IAM Engineer

Great American Insurance Group is a leader in the insurance industry, and they are seeking an IAM Engineer to join their Enterprise Information Security Group. The role involves leading the implementation of application integrations of an enterprise-grade IGA tool, collaborating with various business units, and ensuring the security of the organization’s information assets.

Responsibilities:

• Lead the implementation of application integrations of an enterprise-grade IGA tool (e.g., SailPoint, Saviynt), including design, configuration, integration, and deployment
• Partner with HR, IT, Security, Compliance, and business units to define identity lifecycle processes and access governance policies
• Collaborate with cross-functional teams and the business to develop and maintain role-based access control (RBAC) models aligned with business and compliance requirements
• Integrate IGA with key systems including Active Directory, Azure AD, HR platforms, and cloud services
• Design and implement access review and certification campaigns to meet regulatory and audit obligations
• Monitor, troubleshoot, and optimize IGA performance to ensure availability, scalability, and reliability
• Stay current on IAM/IGA trends and best practices to strengthen the organization’s security posture
• Collaborate with Identity and Access Management (IAM) engineering on enterprise LDAP directories, Meta Directory Replication, user and access provisioning workflows, lifecycle processes, access request workflows, and Azure AD
• Provide operational support for IAM services, including participation in off‑hours incident and change‑management rotations
• Proactively identify and resolve IAM issues, driving automation and continuous improvement
• Serve as a project lead or subject matter expert across multiple initiatives
• Review identified vulnerabilities and implement remediation actions

Requirements:

• Hands‑on experience with IGA platforms (e.g., SailPoint, Saviynt)
• Strong understanding of identity lifecycle management, provisioning/deprovisioning, RBAC, and access certifications
• Familiarity with regulatory frameworks (SOX, HIPAA, GDPR) and audit requirements
• Experience with cloud IAM (Azure AD, AWS IAM)
• Proficient in scripting/development languages (JavaScript, PowerShell, Python, Perl) for automation
• Experience with Windows and Linux environments
• Basic SQL skills (queries, schemas, connections)
• Understanding and use of APIs
• Experience with complex, distributed IAM environments is a plus
• Solid problem‑solving skills and a strong security‑focused mindset
• Ability to stay current on security trends and translate them into actionable improvements
• Strong communication and documentation skills; able to explain technical concepts clearly to both technical and non‑technical audiences, including leadership
• Ability to build and maintain strategic relationships across teams and external partners