Principal IAM Engineer

We are seeking a Principal IAM Engineer to join our team. As a Principal IAM Engineer, you will maintain and support PAM and IAM solutions, partnering with IAM Engineers/Architects for requirements analysis, application integration, testing/validation plans, and the establishment of security controls.

Responsibilities:

• Lead support, deployment, and integration activities for PAM capabilities, including privileged account onboarding, identity ownership, access workflows, session management, credential management, and alignment with enterprise security standards.
• Troubleshoot complex PAM and IAM issues by analyzing symptoms, performing root cause analysis (RCA), and implementing validated corrective actions that prevent recurrence and support long-term operational stability.
• Collaborate with the larger IAM team to investigate and resolve issues related to provisioning, deprovisioning, authentication, and access governance across IAM platforms including Entra ID, Saviynt IGA, and other related IAM processes and architecture.
• Supervise the deployment and configuration of PAM/IAM changes and enhancements, guaranteeing adherence to organizational policies and regulatory compliance.
• Create and maintain comprehensive documentation for solution designs, configurations, operational processes, and best practices.
• Provide guidance and mentorship to junior engineers and foster the advancement of technical skills across the team. Promote a culture of continuous improvement and knowledge sharing.

Qualification Requirements:

• Bachelor’s degree in computer science, engineering, or a related field
• Demonstrated experience deploying Privileged Access Management (PAM) solutions in an enterprise environment, including privileged account lifecycle processes, access controls, approvals/workflows, credential management, and operational support required.
• At least 5+ years experience with support, maintenance, configuration, and development of enterprise IAM solutions, including Saviynt IGA, Entra ID/Azure AD, Entra ID Identity Governance, LDAP Directories, and Active Directory administration required.
• Experience with ServiceNow integration, Workday integration, and Microsoft Graph preferred.
• Okta/Auth0 and/or Microsoft Purview experience is a plus.
• Experience with SQL, XML, JSON, and SOAP/REST APIs preferred.
• Solid understanding of IAM principles, account provisioning / lifecycle management, privileged access, authentication, authorization, access reviews, and security policies.
• Demonstrated experience with Entra ID sign-on and multi-factor authentication policies.
• Foundational knowledge of network and security principles including firewall, WAF, VPN, SSL.
• Experience with clinical applications, GxP platforms, or the CRO/Biopharma industry a plus.
• Self-directed and able to manage individual projects or work as part of a larger team.
• Excellent written and verbal communications; Solid written and oral presentation skills.