Cyber Security- IAM Engineer

Identity and Access Management (IAM) Security Engineer
Contract to hire
Hybrid- Candidate can work out of Milwaukee, Green Bay, or Chicago
Position Overview
We are seeking an experienced IAM Security Engineer to support the design, implementation, integration, and ongoing administration of enterprise identity and access security solutions. This position follows a hybrid work model, combining remote work with regular on-site collaboration.
Role level may be aligned to the candidate's experience, technical depth, and education.
Key Responsibilities

• Implement, integrate, configure, upgrade, and deploy IAM technologies supporting identity lifecycle management, identity governance, automated provisioning, single sign-on, federation, and privileged access management.
• Administer and troubleshoot IAM integrations across Active Directory, LDAP, databases, application servers, web services, authentication platforms, and security monitoring tools.
• Support privileged account administration for Windows and Linux/UNIX systems, databases, network devices, service accounts, DevOps platforms, vulnerability-scanning tools, and scripted processes.
• Investigate and resolve issues involving password rotation, account onboarding, connector failures, authentication, provisioning, and system integrations.
• Configure and maintain privileged access environments, including safes, platforms, owners, backups, connectors, and related access controls.
• Implement and support cloud identity capabilities, including conditional access, multifactor authentication, single sign-on, federation, and related directory services.
• Develop and execute test cases, test plans, validation procedures, and implementation documentation for IAM solutions.
• Create and maintain scripts or automation that improve provisioning, account management, monitoring, and operational efficiency.
• Collaborate with cybersecurity, infrastructure, application, networking, and operations teams to resolve access-related issues and deliver secure solutions.
• Contribute to the ongoing improvement of identity governance, privileged access controls, machine identity management, and access risk reduction.

Minimum Qualifications

• Bachelor's degree in computer science, computer engineering, software engineering, information technology, information systems, cybersecurity, or a related engineering discipline is preferred.
• Equivalent combinations of education, military service, professional cybersecurity experience, and industry certifications may be considered.
• At least two years of cybersecurity experience, preferably involving IAM architecture, engineering, implementation, or operations.
• Strong troubleshooting, communication, documentation, and interpersonal skills.

Preferred Qualifications

• At least two years of hands-on IAM implementation experience with an enterprise platform such as SailPoint, One Identity, BeyondTrust, or a comparable solution.
• At least two years of experience working with Active Directory, LDAP, JDBC, REST, SOAP, and web service connectors.
• Experience administering or integrating privileged access management solutions and connectors.
• Experience with cloud platforms and identity services, including Azure, AWS, or Google Cloud.
• Experience with Active Directory design, administration, and security controls.
• Scripting or automation experience using Python, PowerShell, .NET, C#, or VB.NET.
• Knowledge of role-based access control, machine identity management, network access management, DNS, and DHCP.
• One or more relevant certifications, such as CISSP, CISM, OSCP, CCSP, GIAC, MCSE, GICSP, CSSA, or CEH.

Additional Information
This is an opportunity to join a cybersecurity team focused on strengthening enterprise identity controls, improving access governance, and supporting secure technology operations. Work arrangement, title level, and specific responsibilities may vary based on business needs and candidate qualifications.