The IAM Engineer is a hands on technical role responsible for the implementation configuration and day to day operations of the organizations Identity and Access Management platforms. The role focuses on administering Ping Identity (SSO or MFA) and BeyondTrust (PAM) solutions managing user and access lifecycle activities configuring authentication policies and enforcing least privilege access. The Engineer will work closely with the IAM Architect security operations
Responsibilities : Experience Required
5 to 8 years of hands on experience in Identity and Access Management engineering including PAM SSO and MFA platform administration.
Key Responsibilities
Perform day to day administration of PAM (BeyondTrust) SSO and MFA (Ping Identity) platforms including configuration changes integrations and health checks.
Execute user and access lifecycle management activities onboarding role changes transfers terminations and privileged account provisioning.
Resolve access issues and incidents troubleshoot authentication failures SSO or federation problems MFA enrollment issues and PAM session errors.
Implement Access & Policy Management changes configure roles authentication policies adaptive access rules and policy maintenance per approved standards.
Enforce Least Privilege onboard privileged accounts to the vault configure session management and recording and remediate excessive entitlements.
Execute periodic access reviews generate certification campaigns support reviewers and process revocations and remediation actions.
Maintain operational documentation runbooks and configuration baselines support audits and compliance evidence gathering.
Technical Skills & Technologies
Ping Identity PingFederate PingAccess PingOne PingID (hands on configuration).