IAM Security Engineer

JM S Technical Solutions is seeking an IAM Security Engineer for a hybrid role in Seattle, WA. This is a contract position with a 3-month term, structured as an onsite engagement (1 day remote) with full-time support for an identity security and privileged access delivery program.

Role Overview

The IAM Security Engineer will own identity security workstreams across IAM platforms and privileged access capabilities. The role includes program delivery management, identity security implementation, cross-team coordination, and executive-level reporting to the CISO organization and senior leadership.

Responsibilities

• Own end-to-end program planning, scheduling, and execution for one or more identity security workstreams.
• Develop and maintain detailed project plans, dependency maps, risk registers, and RAID logs.
• Lead sprint planning, PI Planning events, and backlog grooming in an SAFe/Agile delivery model.
• Facilitate cross-team ceremonies including standups, demos, retrospectives, and steering committee reviews.
• Track and report program health, milestones, and KPIs to senior leadership and the CISO organization.
• Proactively identify, escalate, and resolve blockers, risks, and inter-workstream dependencies.
• Drive delivery of Privileged Access Management (PAM) programs using BeyondTrust Password Safe, Endpoint Privilege Management (EPM), and Privileged Remote Access (PRA).
• Support Microsoft Entra ID (Azure AD) initiatives including conditional access policy governance, hybrid identity, and lifecycle management.
• Partner with IGA teams on SailPoint IdentityNow configuration, access certification campaigns, and role engineering.
• Coordinate Okta identity platform hardening, including phishing-resistant MFA (FastPass, FIDO2/WebAuthn), device assurance policies, and authenticator enrollment controls.
• Translate technical identity requirements into workable project scope, acceptance criteria, and delivery milestones.
• Serve as the primary point of contact for program status across technology, security, compliance, and business stakeholders.
• Prepare and deliver executive-ready status reports, steering committee decks, and program dashboards.
• Partner with Vendor Management and Procurement on contingent resource onboarding and statement of work management.
• Coordinate with audit and compliance teams (SOX, PCI-DSS, NIST) to align delivery timelines with control testing windows.

Requirements

• Bachelor’s Degree in Information Technology, Computer Science, Cybersecurity, or related experience.
• 2+ years of direct experience in an Identity and Access Management role.
• Demonstrated experience with at least one major cloud identity platform: Okta or Microsoft Entra ID.
• Proficiency in scripting with PowerShell or Python for automation.
• Hands-on experience with Infrastructure as Code tools, particularly Terraform.
• Strong understanding of modern authentication and federation protocols: SAML, OIDC, OAuth 2.0, SCIM.
• Experience with hybrid identity models connecting cloud IdPs to on-premises Active Directory.
• SailPoint Certified IdentityIQ Associate or SailPoint Certified IdentityNow Professional is preferred.

Technologies

• BeyondTrust Password Safe, Endpoint Privilege Management (EPM), Privileged Remote Access (PRA)
• Microsoft Entra ID (Azure AD)
• SailPoint IdentityNow, SailPoint IdentityIQ
• Okta, FastPass, FIDO2/WebAuthn
• PowerShell, Python, Terraform
• SAML, OIDC, OAuth 2.0, SCIM
• Active Directory
• SAFe, Agile

Location, Type, and Compensation

• Location: Seattle, WA (hybrid; onsite engagement with 1 day remote)
• Job Type: Contract
• Term: 3-month contract
• Minimum Experience: 2 years
• Compensation: USD 65 per hour