Identity and Access Management (IAM) Engineer

Clark Construction Group•Mclean, VA

33d•Onsite

About The Position

The Identity and Access (IAM) Engineer will help mature Clark's security posture. The role will be responsible for administering the IAM platforms (Saviynt, Entra ID, and Okta) and onboarding applications to these platforms. The role requires working closely with the business to facilitate application onboarding, develop access control, and perform other IAM activities. This includes all phases from discovery through long-term support. The role will also work with our security and internal audit teams to provide proper access controls and auditing of our solutions. This position will be based in the office 5 days/week.

Requirements

5+ years of experience in the information technology field
3+ years of experience of IAM-related experience
Strong oral communication and writing skills
Ability to collaborate across business units and engage with stakeholders
Proficient knowledge of IAM concepts
Authentication Methods
Least Privilege Access
Experience integrating with account and access management technologies
APIs
SCIM
IGA Platform Management
Experience with role and attribute-based access controls
Experience with federation protocols such as SAML, OAuth, and OIDC
Experience with access certifications
Alignment to Clark Standards of Excellence: Self-Motivated, Results-Oriented, Adaptable, Team Player, Accountable, Ethical, Innovative, Resilient, Builds Relationships, Builds People / Teams & Followership, Sets Direction & Executes

Nice To Haves

Saviynt (or similar, ex., Sailpoint) administration and integrations
SQL
Entra ID
Okta
ServiceNow
Scripting
Cyberark

Responsibilities

Identity and Access Governance (IGA) Administration
Administer and maintain the IGA platform (Saviynt)
Onboarding new applications to the platform
Resolve IAM-related issues
Authentication and Authorization Administration
Configure and maintain single sign-on (SSO) integrations
Administer and maintain SSO platforms
Identity Lifecycle Management
Automate user provisioning and de-provisioning processes.
Develop and maintain role and attribute-based access controls.
Troubleshoot, identify, and resolve technical IAM-related issues
Improve IAM solutions and systems for protection against evolving threats and efficiency
Coach other organization members on the best practices that should be followed in IAM
Develop reporting for IT, Business Application Owners, and SMEs
Drive planning and execution of IAM roadmaps and technology enhancements
Create and maintain standards surrounding documentation related to IAM processes, procedures, and infrastructure
Provide engineering support to automate and administer IAM and compliance requirements across all enterprise information systems
Perform day-to-day IAM operations and support
Participate in bimonthly maintenance days when required