Identity and Access Management Engineer I
About The Position
As an Identity and Access Management Engineer I, you will own the day-to-day operation, maintenance, and continuous improvement of Reprise Financial’s Joiner-Mover-Leaver (JML) and identity-automation platform. The platform receives ADP events through Azure Functions, provisions users and guests, records telemetry, provides a troubleshooting portal, and supports BPO guest-account onboarding into the HRIS as the source of truth. You will work across Entra ID, Lifecycle Workflows, Access Packages, Logic Apps, custom provisioning APIs, and screen automation for systems that do not support SCIM or APIs. You will own the platform’s code, integrations, deployment controls, monitoring, and operational fixes while partnering with the future Director, Information Security; the AVP, Desktop Support; Systems Administration; HR; and application owners. You will also contribute to the Security function through identity governance, access controls, audit evidence, identity investigations, and protection of the IAM platform.
Requirements
- Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related field, or equivalent experience.
- 3+ years of experience in IAM, identity engineering, systems integration, security automation, cloud engineering, or application operations.
- Strong Python development and troubleshooting experience, including event-driven applications and API integrations.
- Hands-on experience with Entra ID, Active Directory, Lifecycle Workflows, Access Packages, groups, service principals, managed identities, and access controls.
- Experience with Azure Functions, Logic Apps, Azure Monitor or comparable telemetry, and cloud application configuration.
- Experience maintaining Git repositories, pull requests, CI/CD pipelines, secrets, deployment controls, and release processes.
- Experience integrating systems through REST APIs, webhooks, SCIM, or reliable screen automation when APIs are unavailable.
- Understanding of JML lifecycle controls, least privilege, access reviews, privileged access, identity governance, and audit evidence.
- Ability to break complex operational work into clear tasks for support teams and coordinate execution across technical groups.
- Security certification or Azure/Entra certification preferred; practical experience is weighted equally with certifications.
- Strong troubleshooting, documentation, communication, and cross-functional collaboration skills.
Responsibilities
- Operate and maintain the Python-based JML application, Azure Functions, Logic Apps, telemetry, troubleshooting portal, and related provisioning components.
- Process and troubleshoot ADP-driven onboarding, job changes, transfers, terminations, BPO guest-account workflows, and other identity lifecycle events.
- Administer and improve Entra ID Lifecycle Workflows, Access Packages, groups, access assignments, service principals, managed identities, and related identity controls.
- Maintain custom API integrations and screen-automation sequences for systems without SCIM or supported provisioning APIs.
- Maintain Git repositories, pull-request controls, GitHub Actions pipelines, deployment configurations, secrets, environment settings, and release documentation.
- Diagnose provisioning failures, trace events and telemetry, resolve user-impacting issues, and document durable fixes.
- Create specific IAM/JML execution tasks for Desktop Support Analysts, Systems Administrators, and other support staff; validate completion and provide technical guidance without owning their performance management.
- Support IAM governance and access-control standards, including entitlement cleanup, access reviews, privileged-access review, and service-principal review.
- Provide identity-related audit evidence for GLBA, NIST CSF, SOC 1, PCI DSS, and applicable state lending requirements.
- Support security investigations involving accounts, access, identity risk, and IAM application or Azure-resource vulnerabilities.
- Review new integrations for identity and access-control requirements and recommend secure implementation approaches.
- Partner with the Director, Information Security; AVP, Desktop Support; HR; Systems Administration; Cloud Security; and application owners on lifecycle reliability and risk reduction.
- Contribute to incident response and vulnerability remediation involving the IAM platform, Entra ID, Azure Functions, Logic Apps, and connected systems.
Benefits
- Comprehensive medical, dental, and vision coverage
- Contributions to a Health Savings Account (HSA)
- Access to an Employee Assistance Program (EAP)
- 401(k) program with Safe Harbor Match (100% of the first 3% and 50% of the next 2%)
- Accrued time off
- Company holidays
- Sick time
- 3 floating holidays
- 12-week Paid Parental Leave
- Market-driven salary
- Bonus opportunities
- Robust tech package
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Entry Level
