IAM Engineer II

Software Guidance & Assistance, Inc. is a technology and resource solutions provider seeking an IAM Engineer II for a contract assignment with an infrastructure services client. The role executes daily identity and access management operations, including application onboarding, SSO integrations, access administration, JML automation, troubleshooting, audit support, and identity-related incident handling.

Responsibilities:

• Responsible for executing daily identity and access management operations across the identity management platforms
• Supports user onboarding/offboarding, Single Sign On (SSO) integrations, access requests, entitlement administration, and basic privileged access functions
• Ensures that identity controls are applied consistently and securely, enabling reliable access for users while reducing risk to the organization
• Reports to the Head of IAM and Network Security Eng & Ops
• Onboard applications to identity platforms using REST APIs and JSON field mapping
• Onboard applications for SSO using standard SAML/OIDC templates
• Ensure adherence to least privilege and separation of duties (SoD) requirements
• Collect and maintain evidence for audits and identity reviews
• Follow established change management, documentation, and incident management processes
• Use PowerShell or basic REST API calls for simple identity queries or repeatable tasks
• Maintain runbooks, knowledge base articles, and user facing guides
• Participate in identity related incident handling and troubleshooting
• Automate Joiner/Mover/Leaver (JML) processes, including provisioning, de-provisioning, access requests, and access reviews
• Ensure group based and role-based access is assigned accurately and timely
• Troubleshoot identity issues such as failed provisioning tasks, directory sync, and entitlement assignments
• Process access requests and approvals; maintain entitlement catalogs and birthright access definitions
• Assist in quarterly and ad hoc access certification campaigns
• All other duties as assigned

Requirements:

• high school diploma (or equivalent) in combination with significant experience will be considered in lieu of degree
• Minimum of high school diploma or equivalent is required
• 1–3 years of experience in IT, security operations, or identity administration
• Strong understanding of identity security concepts, including authentication, authorization, federation, credential management, and account lifecycle management
• Familiarity with SAML, OIDC, and basic authentication/authorization principles
• Understanding of IAM concepts such as MFA, RBAC, provisioning, and JML workflows
• Basic scripting experience (PowerShell, Python, JavaScript or similar)
• Strong analytical and troubleshooting skills; attention to detail
• Ability to follow documented procedures and maintain accurate records
• Bachelor's degree preferred
• Experience with an IAM platform (provisioning, access requests, access reviews, connectors)
• Experience with onboarding applications for SSO
• Exposure to PAM (Privileged Access Management) tools and workflows
• Understanding of security frameworks and controls (least privilege, SoD, zero trust)
• Ability to read logs and debug authentication or provisioning errors
• CompTIA Security +, Microsoft SC-900, Microsoft SC-300, (ISC)2 CC or SSCP