IAM Engineer – Insurance Domain

Job Title: Senior IAM Engineer / IAM Architect
Experience: 12+ Years
Location: Remote / USA
Employment: Contract
Visa: ,, TN

DAY 1 ONSITE- ERIE , PA
Domain: Insurance / Financial Services

Job Description

We are seeking a highly experienced IAM Engineer / IAM Architect with 12+ years of experience in Identity and Access Management, cybersecurity, and enterprise authentication solutions. The ideal candidate will have strong hands-on expertise in IAM architecture, implementation, integration, access governance, SSO, MFA, privileged access management, and identity lifecycle management, with proven experience supporting Insurance domain applications and environments.

The candidate should have strong knowledge of enterprise IAM platforms and experience integrating IAM solutions with business-critical applications, cloud platforms, APIs, databases, and legacy systems.

Required Skills

• 12+ years of experience in Identity & Access Management (IAM)

• Strong experience in Insurance domain – Life Insurance, P&C Insurance, Health Insurance, Claims, Policy Administration, Underwriting, Billing, or Customer/Agent portals

• Strong hands-on experience with IAM architecture, design, implementation, and administration

• Expertise in Okta, Ping Identity, SailPoint, ForgeRock, Microsoft Entra ID / Azure AD, or similar IAM platforms

• Strong experience with SSO, SAML, OAuth 2.0, OpenID Connect (OIDC), LDAP, Active Directory

• Experience implementing and supporting MFA / Adaptive Authentication

• Strong knowledge of Identity Lifecycle Management (JML – Joiner, Mover, Leaver)

• Experience with RBAC, ABAC, Role Engineering, Access Reviews, and Access Certification

• Experience with IGA (Identity Governance & Administration)

• Strong understanding of Privileged Access Management (PAM)

• Experience integrating IAM with REST APIs, web applications, microservices, databases, and enterprise applications

• Strong scripting/programming experience with Python, PowerShell, Java, or JavaScript

• Experience with AWS / Azure cloud IAM and security

• Strong understanding of Zero Trust security principles

• Experience with CI/CD, DevSecOps, automation, and infrastructure security

• Experience troubleshooting authentication, authorization, federation, and provisioning issues

• Strong knowledge of security standards, policies, and compliance requirements

Insurance Domain Expertise

Candidates must have hands-on experience working with Insurance applications and business processes, including one or more of the following:

• Life Insurance

• Property & Casualty (P&C) Insurance

• Health Insurance

• Claims Management

• Policy Administration

• Underwriting

• Billing & Payments

• Agent/Broker Portals

• Customer Portals

• Insurance CRM applications

• Policyholder identity and access

• Regulatory and compliance requirements

• Secure access to sensitive customer and policy data

Key Responsibilities

• Design, develop, implement, and maintain enterprise IAM solutions

• Architect secure authentication and authorization solutions for insurance applications

• Implement SSO, MFA, federation, and identity lifecycle management

• Integrate IAM platforms with enterprise and insurance applications

• Develop and maintain RBAC/ABAC models and access policies

• Automate user provisioning, deprovisioning, and access management

• Implement identity governance and periodic access certification processes

• Work with security, application, infrastructure, and compliance teams

• Troubleshoot complex authentication and authorization issues

• Develop IAM integrations using REST APIs and scripting

• Support cloud identity solutions across AWS and Azure

• Participate in IAM modernization and legacy application migration initiatives

• Implement security controls aligned with Zero Trust principles

• Support audits, compliance initiatives, and security assessments

• Prepare technical documentation, architecture diagrams, and implementation standards

Preferred Qualifications

• Experience with SailPoint IdentityIQ / IdentityNow

• Experience with Okta Workforce Identity / Customer Identity

• Experience with PingFederate / PingAccess / PingOne

• Experience with Microsoft Entra ID / Azure AD

• Experience with CyberArk or other PAM platforms

• Experience with ServiceNow IAM workflows

• Knowledge of AWS IAM, Cognito, Azure RBAC, and cloud security

• Knowledge of SOC 2, SOX, PCI DSS, HIPAA, NIST, and insurance compliance

• Experience with IAM modernization and migration projects

• Strong communication and stakeholder-management skills

Keywords

IAM Engineer, IAM Architect, Identity and Access Management, Identity Governance, IGA, SailPoint, Okta, Ping Identity, ForgeRock, Entra ID, Azure AD, CyberArk, PAM, SSO, MFA, SAML, OAuth, OIDC, LDAP, Active Directory, RBAC, ABAC, Identity Lifecycle Management, Access Certification, User Provisioning, Deprovisioning, Federation, Zero Trust, AWS IAM, Azure IAM, REST API, Python, PowerShell, Cybersecurity, Insurance, Life Insurance, P&C Insurance, Health Insurance, Claims, Underwriting, Policy Administration, Billing, Insurance Applications, Customer Portal, Agent Portal.

Visa: | | EAD
Experience: 12+ Years
Domain: Insurance