Identity & Access Management Engineer

IDEXX

IAM Engineer managing identity and access governance initiatives for IDEXX. Focused on securing human and non-human identities across the enterprise.

Posted 7/29/2026full-timeWestbrook • Maine • 🇺🇸 United StatesMid-LevelSenior💰 $100,000 - $125,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in Identity Governance and Administration (IGA) solutions, with a strong focus on access management, compliance, and automation. Proficient in implementing least-privilege access models and managing service accounts across cloud and on-premises environments.

Highest-signal resume keywords

Identity Governance And Administration (IGA)Role-Based Access Control (RBAC)Microsoft Entra ID GovernancePowerShell ScriptingAccess Certification

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Identity Lifecycle ManagementEntitlement ManagementService Account ManagementManaged IdentitiesApplication IdentitiesAPI CredentialsWorkload IdentitiesAutomation ScriptingAccess Review ProcessesCredential Rotation

Tools & Technologies

Microsoft Entra IDActive DirectoryAzureAWS IAMGoogle Cloud IAMREST APIsGraph APIServiceNowIAM PlatformsCloud-Native Tooling

Industry Keywords

Audit ComplianceNISTISO 27001SOC 2CIS ControlsGovernance FrameworksIdentity Governance MaturityAutomation PlatformsAI AgentsNon-Human Activity Monitoring

Tech Stack

Tools & technologies

AWSAzureCloudServiceNow

About the role

Key responsibilities & impact

Implement and maintain enterprise Identity Governance and Administration (IGA) solutions.
Design and manage access certification, access review, and entitlement management processes.
Develop and optimize joiner, mover, and leaver workflows.
Support role-based access control (RBAC) and access governance initiatives.
Partner with business stakeholders to define access models and governance controls.
Support audit, compliance, and regulatory requirements through reporting and attestation processes.
Establish governance standards for service accounts across on-premises and cloud environments.
Create and maintain inventory, ownership, classification, and lifecycle processes for service accounts.
Reduce interactive use of service accounts and implement secure authentication methods.
Design controls for credential rotation, privileged access management, and monitoring.
Conduct periodic reviews to identify orphaned, stale, or over-privileged service accounts.
Design and govern Azure Managed Identities and other cloud-native workload identities.
Develop standards for application authentication and authorization.
Partner with application teams to eliminate embedded credentials and secrets.
Implement least-privilege access models for cloud workloads and services.
Monitor and review workload identity permissions for excessive privilege.
Define governance frameworks for AI agents, automation platforms, bots, APIs, and machine identities.
Establish controls for identity creation, ownership, access reviews, and lifecycle management.
Develop policies for agent-to-agent and agent-to-application access.
Ensure visibility and traceability of non-human activity across enterprise systems.
Partner with security teams to mitigate emerging risks associated with autonomous systems and AI-enabled workflows.
Develop automation using PowerShell, Graph API, REST APIs, and cloud-native tooling.
Automate provisioning, deprovisioning, access reviews, reporting, and governance workflows.
Build integrations between IAM platforms, cloud providers, HR systems, ServiceNow, and enterprise applications.
Continuously improve IAM operational efficiency through scripting and workflow optimization.
Enforce least privilege and separation-of-duties controls.
Support security assessments, audit requests, and compliance reviews.
Develop metrics and reporting related to identity governance maturity.
Participate in incident response and investigations involving identity-related risks.
Maintain alignment with industry frameworks such as NIST, ISO 27001, SOC 2, and CIS controls.

Requirements

What you’ll need

5+ years of experience in Identity and Access Management, Identity Governance, or Security Engineering.
Experience implementing or administering IGA platforms such as Microsoft Entra ID Governance, SailPoint IdentityNow / IdentityIQ, Saviynt, Okta Identity Governance
Strong understanding of RBAC, Access Certifications, Entitlement Management, Identity Lifecycle Management
Experience managing Service Accounts, Managed Identities, Application Identities, API Credentials, Workload Identities
Experience with Microsoft Entra ID, Active Directory, Azure, AWS IAM, Google Cloud IAM
Proficiency with PowerShell, REST APIs, and automation scripting.

Benefits

Comp & perks

Health / Dental / Vision Benefits Day-One
5% matching 401k
Additional benefits including but not limited to financial support, pet insurance, mental health resources, volunteer paid days off, employee stock program, foundation donation matching, and much more!