM application or Azure-resource vulnerabilities
Review new integrations for identity and access-control requirements and recommend secure implementation approaches
Partner with Information Security, Desktop Support, HR, Systems Administration, Cloud Security, and application owners on lifecycle reliability and risk reduction
Contribute to incident response and vulnerability remediation involving the IAM platform, Entra ID, Azure Functions, Logic Apps, and connected systems

Requirements

Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related field, or equivalent experience
3+ years of experience in IAM, identity engineering, systems integration, security automation, cloud engineering, or application operations
Strong Python development and troubleshooting experience, including event-driven applications and API integrations
Hands-on experience with Entra ID, Active Directory, Lifecycle Workflows, Access Packages, groups, service principals, managed identities, and access controls
Experience with Azure Functions, Logic Apps, Azure Monitor or comparable telemetry, and cloud application configuration
Experience maintaining Git repositories, pull requests, CI/CD pipelines, secrets, deployment controls, and release processes
Experience integrating systems through REST APIs, webhooks, SCIM, or reliable screen automation when APIs are unavailable
Understanding of JML lifecycle controls, least privilege, access reviews, privileged access, identity governance, and audit evidence
Ability to break complex operational work into clear tasks for support teams and coordinate execution across technical groups
Security certification or Azure/Entra certification preferred
Strong troubleshooting, documentation, communication, and cross-functional collaboration skills
Must reside in one of the employer’s approved locations by start date

Core Competencies

Demonstrates expertise in Python development, IAM processes, and cloud engineering, with a strong focus on identity lifecycle management and security compliance. Proficient in troubleshooting and maintaining complex systems integrations and access controls.