Senior IAM Operations Engineer

Job Summary

Key Responsibilities

1. Identity Lifecycle & Access Operations

• Lead and oversee

  user provisioning, deprovisioning, access modifications, and role assignments

  across all systems.
• Ensure accurate enforcement of

  RBAC

  , birthright access, and defined access policies.
• Manage

  complex access requests

  , approval workflows, and escalations.
• Ensure JML processes run smoothly and within SLAs.

2. Monitoring, Troubleshooting & Platform Stability

• Own monitoring of IAM systems, connectors, jobs, and workflows identify failures, bottlenecks, and recurring issues.
• Perform

  root-cause analysis

  for provisioning failures, job errors, and integration issues.
• Coordinate with application, infra, and security teams to resolve high-impact access issues.

3. Access Governance & Compliance

• Lead

  access review/certification campaigns

  , including role cleanup, conflict remediation, and attestation follow-ups.
• Identify and eliminate

  orphaned, inactive, and non-compliant accounts

  .
• Prepare audit evidence, manage SOX controls, and support external/internal audits.
• Ensure alignment with regulatory standards and enterprise security frameworks.

4. System Administration & Enhancements

• Maintain and optimize IAM platform configurations: roles, access profiles, rules, policies, workflows, SOD policies.
• Drive automation for repeatable tasks using scripts, APIs, or workflow improvements.
• Support onboarding of new applications, connectors, and integrations.

5. Leadership & Stakeholder Management

• Serve as IAM SME for project teams, audits, escalations, and major incidents.
• Mentor junior team members provide guidance on troubleshooting, IAM concepts, and platform usage.
• Work closely with HR, Security, Application Owners, and Infra teams to streamline IAM processes.
• Proactively identify gaps in process, security, or tooling and drive improvement initiatives.

Required Skills & Qualifications

• 6+ years of hands-on experience in

  IAM operations

  , preferably with tools like

  Saviynt

• Strong knowledge of

  identity lifecycle

  ,

  RBAC

  ,

  SOX controls

  ,

  access certifications

  , and

  compliance frameworks

  .
• Ability to write and understand

  SQL queries

  , analyze logs, and identify provisioning patterns.
• Understanding of

  directory services

  , SSO, MFA, authentication/authorization protocols (SAML, OAuth, SCIM).
• Strong incident management, documentation, and communication skills.

Preferred Skills

• Experience with workflow optimization, automation (PowerShell, Python, API), and connector management.
• Involvement in IAM transformation projects or large-scale migrations.
• Certifications such as

  Security+

  ,

  CIAM

  ,

  Azure/AWS Security

  , or vendor-specific IAM certifications.