Identity and Access Management (IAM) Engineer at Judge Group

Identity and Access Management (IAM) Engineer

Responsibilities:

• Implement and manage identity services and platforms.
• Demonstrate experience in scripting or software development.
• Act as an internal consultant and architect for IT Engineering and Operations Management.
• Design, implement, and evaluate initiatives for optimal efficiency and performance.
• Isolate and resolve complex systems problems.
• Develop and implement engineering standards and processes.
• Create and modify standard operating procedures for hardware/software and system design.
• Assist in the evaluation, analysis, architecture, design, and implementation of enterprise programs and projects.
• Research, analyze, and provide recommendations on future technology direction.
• Perform peer reviews on complex change implementations.
• Deploy and document changes in accordance with problem and change management processes.
• Lead problem management and root cause analysis discussions.
• Identify solutions to potential issues and embrace simplification.
• Serve as an escalation point for high severity issues and troubleshoot/resolve complex incidents.
• Provide expertise on improvements to productivity, systems performance, high availability, monitoring, and operational costs.
• Assist in maintaining service agreements and vendor-related administrative duties.
• Drive and be accountable for assigned tasks, setting and delivering on deadlines and milestones.
• Serve as technical team lead on assigned programs or projects.
• Troubleshoot complex issues and act as Subject Matter Expert.
• Manage enterprise identity directories, including Workforce and Customer.
• Lead integration efforts between IDP and other platforms and services.
• Participate in troubleshooting and incident resolution of high severity incidents.
• Participate in disaster recovery, capacity planning, performance monitoring, and maintenance.
• Work with application support teams to extend identity solutions via Active Directory integration, SAML, RADIUS, or other mechanisms.
• Provide 24x7 support for emergency situations and planned maintenance activities on a rotational basis.

Qualifications and Requirements:

• Bachelor’s degree in information technology or related field, plus 3-5 years of identity and access management experience.
• Proven track record in delivering functional, secure, scalable, and reliable identity solutions.
• Ability to provide on-call support for emergency situations and planned maintenance activities on a rotational basis.
• Strong intellectual agility and hands-on technical skill in a fast-paced environment.
• Excellent written and verbal communication skills, with the ability to communicate effectively with all levels of audience including executive leadership.
• Powerful analytical and problem-solving skills, with the ability to develop creative solutions.
• Ability to independently clarify and assess ambiguous issues to develop consensus toward a solution.
• Experience in developing architectural designs, topologies, and implementation engineering guidance documents.
• Experience training or mentoring both technical and non-technical diverse audiences.
• 3+ years working with Single Sign-on Technologies like Okta, Entra, SecureAuth, and Azure AD.
• 3+ years working with Identity Provisioning Tools from vendors like Saviynt, SailPoint, Okta, Oracle, RSA, or One Identity.
• 2+ years working with PAM Tools like CyberArk, BeyondTrust, Thycotic, or Saviynt CPAM.
• 2+ years working with multiple MFA methods and understanding when to deploy each type.
• Experience with onboarding new applications for both SSO and Identity Provisioning.