IAM Security Engineer

Esri is a company focused on creating positive global change through GIS technology. They are seeking an IAM Security Engineer to join their Enterprise Information Security team, where the primary responsibilities include designing and enhancing IAM solutions, managing IAM lifecycle processes, and collaborating cross-functionally to align IAM processes with organizational needs.

What you'll do:

• Design, develop, and enhance IAM solutions integrating enterprise applications and security services
• Manage IAM lifecycle processes, including provisioning, de-provisioning, access request and periodic access certification
• Deploy and configure connectors within SailPoint IdentityIQ/IDN for various enterprise systems including custom connectors for home grown applications
• Develop and maintain high-quality, reusable features and components using Java and other scripting languages
• Administer and support LDAP, Single Sign-On (SSO), federation, SAML, OAuth, OIDC and enterprise IAM systems
• Implement and support cloud-based identity platforms such as Microsoft Entra ID
• Engineer and manage identity integrations with ServiceNow, including form development, workflow design, access request catalog items, and automation of approval processes
• Design and manage identity-related workflows in SailPoint to support access governance and provisioning processes
• Support identity and mailbox provisioning and management within Microsoft Exchange Online and on-premises Exchange environments
• Develop and maintain PowerShell automation scripts, and bulk identity updates across Active Directory and integrated system
• Provide Level 2-3 support, ensure SLA compliance, perform access data cleanup and certification, and participate in on-call support as required
• Implement conditional access policies, MFA and governance standards across enterprise applications

What they're looking for:

• 2+ years of experience in IAM planning, implementation, and operations
• 2+ years of Java development experience
• 2+ years developing IAM solutions using SailPoint IdentityIQ
• Foundational knowledge of identity technologies such as SailPoint, Ping, CA, and Entra
• Proficiency managing LDAP directories, Active Directory, REST Webservices, SAML, OIDC, databases, PowerShell
• Strong analytical, problem-solving, and communication skills
• Visa sponsorship is not available for this posting. Applicants must be authorized to work for any employer in the US
• Bachelor's degree in computer science or a related STEM field
• 1+ years of ServiceNow Form/Workflow development experience is a strong plus
• Experience with CI/CD pipelines
• Experience with AWS, Linux
• Experience with authentication libraries, MSAL, Passport

Benefits:

• Industry-leading health and welfare benefits: medical, dental, vision, basic and supplemental life insurance for employees (and their families)
• 401(k) and profit-sharing programs
• Minimum accrual of 80 hours of vacation leave
• Twelve paid holidays throughout the calendar year
• Opportunities for personal and professional growth