Confiz is seeking an
Identity Operations Engineer for one of our largest retail clients in Seattle, WA.This is a hands-on operations role, not an architecture role. You'll spend most of your time working the identity ticket queue and troubleshooting provisioning and sync failures, and the rest automating the tickets and manual steps that shouldn't exist. You'll partner with Identity Architecture, HR, ITSM, application owners, and Security Operations.
Work Type: Hybrid: Onsite 4 days Per Week, Remote Fridays
Work Schedule: 8:00 AM - 5:00 PM PT
Responsibilities - Fulfill JML requests from the ITSM queue within SLA: account creation, role-based access, access changes for transfers, and complete deprovisioning for terminations and leaves.
- Operate SailPoint ISC: process access requests, remediate provisioning failures, monitor aggregations and identity refreshes, and fix identity attribute issues.
- Administer Entra ID: users, groups, licenses, app role assignments, guest accounts, Lifecycle Workflows, and Entitlement Management requests.
- Troubleshoot HR-to-identity provisioning and hybrid sync issues between Entra ID and on-premises Active Directory (Entra Connect / Cloud Sync).
- Handle PIM and privileged access requests with proper approvals and audit trail.
- Run access review campaigns, clean up orphaned and dormant accounts, and produce audit evidence (e.g., SOX, PCI).
- Build automation with PowerShell, Microsoft Graph, Python, and SailPoint ISC APIs and workflows.
- Create event-driven workflows (Azure Automation, Logic Apps, Power Automate) with ITSM integration for auto-fulfillment and closure.
- Analyze ticket trends to prioritize automation and track time saved.
- Treat automation as production code: source control, peer review, testing, and logging.
- Write runbooks and knowledge articles, and serve as an escalation point for the service desk.
- Participate in incident response and escalation coverage, including after-hours support as needed.
Requirements - Bachelor's degree in Computer Science, Cybersecurity, IT, or equivalent experience.
- 5+ years in IAM operations or systems/security engineering, including hands-on JML process work.
- Hands-on Microsoft Entra ID administration, with working knowledge of Conditional Access, PIM, and Entra ID Governance.
- Hands-on experience operating an enterprise IGA platform (SailPoint ISC / IdentityNow preferred), including troubleshooting failed provisioning.
- Strong PowerShell and Microsoft Graph scripting skills; Python and REST API experience valued.
- Working knowledge of SAML, OAuth 2.0, OIDC, and SCIM.
- Experience with hybrid identity (Active Directory, Entra Connect / Cloud Sync).
- Experience in an ITSM environment (e.g., ServiceNow) working against SLAs.
Nice to Have - Certifications: SC-300, SailPoint ISC, AZ-500, Security+, or CISSP.
- ITSM-integrated automation, low-code tools, or Terraform/Bicep.
- HRIS-driven provisioning (e.g., Workday) and audit/compliance experience.
- Familiarity with PAM (e.g., BeyondTrust), ITDR, or SIEM/SOAR integration.
- Retail or ecommerce
