IAM Cybersecurity Engineer

Zayo•Denver, CO

About The Position

The IAM Engineer role is responsible for protecting Zayo computer networks from cybersecurity attacks and unauthorized access. This position focuses on the design, implementation, and operation of Identity and Access Management (IAM) solutions, with a strong emphasis on SailPoint Identity Security Cloud (ISC). The ideal candidate will support cloud-native identity governance capabilities, including lifecycle automation, access certifications, and application onboarding. This role partners with IT and Cybersecurity architects, engineers, and application owners to deliver scalable, compliant identity solutions aligned with business and regulatory objectives. This role may require rotating 24x7 on-call support.

Requirements

Bachelor’s degree in computer science, cybersecurity, or a related field (or equivalent experience).
Minimum of three (3) years of experience in IAM, IGA, or PAM solutions.
Minimum of two (2) years of hands-on experience with SailPoint ISC (IdentityNow / Identity Security Cloud).
Strong understanding of identity lifecycle management and governance models.
Experience with REST APIs, JSON, and SCIM integrations.
Experience with directory services such as Active Directory and LDAP.
Familiarity with cloud platforms (AWS, Azure, GCP).
Knowledge of security frameworks and compliance standards (NIST, ISO 27001, GDPR, SOX).
Strong analytical, troubleshooting, and problem-solving skills.
Excellent communication and collaboration abilities.

Nice To Haves

Experience with scripting/automation (e.g., PowerShell, Python) is preferred.
Experience migrating from SailPoint IdentityIQ to ISC.
Familiarity with enterprise integrations such as: ServiceNow, Workday, SAP.
Exposure to CyberArk or other PAM tools.
SailPoint ISC certification or other IAM-related certifications (CISSP, CISM, CIAM, etc.).

Responsibilities

Design, implement, and manage IAM solutions with a focus on SailPoint Identity Security Cloud (ISC).
Configure and support Identity Governance and Administration (IGA) capabilities including: Access certifications, Identity lifecycle management, Policy enforcement.
Implement and maintain Joiner, Mover, Leaver (JML) workflows using ISC lifecycle events and provisioning policies.
Onboard and integrate applications using ISC connectors, including: Active Directory, Azure Entra ID, SaaS applications.
Support API-based integrations (REST/SCIM) for identity provisioning and application connectivity.
Configure and execute access certification campaigns and ensure audit readiness.
Ensure IAM governance processes align with regulatory and compliance requirements (e.g., SOX, GDPR, HIPAA, NIST, ISO 27001).
Monitor, troubleshoot, and resolve provisioning failures and lifecycle-related issues.
Generate and analyze reports related to provisioning, access, and compliance tracking.
Collaborate with cross-functional teams to define and implement role-based access controls (RBAC).
Support and integrate Privileged Access Management (PAM) solutions where applicable.
Participate in audits, incident response, and remediation efforts related to IAM systems.
Develop and maintain IAM documentation, including policies, procedures, and configurations.
Stay current with IAM, IGA, and SailPoint ISC best practices and emerging technologies.