IAM Security Engineer

Location: Saint Louis
Posted on: June 23, 2025

Job Description:

Job Title: IAM Security Engineer Location: Hybrid, St Louis MO Employment Type: Full-Time Salary Range: $70,000 – $120,000 (based on experience) Eligibility: U.S. Citizens or Green Card Holders Only Job Summary: We are seeking a detail-oriented and experienced IAM (Identity and Access Management) Security Engineer to join our cybersecurity team. This role is critical in managing the organization's digital identities, entitlements, and access governance policies across enterprise systems. You will be responsible for the design, development, and implementation of IAM solutions leveraging tools such as SailPoint IdentityIQ (IIQ), Informatica IDQ, SSO, MFA, RBAC, ABAC, and Privileged Access Management (PAM) platforms. Key Responsibilities: Design, implement, and support identity and access management solutions across cloud and on-prem platforms. Integrate SailPoint IIQ for lifecycle management, provisioning, and governance. Utilize IDQ (Informatica Data Quality) for user identity validation and data integrity. Deploy and maintain MFA (Multi-Factor Authentication) and SSO (Single Sign-On) mechanisms using platforms like Okta, Duo, Ping, or Azure AD. Develop and enforce RBAC (Role-Based Access Control) and ABAC (Attribute-Based Access Control) models for least privilege access. Manage and administer PAM tools (CyberArk, BeyondTrust, or Delinea) to secure elevated accounts and session monitoring. Conduct access reviews, recertification campaigns, and policy enforcement. Collaborate with application owners to onboard new systems to IAM. Write and maintain IAM-related policies, procedures, and technical documentation. Monitor IAM logs, generate compliance reports, and support audits (SOX, HIPAA, NIST). ? Required Skills & Experience: 3–7 years of experience in Identity & Access Management and Security Engineering. Hands-on expertise with SailPoint IdentityIQ (IIQ) — rule writing, connectors, workflows. Experience with MFA and SSO integrations (Okta, Azure AD, Duo, Ping). Solid understanding of RBAC, ABAC, and access governance frameworks. Familiarity with IDQ for data quality and identity validation projects. Experience with Privileged Access Management (PAM) tools and session policies. Knowledge of compliance standards: NIST, ISO, SOX, HIPAA. Proficient in scripting languages (PowerShell, Python) for automation. Strong understanding of identity lifecycle (joiner, mover, leaver). Excellent documentation, communication, and collaboration skills. ? Preferred Qualifications: Bachelor’s degree in Computer Science, Cybersecurity, or related field. Certifications: SailPoint Certified Engineer, CISSP, CIAM, Security, Okta Certified Professional. Experience working in regulated industries (Finance, Healthcare, Government). Familiarity with cloud identity services (Azure AD, AWS IAM, Google Cloud IAM). ? Tools & Technologies Used: IAM Platforms: SailPoint IIQ, Okta, Ping Identity, Azure AD, ForgeRock MFA/SSO: Duo Security, Okta Verify, Google Authenticator PAM: CyberArk, BeyondTrust, Delinea, HashiCorp Vault Directory Services: LDAP, Active Directory, Azure AD Scripting: PowerShell, Python, Java (for SailPoint) Compliance Frameworks: NIST 800-53, HIPAA, SOX, PCI-DSS

Keywords: , Chesterfield , IAM Security Engineer, IT / Software / Systems , Saint Louis, Missouri