Identity Access Management Engineer

About the role:

The Identity Access Management (IAM) Analyst will serve as a subject matter expert (SME) within TQL's identity and access management (IAM) program, leading key operational activities to ensure that employees, applications, and end-users are granted access securely and efficiently. This role involves designing, configuring, and supporting IAM solutions while collaborating with stakeholders to modernize identity management processes across the organization.

What's in it for you:

• $103,500 - $129,400 base salary and benefits package
• Health, Dental and Vision coverage to best fit your needs, including a plan that takes $0 out of your paycheck + 401(k) with company match
• Advancement opportunities with aggressive and structured career paths
• TQL's IT Team offers a hybrid work environment with the ability to work remotely 40 hours per month
• Access to the latest emerging technologies
• Reimbursement for continuous education and technical training
• We win wherever we go - Voted a 2019-2023 Computerworld Best Places to Work in IT
  

What you'll be doing:

• Develop new access governance processes in line with industry best practices
• Design roles (RBAC), workflows, and certifications for implementation in IAM systems and Privileged Access Management (PAM) solutions
• Define and control identification, authentication, and privileges in an extended Microsoft environment
• Configure out-of-the-box connectors and write code for custom connectors within the IAM system
• Configure SAML for third-party applications to integrate with the Identity Governance and Administration (IGA) system
• Modernize application identity management for integration into the IAM system, coordinating closely with stakeholders
• Translate business processes and legacy processes into functionality within IAM systems
• Create and maintain up-to-date documentation to support IAM solutions and their configuration
• Develop user access/activity reports to support access recertification, business unit, and regulatory requests
• Provide training and support to internal teams and end-users on IAM processes and tools
• Review IT tickets to address and resolve access problems promptly
• Limit security risks by setting access boundaries for accounts and restricting highly privileged access
  

What you need:

• Bachelor's degree in computer science, technology, or a related field
• 5+ years of experience working with an IGA solution (SailPoint, Saviynt, Okta)
• 5+ years of experience administrating Active Directory and/or Entra ID
• 2+ years of experience in object-oriented programming (Java, C#, Python) or scripting (PowerShell)
• 2+ years of experience working with a Privileged Access Management suite (e.g., Entra PIM, CyberArk, PAM 360)
• Demonstrate a genuine curiosity for understanding systems both independently and in relation to other interconnected systems
• Exhibit a passion for problem-solving in ambiguous situations, including researching solutions or conducting independent testing
• Deep understanding of IAM principles, methodologies, and solutions, including access control (role-based and discretionary), authentication, authorization, provisioning, approvals, and workflows
• Excellent written, verbal, and presentation skills; ability to effectively explain complex technical concepts to both technical and non-technical stakeholders
• 2+ years of experience in planning and implementing advanced system administration tasks, including hands-on involvement in setting up, configuring, and optimizing new systems to meet organizational needs
• 2+ years of experience developing integrations that consume APIs (SOAP/RESTful)
• 2+ years of customer-facing IT service experience (e.g., Help Desk, Desktop Engineering
  

Where you'll be: 4289 Ivy Pointe Blvd, Cincinnati, OH 45245