IAM Engineer

Bayview Asset Management•Coral Gables, FL

About The Position

We are seeking an experienced Identity Access & Management (IAM) Engineer to support our enterprise identity and access management initiatives. This role will focus on authentication, authorization, provisioning, privileged access management (PAM), and overall enterprise IGA administration. The IGA Engineer will play a key role in ensuring secure and efficient access to systems and applications while maintaining compliance with internal policies and regulatory requirements.

Requirements

Hands-on experience with IGA platforms (e.g., SailPoint IdentityNow/IdentityIQ, Saviynt, Okta Identity Governance, Microsoft Entra ID Governance, One Identity, etc.).
Strong knowledge of authentication protocols and technologies (LDAP, SAML, OAuth, OpenID Connect, Kerberos).
Experience with PAM solutions (e.g., CyberArk, BeyondTrust, HashiCorp Vault, Thycotic/Delinea).
Familiarity with Active Directory (AD), Azure AD (Entra ID), SCIM, and API-based integrations.
Scripting skills in PowerShell, Python, or similar languages for automation.
Understanding of regulatory requirements related to IAM (e.g., SOX, HIPAA, NIST, ISO 27001).
Bachelor’s degree in Computer Science, Information Technology, or a related field (or equivalent experience).
Minimum of 5 years of experience managing Microsoft Exchange Server and Active Directory in a large enterprise environment.
Experience administering Office 365 / Exchange Online environments.

Nice To Haves

Experience with Cloud IAM (AWS, Azure, GCP).
Knowledge of Zero Trust Architecture (ZTA) principles.
Relevant certifications: CISSP, CISM, GIAC, Microsoft SC-300, SailPoint Certified Engineer, Okta Certified Professional/Administrator, CyberArk Defender/Guardian, etc.

Responsibilities

Design, implement, and maintain IGA solutions to automate user provisioning, deprovisioning, and access reviews.
Configure and manage role-based access control (RBAC), attribute-based access control (ABAC), and policy-based access controls.
Develop workflows for user lifecycle management (Joiner-Mover-Leaver).
Ensure compliance with internal security policies and external regulations.
Enforce security policies related to authentication and access control.
Implement and maintain PAM solutions to secure access to privileged accounts and credentials.
Maintain and optimize IGA platform configurations.
Monitor and troubleshoot identity-related incidents and service requests.
Work with cross-functional teams to implement IAM best practices.
Provide technical guidance on IAM strategies and solutions.