Iam Engineer II

Salary: $92,000 - 118,000 per year Requirements: We prefer a bachelors degree, though a high school diploma or equivalent combined with substantial relevant experience may be accepted in place of a degree; a high school diploma or equivalent is required. We look for 1-3 years of experience in IT, security operations, or identity administration. We need a solid grasp of identity security concepts, including authentication, authorization, federation, credential management, and account lifecycle management. We expect familiarity with SAML, OIDC, and basic authentication and authorization principles. We value understanding of IAM concepts such as MFA, RBAC, provisioning, and Joiner/Mover/Leaver workflows. We require basic scripting exposure in PowerShell, Python, JavaScript, or similar languages. We need strong analytical and troubleshooting abilities, along with keen attention to detail. We expect the ability to follow documented procedures and keep records accurate. Preferred: experience with an IAM platform, including provisioning, access requests, access reviews, and connectors. Preferred: experience onboarding applications for SSO. Preferred: exposure to Privileged Access Management tools and workflows. Preferred: understanding of security frameworks and controls such as least privilege, separation of duties, and zero trust. Preferred: ability to read logs and troubleshoot authentication or provisioning issues. Preferred certifications include CompTIA Security+, Microsoft SC-900, Microsoft SC-300, (ISC)2 CC, or SSCP. Responsibilities: We execute daily identity and access management operations across our identity management platforms. We support user onboarding and offboarding, SSO integrations, access requests, entitlement administration, and basic privileged access activities. We apply identity controls consistently and securely to help ensure reliable access and reduce organizational risk. We onboard applications to identity platforms using REST APIs and JSON field mapping. We onboard applications for SSO using standard SAML/OIDC templates. We ensure adherence to least privilege and separation of duties requirements. We collect and retain evidence for audits and identity reviews. We follow established change management, documentation, and incident management processes. We use PowerShell or basic REST API calls for simple identity queries and repeatable tasks. We maintain runbooks, knowledge base articles, and user-facing guides. We take part in identity-related incident handling and troubleshooting. We automate Joiner/Mover/Leaver processes, including provisioning, de-provisioning, access requests, and access reviews. We ensure group-based and role-based access is assigned accurately and on time. We troubleshoot identity issues such as failed provisioning tasks, directory sync problems, and entitlement assignment errors. We process access requests and approvals while maintaining entitlement catalogs and birthright access definitions. We assist with quarterly and ad hoc access certification campaigns. We perform other duties as assigned. Technologies: API IAM Incident Management Support JSON JavaScript PowerShell Python REST RBAC SAML Security AI DevOps Network More: We are SGA, a technology and resource solutions provider with a boutique, personal approach to solving complex IT challenges. We are a women-owned business that matches consultants to more than 1,000 engagements each year. This IAM Engineer II contract role is remote and supports one of our premier infrastructure services clients. You will join a diverse team that values customer service, employee development, and quality and integrity in everything we do. We are an equal opportunity employer and are committed to access, equal opportunity, and reasonable accommodation for individuals with disabilities. last updated 37 week of 2026