Must be legally eligible to work in the United States without sponsorship, now or in the future, to be considered.

What You’ll Do:

We are seeking a hands-on Identity and Access Management (IAM) Engineer to support the implementation and operation of the bank’s identity and access management program. This role focuses on platform administration, application integration, and support of IAM functions across critical cloud and on-prem environments.

Responsibilities include creating and managing access for users and non-human accounts, building and maintaining roles and entitlements for various business units, and supporting secure authentication and authorization across enterprise systems. In addition, this role requires proactive governance of identities and access, including identifying stale access, orphaned accounts, excessive permissions, and other identity-related risks while driving improvements through automation and process optimization.

• System Management: Conduct configuration, integration, maintenance, performance management, troubleshooting, and operational support of IAM platforms and services.
• IAM Technology Deployment: Support IAM technology deployment projects involving platforms such as Veza, Microsoft Entra ID, Active Directory, and CyberArk.
• Cloud Identity Security: Support cloud identity security capabilities including conditional access, identity protection, MFA, and Zero Trust-aligned controls.
• Programming/Scripting: Perform system-level scripting and automation using technologies such as PowerShell and Python to support IAM processes and integrations.
• Application Integration: Build and maintain integrations using SAML, OAuth/OIDC, SCIM, and REST APIs to support secure authentication and authorization.
• Access Governance: Assist in identifying stale access, orphaned accounts, excessive permissions, and other identity governance risks across environments.
• Provisioning & Fulfillment Support: Participate in provisioning, deprovisioning, onboarding, offboarding, and access modification activities while supporting automation and process improvements.
• Automation & Workflow Improvement: Identify opportunities to streamline manual IAM processes through automation, scripting, and workflow enhancements.
• Security Standards: Support enforcement of IAM security standards and best practices including RBAC, ABAC, MFA, least privilege, and secure authentication patterns.
• Metrics & Reporting: Assist with tracking and reporting IAM operational metrics such as provisioning timelines, access review completion, and access governance findings.
• Collaboration: Partner with IAM Analysts, application owners, infrastructure teams, and security teams to deliver secure and scalable IAM solutions.
• Documentation: Document IAM integrations, workflows, platform configurations, standards, and operational procedures.
• Compliance Support: Support audit activities, evidence collection, and remediation efforts related to IAM controls and regulatory requirements.
• Communication: Maintain strong communication and collaboration across technical and business teams.

What Do You Need?

• 2–4 years of experience in IAM engineering or related roles.
• Experience with IAM platforms such as Microsoft Entra ID, Active Directory, CyberArk, and Veza (or similar IGA tools).
• Experience supporting IAM provisioning, identity lifecycle management, and access governance processes.
• Experience integrating applications using SAML, OAuth/OIDC, SCIM, and REST APIs.
• Experience supporting cloud identity security capabilities including conditional access and securing SaaS applications.
• Strong understanding of IAM fundamentals including RBAC, ABAC, MFA, least privilege, and identity lifecycle management.
• Proficiency in scripting using PowerShell, Python, or similar technologies.
• Familiarity with structured change management and DevOps processes.
• Strong troubleshooting, analytical, and problem-solving skills.
• Strong communication and documentation skills.

Technology Skills:

• Experience configuring and administering Veza or other similar IGA tools for identity governance and access visibility.
• Experience with Microsoft Entra ID capabilities including SSO, MFA, conditional access, and identity protection.
• Experience with CyberArk for privileged access management, credential vaulting, and privileged session management.
• Understanding of integrating IAM processes with ServiceNow or similar ITSM platforms for provisioning and access request workflows.
• Familiarity with cloud and SaaS identity security concepts and controls.
• Ability to work within the Microsoft ecosystem and quickly learn additional enterprise applications and IAM technologies.
• Familiarity with AI and automation tools that support productivity, workflow efficiency, and client engagement.