Lead AI-Augmented IAM Security Engineer

Responsibilities

• Deploy, configure, and run IAM solutions and controls guided by the architecture, standards, and designs set by IAM architects and security leadership
• Establish and sustain identity lifecycle (Joiner / Mover / Leaver) processes, covering automated provisioning and deprovisioning across target systems
• Set up and maintain core IAM capabilities such as SSO, federation, MFA, passwordless authentication, conditional access, RBAC/ABAC role models, and least-privilege access
• Create, roll out, and maintain IAM integrations and connectors with cloud platforms, SaaS applications, enterprise systems, directories, authoritative source systems, databases, and APIs
• Run access certification and review campaigns, carry out entitlement clean-up, and configure segregation-of-duties (SoD) rules in line with access policies set by architects and the business
• Deploy and operate Privileged Access Management controls, including credential vaulting, secrets rotation, session management, and just-in-time and just-enough access
• Build and maintain automation scripts, workflows, and IAM tooling with PowerShell, Python, REST APIs, SCIM, Terraform, or comparable technologies
• Track IAM platform health, diagnose and resolve incidents and access issues, and handle patching, upgrades, and configuration hardening
• Set up and maintain IAM logging, alerting, and monitoring, and execute backup and recovery procedures per defined runbooks and resilience requirements
• Create, deploy, and maintain AI-assisted automations and agentic workflows that cut manual effort across daily IAM operations, such as access request triage, classification, and routing; entitlement analysis, access review summarization, and reviewer recommendations; role and entitlement analysis and access anomaly…

Languages