IAM Automation Engineer, Senior

This is a hands-on IAM Automation Engineer role within the Information Security team of a leading healthcare technology company, designing, building, and supporting automation across the full identity and access management ecosystem rather than any single platform. This seat requires broad IAM engineering experience across identity governance, directories, privileged access management, authentication and authorization, ITSM workflows, cloud IAM, and SaaS and enterprise integrations, calling for a versatile engineer who can code and automate across multiple platforms and languages rather than a single-platform specialist. A companion, more SailPoint-focused engineering role is also open on the same team. The role supports the organization's flagship identity platform, which secures more than five million members and other external identities across all digital portals.

NOTE:  *Must be eligible to work on W2 without sponsorship. Not eligible for C2C.

• Pay Rate: $70–$75/hr
• Duration: 6-month contract-to-hire
• Location: Hybrid or Remote, however must reside in the following states: WA, OH, CA, AZ, CO, CT, FL, GA, MD, MN, NV, OR, AL, IL, VA, WI, TX, NY

•   IAM Automation Engineering: design, build, test, and maintain automation for identity lifecycle, provisioning/deprovisioning, access requests, approvals, certifications, role management, entitlement governance, control validation, and operational reporting across multiple IAM platforms

•   Cross-Platform IAM Engineering: configure, enhance, and support identity governance platforms, directories, PAM tools, authentication/federation services, cloud IAM services, ITSM workflows, and enterprise applications

•   Coding, APIs & Integration: develop scripts, services, API integrations, workflow automations, scheduled jobs, data transformations, and reusable utilities (PowerShell, Python, Java, BeanShell, REST APIs, JSON, Ansible, SQL, Git, or similar)

•   Broad IAM Domain Expertise: apply JML, RBAC, least privilege, SoD controls, identity federation, SSO, MFA, privileged access, directory services, access governance, entitlement models, and compliance-driven access controls

•   Operational Support & Reliability: troubleshoot automation, integration, workflow, connector, directory, PAM, cloud identity, and application access issues; resolve incidents; improve reliability via monitoring, logging, metrics, and root cause analysis

•   DevOps & Release Management: use source control, branching strategies, CI/CD, code reviews, automated testing, and config-as-code/infrastructure-as-code to promote IAM changes safely across environments

•   Documentation & Runbooks: maintain process flows, automation logic, runbooks, and support procedures

•   Quality Assurance: test and validate automation scripts, workflow changes, integrations, and procedure updates

•   Continuous Improvement: identify manual IAM activities to automate; reduce operational risk and improve service delivery

•   Education: Bachelor's degree in IT, Computer Science, or related field

•   Experience: 5+ years in IAM, automation engineering, security engineering, software development, DevOps, systems integration, or related — with demonstrated ability to automate across multiple IAM technologies

•   Platforms: hands-on across multiple platforms: SailPoint IdentityNow or IdentityIQ, Active Directory, Microsoft Entra ID, CyberArk or other PAM tools, ServiceNow or other ITSM platforms, MFA, SSO, identity federation, cloud IAM, SaaS integrations

•   Coding/Scripting: PowerShell, Python, Java, BeanShell, JavaScript, REST APIs, JSON, SQL, Ansible, Git, CI/CD tools, or similar — multiple languages expected, not just one

•   Integration: ability to connect IAM platforms with HR systems, directories, ticketing systems, PAM tools, cloud services, SaaS platforms, databases, APIs, and enterprise applications, applying secure coding and least-privilege practices

•   Nice to have: CISSP, CIAM, or similar certifications