Sr. IAM Engineer | Remote, USA

Optiv • Leawood, KS

1d • Remote

About The Position

Optiv is seeking a Sr. IAM Engineer to join Optiv Security’s 24x7x365 Security Operations Center as part of the Advanced Fusion Center (AFC) team. The AFC provides security operations expertise and managed services to a growing client base across industry verticals, using teams focused on Client Engagement, Engineering Operations, and Detection and Response Operations. This position is fully remote and may be hired anywhere in the continental United States.

The engineer will follow AFC processes and procedures and manage and maintain security systems across internal and client environments. Working with management, solution architects, principal security engineers, and clients, the role supports critical services for existing AFC clients. The engineer serves as a primary responder for customer systems, owns client configuration issues, and tracks them through resolution.

The role designs, implements, and manages identity and access management solutions to protect sensitive information and support regulatory compliance in client environments. It collaborates with cross-functional stakeholders, leads IAM initiatives, and contributes to clients’ security strategies. The work includes engineering and troubleshooting identity governance and administration (IGA) solutions; advancing automation, self-service, and resiliency; customizing solutions for business needs; and supporting complex incidents and root-cause analysis. The engineer is responsible for the standards, design, and operation of SailPoint, BeyondTrust, CyberArk, and related environments, and provides expertise across Microsoft identity technologies and public key infrastructure.

Requirements

• 2–4 years of professional experience in information security, typically gained in 3+ years (required).
• Knowledge and experience with identity management technologies such as SSO, SCIM, OAuth, SAML, encryption, and PKI.
• Knowledge of Microsoft technologies, including Server, Active Directory, DNS, Group Policy, Office 365/Exchange, Azure, and Azure Entra ID.
• Excellent verbal and written communication skills.
• Solid understanding of role-based access control (RBAC) in large, distributed environments.
• Solid understanding of cybersecurity principles and best practices.
• Excellent problem-solving and analytical skills.
• Experience working with privileged access management (PAM) systems.
• Experience with MFA protocols and techniques.

Nice To Haves

• Bachelor’s degree in Engineering, Information Technology, Computer Science, or a related discipline (preferred).
• 3–5 years of experience as a senior-level IDAM engineer (preferred).
• Experience with AWS or GCP cloud environments.
• Microsoft Certified IT Professional (Enterprise Administrator) certification (preferred).
• CISSP certification (a plus).
• Microsoft technical certifications (preferred).

Responsibilities

• Follow Optiv AFC processes and procedures, and manage and maintain security systems across internal and client environments.
• Work with management, solution architects, principal security engineers, and clients to deliver critical services to existing AFC clients.
• Serve as a primary responder for AFC customer systems, own client configuration issues, and track them through resolution.
• Design, implement, and manage IAM solutions that protect sensitive information and support regulatory compliance in client environments.
• Collaborate with IT teams, security teams, business units, and other stakeholders to implement effective IAM solutions and contribute to client security strategies.
• Review and provide feedback on established strategies and multi-year IGA plans covering access requests, lifecycle events, provisioning, role-based access, separation of duties, and access certifications.
• Architect, design, develop, and troubleshoot IGA solutions; prepare technical and architectural documentation, recommendations, specifications, use cases, requirements, and test cases.
• Create solutions that advance full automation, self-service, and resiliency.
• Customize solutions to address customer business requirements.
• Participate in security and application troubleshooting and incident resolution with infrastructure teams, including storage, messaging, server, and network teams.
• Provide engineering support for complex and recurring IAM platform incidents and perform root-cause analysis in accordance with customer policies and standards.
• Establish and support the standards, design, and operation of SailPoint, BeyondTrust, CyberArk, and related environments.
• Provide expertise across Azure Entra ID, Microsoft Active Directory, ADLDS, ADFS, SailPoint, CyberArk, BeyondTrust, and PKI.

Benefits

• Work/life balance.
• Professional training resources.
• Creative problem-solving opportunities and the ability to tackle unique, complex projects.
• Volunteer opportunities through Optiv Chips In.
• Technology and support to work productively remotely/from home, where applicable.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior