Overview In this role you will lead identity lifecycle, entitlement engineering, and privileged access across enterprise IGA/PAM and cloud platforms. You'll own complex SailPoint and CyberArk integrations, design Entra ID flows, and drive automation and reliability in provisioning. You will resolve escalations, mentor junior staff, and help ensure audit readiness. This position offers a chance to shape secure identity operations at scale within a global technology services leader.
Compensation / Benefits- remote/hybrid/on-site work options
- flexible work arrangements
- career growth opportunities
Responsibilities- Technical ownership of user lifecycle and entitlement engineering across AD, Entra ID, SaaS apps, and custom systems
- Lead SailPoint IGA design, provisioning policies, role engineering, reconciliation, and certification campaigns
- CyberArk PAM stewardship: onboard targets, vault policies, credential rotation, and privileged session controls
- Architect and operate PKI/certificate lifecycle automation for service identities and TLS endpoints
- Cloud identity engineering: Entra ID conditional access, cross-tenant syncs, and AWS/GCP IAM coordination
- Develop and maintain SCIM/SAML/OIDC connectors; write automation scripts (PowerShell/Python) and IaC (Terraform)
- Lead Tier-3 incident troubleshooting, root-cause analysis and durable fixes to provisioning processes
- Governance and audit readiness: manage access reviews, remediation, and evidence collection
- Mentor, document, runbooks and training to improve throughput and reduce manual errors
Key requirements- 6+ years of hands-on IAM with provisioning and identity engineering
- Proven SailPoint (IGA) and CyberArk (PAM) implementations
- Deep operational knowledge of Entra ID / Azure AD and identity synchronization
- Strong PKI concepts and certificate management experience
- Proficient with SCIM, SAML, OAuth/OIDC, MFA
- Advanced scripting and automation: PowerShell, Python, Bash; Terraform or CloudFormation
- Analytical and detail-oriented problem solving
- Effective communicator with stakeholders
- Mentorship and teamwork
- SailPoint IGA
- CyberArk PAM
- Entra ID / Azure AD
