Senior IAM Engineer

Acrisure

IAM Engineer responsible for secure identity and access management across multi-cloud infrastructures. Collaborating on governance, automation, and user experience strategies in Information Security.

Posted 6/16/2026full-timeOklahoma City • Oklahoma • 🇺🇸 United StatesSeniorWebsite

Tech Stack

Tools & technologies

AWSAzureCloudPythonTerraform

About the role

Key responsibilities & impact

You will be a hands-on IAM engineer who designs, automates, and scales secure identity and access controls across cloud and enterprise environments.
You’ll build paved-road patterns for identity federation, least privilege, and just-in-time access — ensuring that authentication and authorization boundaries are strong, measurable, and frictionless.
Architect and Automate Identity Foundations.
Develop paved road templates for access control patterns (e.g., federated access, role assumption, service accounts, workload identity).
Automate provisioning and deprovisioning pipelines using identity APIs, SCIM, and workflow orchestration tools (e.g., SailPoint, Okta Workflows, Azure Automation, or Terraform).
Implement policy-as-code for IAM guardrails (e.g., least-privilege enforcement, conditional access, MFA requirements, privilege expiration).
Engineer federated identity solutions for users, applications, and partners using SAML, OIDC, and OAuth2.
Manage conditional access policies, adaptive authentication, and passwordless strategies to balance security with user experience.
Define and enforce least privilege for human and machine identities across AWS, Azure, and SaaS platforms.
Integrate IAM governance with enterprise GRC systems to ensure traceability and audit readiness.
Partner with AppSec and Cloud teams to secure authn/z boundaries across applications, APIs, and services.
Implement and maintain privileged access vaulting and session control using platforms like CyberArk, BeyondTrust, Delinea, or Azure PIM.
Continuously monitor and remediate excessive privileges across cloud and on-prem accounts.
Automate joiner/mover/leaver processes and identity lifecycle events through API-driven workflows and HR system integrations.
Conduct periodic access reviews and certifications; deliver evidence for SOC2, PCI, and ISO audits.
Collaborate with Security Operations to define identity-related detections (impossible travel, lateral movement, privilege abuse).

Requirements

What you’ll need

5+ years of experience in Identity and Access Management engineering, including multi-cloud and hybrid enterprise environments.
Strong knowledge of Azure AD / Entra ID, AWS IAM, and SAML / OIDC / OAuth2 / SCIM protocols.
Proficiency with identity automation using PowerShell, Python, Terraform, or APIs.
Experience with PAM platforms (CyberArk, BeyondTrust, or Azure PIM) and IGA tools (SailPoint, Saviynt, or Okta).
Familiarity with conditional access, MFA enforcement, and passwordless authentication in large-scale environments.
Understanding of zero trust architecture, least privilege design, and role-based access control (RBAC) principles.
Proven ability to interpret business access needs and translate them into secure, scalable IAM solutions.
Relevant certifications such as CISSP, CISM, Azure Security Engineer Associate, AWS Security – Specialty, or Okta Certified Professional.

Benefits

Comp & perks

Comprehensive medical insurance, dental insurance, and vision insurance
Life and disability insurance
Fertility benefits
Wellness resources
Paid sick time
Generous paid time off and holidays
Employee Assistance Program (EAP)
Complimentary Calm app subscription
Immediate vesting in a 401(k) plan
Health Savings Account (HSA) and Flexible Spending Account (FSA) options
Commuter benefits
Employee discount programs
Paid maternity leave and paid paternity leave (including for adoptive parents)
Legal plan options
Pet insurance coverage
… and so much more! This list is not exhaustive of all available benefits. Eligibility and waiting periods may apply to certain offerings.

ATS Keywords

✓ Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools

Identity and Access Managementidentity automationPowerShellPythonTerraformSAMLOIDCOAuth2SCIMrole-based access control

Soft Skills

collaborationinterpretation of business access needsscalable IAM solutions

Certifications

CISSPCISMAzure Security Engineer AssociateAWS Security – SpecialtyOkta Certified Professional