Identity Operations Engineer

Confiz•Seattle, WA

4d•Hybrid

About The Position

Confiz is seeking an Identity Operations Engineer to support one of its largest retail clients in Seattle, Washington. This is a hands-on operations role focused primarily on working the identity ticket queue and troubleshooting provisioning and synchronization failures, with the remaining time spent automating tickets and manual processes. The engineer partners with Identity Architecture, HR, ITSM, application owners, and Security Operations. The role is hybrid, with onsite work four days per week and remote work on Fridays. The stated schedule is 8:00 AM–5:00 PM PT. After-hours support may be needed as part of incident response and escalation coverage. Confiz describes itself as a global team working on enterprise projects and products for customers including Fortune 100 retail and CPG companies, store chains, fintech companies, and startups. The company highlights its focus on processes and culture, ISO certifications, collaborative learning, workplace fun, and work with cutting-edge technologies.

Requirements

Bachelor’s degree in Computer Science, Cybersecurity, IT, or equivalent experience.
At least 5 years of experience in IAM operations or systems/security engineering, including hands-on JML process work.
Hands-on Microsoft Entra ID administration, with working knowledge of Conditional Access, PIM, and Entra ID Governance.
Hands-on experience operating an enterprise IGA platform, including troubleshooting failed provisioning; SailPoint ISC or IdentityNow is preferred.
Strong PowerShell and Microsoft Graph scripting skills.
Working knowledge of SAML, OAuth 2.0, OIDC, and SCIM.
Experience with hybrid identity, including Active Directory and Entra Connect or Cloud Sync.
Experience in an ITSM environment, such as ServiceNow, working against SLAs.

Nice To Haves

Certifications such as SC-300, SailPoint ISC, AZ-500, Security+, or CISSP.
Python and REST API experience.
ITSM-integrated automation, low-code tools, or Terraform/Bicep.
HRIS-driven provisioning, such as Workday, and audit/compliance experience.
Familiarity with PAM tools such as BeyondTrust, ITDR, or SIEM/SOAR integration.
Retail or ecommerce experience.

Responsibilities

Fulfill joiner, mover, and leaver (JML) requests from the ITSM queue within SLA, including account creation, role-based access, transfer-related access changes, and complete deprovisioning for terminations and leaves.
Operate SailPoint ISC by processing access requests, remediating provisioning failures, monitoring aggregations and identity refreshes, and correcting identity attribute issues.
Administer Entra ID users, groups, licenses, application role assignments, guest accounts, Lifecycle Workflows, and Entitlement Management requests.
Troubleshoot HR-to-identity provisioning and hybrid synchronization issues between Entra ID and on-premises Active Directory using Entra Connect or Cloud Sync.
Handle PIM and privileged access requests with appropriate approvals and audit trails.
Run access review campaigns, clean up orphaned and dormant accounts, and produce audit evidence, such as for SOX and PCI.
Build automation using PowerShell, Microsoft Graph, Python, and SailPoint ISC APIs and workflows.
Create event-driven workflows using Azure Automation, Logic Apps, or Power Automate, with ITSM integration for automatic fulfillment and closure.
Analyze ticket trends to prioritize automation and track time saved.
Manage automation as production code, including source control, peer review, testing, and logging.
Write runbooks and knowledge articles, and serve as an escalation point for the service desk.
Participate in incident response and escalation coverage, including after-hours support as needed.