IAM Security Engineer

Overview

Youre invited to join our Enterprise Information Security team focusing on corporate Identity & Access Management. At Esri you will work with a close-knit skilled team in a highly innovative environment. Help us build and operate enterprise single-sign-on (SSO) identity governance and multi-factor authentication (MFA) solutions and to develop and enhance automated workflows. We welcome you to join us and use your technical expertise across various IAM products and systems to improve the security privacy and daily user experience of your colleagues.

Responsibilities

• Design develop and enhance IAM solutions integrating enterprise applications and security services
• Manage IAM lifecycle processes including provisioning de-provisioning access request and periodic access certification
• Deploy and configure connectors within SailPoint IdentityIQ/IDN for various enterprise systems including custom connectors for home grown applications
• Develop and maintain high-quality reusable features and components using Java and other scripting languages
• Administer and support LDAP Single Sign-On (SSO) federation SAML OAuth OIDC and enterprise IAM systems
• Implement and support cloud-based identity platforms such as Microsoft Entra ID
• Engineer and manage identity integrations with ServiceNow including form development workflow design access request catalog items and automation of approval processes
• Design and manage identity-related workflows in SailPoint to support access governance and provisioning processes
• Support identity and mailbox provisioning and management within Microsoft Exchange Online and on-premises Exchange environments
• Develop and maintain PowerShell automation scripts and bulk identity updates across Active Directory and integrated system
• Provide Level 2-3 support ensure SLA compliance perform access data cleanup and certification and participate in on-call support as required
• Implement conditional access policies MFA and governance standards across enterprise applications
• Collaborate cross-functionally with business and technology teams to align IAM processes with organizational needs

Requirements

• 2 years of experience in IAM planning implementation and operations
• 2 years of Java development experience
• 2 years developing IAM solutions using SailPoint IdentityIQ
• Foundational knowledge of identity technologies such as SailPoint Ping CA and Entra
• Proficiency managing LDAP directories Active Directory REST Webservices SAML OIDC databases PowerShell
• Strong analytical problem-solving and communication skills
• Visa sponsorship is not available for this posting. Applicants must be authorized to work for any employer in the US
• Bachelors degree in computer science or a related STEM field

Recommended Qualifications

• 1 years of ServiceNow Form/Workflow development experience is a strong plus
• Experience with CI/CD pipelines
• Experience with AWS Linux
• Experience with authentication libraries MSAL Passport
• Experience with architecting and implementing multi-agent architectures to enhance RBAC/ABAC models automate complex identity governance and proactively resolve lifecycle bottlenecks through autonomous reasoning.

#LI-TM1

#LI-onsite