This position offers a base salary range of $78,807 - $131,346 per year, depending on experience and qualifications, plus bonus based on company performance.

We are seeking an IAM Engineer I to support the administration, integration, and ongoing enhancement of enterprise authentication and access management platforms, with a primary focus on Ping Identity⁠ technologies. This role is responsible for delivering secure and scalable SSO, MFA, federation, and access management solutions across cloud, on-premises, and hybrid environments. Responsibilities include supporting application integrations using SAML, OIDC, OAuth, SCIM and underlying directory environments, assisting with authentication policy configuration, troubleshooting access issues, and helping maintain the identity infrastructure. The ideal candidate will work closely with IT and Cyber teams as well as business stakeholders to deliver secure, scalable, and user-friendly identity solutions aligned to security standards, operational requirements, and compliance objectives. Candidates should possess foundational experience with IAM, federation, authentication protocols, directory services, and secure access concepts, along with strong analytical and troubleshooting skills in an enterprise environment. Experience with Microsoft Entra ID⁠ and F5 Distributed Cloud Services⁠ / F5 APM is considered a plus.

This role qualifies for a remote work arrangement within our 7 state footprint (PA, OH, MI, WV, VA, MD, NC).

OVERVIEW

Responsible for the independent administration, operation, and support of Identity and Access Management systems, integrations, and processes. Actively contributes to implementation, configuration, optimization, and troubleshooting IAM tools and integrations ensuring that solutions are scalable, secure, and aligned with organizational policies. Collaborate with IAM teams and cross-functional stakeholders to deliver technical solutions that meet business and security requirements. Serve as a technical resource in IAM-related concentrations and acts as an escalation point for junior team members on complex initiatives.

RESPONSIBILITIES (other duties may be assigned)

1. Design, build, implement, administer, and maintain IAM systems, roles, workflows, and integrations performing system monitoring, health checks, configuration updates, and minor upgrades to ensure secure and reliable operations.
2. Serve as a primary technical resource during IAM system incidents or degradation events, performing troubleshooting, resolving IAM system issues, performing root cause analysis and assisting junior team members to develop skills and capabilities as needed.
3. Support large-scale system upgrades and migration projects under guidance.
4. Collaborate with team members and stakeholders to address moderately complex IAM-related questions and issues in relation to organizational, department, team, or technology projects.
5. Develop and implement continuous improvements by optimizing workflows and reducing manual effort through automation while coordinating with IAM teams, IT, and other business units to improve efficiency, accuracy, and scalability of identity lifecycle processes.
6. Develop, document, and refine IAM technical records such as standard operating procedures (SOPs), workflows, diagrams, end-user training materials, and job aids for identity and access tasks ensuring alignment with security, compliance, and governance standards
7. Participate in IAM Implementation / Deployment / Documentation projects, providing technical input and executing assigned deliverables as required.
8. Monitor identity systems and processes, identifying trends, reporting potential issues to the appropriate teams.
9. Participate in on-call rotation, provide evening and weekend support as needed. Sheetz is open 24/7/365 and as such, our internal and external customers may require support at any time.

QUALIFICATIONS

(Equivalent combinations of education, licenses, certifications and/or experience may be considered. Two years of experience is equivalent to one year of college/trade school)

Education
• Bachelor's degree in Computer Science, Management Information Systems, Computer Engineering, or related field is required

Experience
• Minimum 3 years' experience in Identity and Access Management or related field, with demonstrated expertise in IAM platforms and technologies, core IAM principals (least privilege, PAM, lifecycle management), directory services, authentication and authorization, RBAC, compliance initiatives, and IAM architecture, ports, and protocols required.
• May utilize SailPoint, BeyondTrust, Saviynt, Delinea, ForgeRock, Ping Identity, Okta, CyberArk, Duo, Entra, Active Directory, etc.
• Previous experience with Windows, Linux, and appliance network and server administration required.
• Previous experience with service management and reporting tools (ServiceNow, Jira, ManageEngine, etc.) required.
• Previous experience in implementing compliance frameworks (NIST, ISO, CIS, PCI-DSS, etc.) required.
• Previous experience in scripting, query languages, and APIs for integration and automation of enterprise applications required.

Licenses/Certifications
• IAM, cybersecurity, or similar certification is preferred.

Tools & Equipment
• General Office Equipment