Job Summary
The Senior IAM Operations Engineer is responsible for leading and overseeing the end-to-end identity lifecycle, ensuring secure, efficient, and compliant access across the enterprise. This role involves advanced troubleshooting, platform optimization, stakeholder coordination, and driving improvements in IAM processes, automation, and governance. The Sr. Engineer will act as a subject matter expert (SME) for operational IAM activities and guide junior team members.
Key Responsibilities
1. Identity Lifecycle & Access Operations
- Lead and oversee user provisioning, deprovisioning, access modifications, and role assignments across all systems.
- Ensure accurate enforcement of RBAC, birthright access, and defined access policies.
- Manage complex access requests, approval workflows, and escalations.
- Ensure JML processes run smoothly and within SLAs.
2. Monitoring, Troubleshooting & Platform Stability
- Own monitoring of IAM systems, connectors, jobs, and workflows—identify failures, bottlenecks, and recurring issues.
- Perform root-cause analysis for provisioning failures, job errors, and integration issues.
- Coordinate with application, infra, and security teams to resolve high-impact access issues.
3. Access Governance & Compliance
- Lead access review/certification campaigns, including role cleanup, conflict remediation, and attestation follow-ups.
- Identify and eliminate orphaned, inactive, and non-compliant accounts.
- Prepare audit evidence, manage SOX controls, and support external/internal audits.
- Ensure alignment with regulatory standards and enterprise security frameworks.
4. System Administration & Enhancements
- Maintain and optimize IAM platform configurations: roles, access profiles, rules, policies, workflows, SOD policies.
- Drive automation for repeatable tasks using scripts, APIs, or workflow improvements.
- Support onboarding of new applications, connectors, and integrations.
5. Leadership & Stakeholder Management
- Serve as IAM SME for project teams, audits, escalations, and major incidents.
- Mentor junior team members—provide guidance on troubleshooting, IAM concepts, and platform usage.
- Work closely with HR, Security, Application Owners, and Infra teams to streamline IAM processes.
- Proactively identify gaps in process, security, or tooling and drive improvement initiatives.
Required Skills & Qualifications
- 6+ years of hands-on experience in IAM operations, preferably with tools like Saviynt
- Strong knowledge of identity lifecycle, RBAC, SOX controls, access certifications, and compliance frameworks.
- Ability to write and understand SQL queries, analyze logs, and identify provisioning patterns.
- Understanding of directory services, SSO, MFA, authentication/authorization protocols (SAML, OAuth, SCIM).
- Strong incident management, documentation, and communication skills.
Preferred Skills
- Experience with workflow optimization, automation (PowerShell, Python, API), and connector management.
- Involvement in IAM transformation projects or large-scale migrations.
- Certifications such as Security+, CIAM, Azure/AWS Security, or vendor-specific IAM certifications.
