IAM Engineer
About The Position
The IAM Engineer will support and administer the organization's Identity & Access Management environment, with a strong focus on CyberArk Privileged Access Management (PAM). The role requires hands-on CyberArk administration, troubleshooting access and authentication issues, and partnering with users and technical teams to maintain secure and efficient access management. The position supports CyberArk administration and migration from on-premises infrastructure to the cloud, user provisioning and access requests, Identity Governance initiatives, SailPoint operations, and integrations involving SCIM, OpenID Connect, OAuth, APIs, and Microsoft Entra ID. The engineer will work remotely on Eastern Time hours, with a daily start time of 9:15 AM ET. This is a contract position based out of Boston, MA.
Requirements
- Hands-on CyberArk administration experience.
- Experience administering CyberArk components including PVWA, CPM, PSM, CyberArk Safes, and privileged accounts.
- Strong Identity & Access Management (IAM) background.
- Experience with user provisioning, access management, and role-based access controls (RBAC).
- Excellent troubleshooting and problem-solving skills.
- Strong verbal and written communication skills.
- Customer-focused mindset and ability to understand and resolve user access challenges efficiently.
- Ability to work Eastern Time hours, with a daily start time of 9:15 AM ET.
- Ability to work independently and partner effectively with security, infrastructure, and application teams.
Nice To Haves
- CyberArk cloud migration experience.
- Experience with SailPoint Identity Governance solutions.
- Microsoft Entra ID administration experience.
- Experience with SCIM provisioning.
- Knowledge of OpenID Connect (OIDC) and OAuth authentication protocols.
- Experience working with REST APIs and system integrations.
- Background in healthcare, higher education, academic institutions, or large enterprise environments.
Responsibilities
- Administer and maintain the CyberArk PAM environment, including privileged accounts, Safes, permissions, and user access.
- Support initiatives to migrate CyberArk infrastructure from on-premises environments to the cloud.
- Manage user provisioning, deprovisioning, and access requests across enterprise systems.
- Investigate and resolve IAM-related tickets, access issues, and authentication challenges.
- Support Identity Governance initiatives and assist with SailPoint administration and operations.
- Configure and maintain integrations using SCIM, OpenID Connect (OIDC), OAuth, APIs, and Microsoft Entra ID.
- Collaborate with business users, security teams, and IT stakeholders to troubleshoot complex access-related issues.
- Ensure adherence to security policies, least-privilege principles, and access governance standards.
Benefits
- Medical, dental, and vision coverage, if eligible.
- Critical Illness, Accident, and Hospital benefits, if eligible.
- 401(k) retirement plan with pre-tax and Roth post-tax contributions available, if eligible.
- Voluntary Life and AD&D insurance for the employee and dependents, if eligible.
- Short- and long-term disability coverage, if eligible.
- Health Spending Account (HSA), if eligible.
- Transportation benefits, if eligible.
- Employee Assistance Program, if eligible.
- Time off or leave, including PTO, vacation, or sick leave, if eligible.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Career Level
Mid Level
Education Level
No Education Listed
