AI-Augmented IAM Security Engineer

Responsibilities

• Implement, configure and operate IAM solutions and controls based on architecture, standards and designs defined by IAM architects and security leadership
• Maintain identity lifecycle (Joiner / Mover / Leaver) processes, including automated provisioning and deprovisioning across target systems
• Configure core IAM capabilities, including SSO, federation, MFA and passwordless authentication, conditional access, RBAC/ABAC role models and least-privilege access
• Develop and deploy IAM integrations and connectors with cloud platforms, SaaS applications, enterprise systems, directories, authoritative source systems, databases and APIs
• Execute access certification and review campaigns, perform entitlement clean-up and configure segregation-of-duties (SoD) rules according to access policies defined by architects and the business
• Operate Privileged Access Management controls, including credential vaulting, secrets rotation, session management and just-in-time and just-enough access
• Develop automation scripts, workflows and IAM tooling using PowerShell, Python, REST APIs, SCIM, Terraform or similar technologies
• Monitor IAM platform health, troubleshoot and resolve incidents and access issues, and perform patching, upgrades and configuration hardening
• Maintain IAM logging, alerting and monitoring, and run backup and recovery procedures according to defined runbooks and resilience requirements
• Deploy AI-assisted automations and agentic workflows that reduce manual effort across daily IAM operations, such as access request triage, entitlement analysis, anomaly detection, root-cause analysis, privileged access review support, compliance evidence collection and documentation generation

Languages