Position: Senior IAM / IGA / PAM Engineer or Architect
Duration: 1 year
Location: San Francisco, CA (hybrid)
Client: City and County of San Francisco
Work Arrangement: Remote or hybrid, depending on the specific assignment. Candidates willing to work onsite in San Francisco when required are preferred.

Required Experience:
Minimum 5 years of relevant enterprise IAM and security experience.

Job Description:

Design, implement, integrate, administer, or support enterprise identity and access management solutions.
Work with IAM, IGA, PAM, MFA, SSO, identity lifecycle management, and access governance.
Implement user provisioning/deprovisioning, access certification, privileged account management, and identity security controls.
Support platforms such as Oracle IAM/OIG/OAG/OCI, SailPoint, CyberArk, BeyondTrust, Okta, Ping Identity, or comparable solutions.
Integrate IAM systems with enterprise applications, Active Directory, cloud environments, and authoritative identity sources.
Work with SAML, OAuth 2.0, OpenID Connect, LDAP/LDAPS, APIs, and federation technologies.
Support identity architecture, security assessments, troubleshooting, and modernization initiatives.
Document technical designs, security controls, integrations, and implementation procedures.

Preferred Certification:
Relevant IAM, cybersecurity, cloud, architecture, or vendor-specific certifications.

IAM / IGA / PAM Engineer or Architect

Key skills

About this role