Apply on Employer Site

MartinFed · 2 days ago

Identity & Access Management (IAM) Engineer

Oak Ridge, TN

Full-time

Onsite

Senior Level

5+ years exp

MartinFed is an award-winning small business providing IT and engineering solutions to federal agencies. They are seeking an Identity & Access Management (IAM) Engineer to engineer and administer SailPoint IdentityIQ, focusing on Zero Trust architecture and access governance.

ConsultingCorporate TrainingInformation ServicesInformation TechnologySoftware

Comp. & Benefits

No H1B

Security Clearance Required

U.S. Citizen Only

Responsibilities

Engineer/administer SailPoint (IIQ/IDN): configuration, workflows, rules/policies, testing, deployment, maintenance

Onboard applications: connectors for EntraID, SaaS, on‑prem , DBs, directories (AD/LDAP), and HRIS (Workday/SuccessFactors)

Automate JML: provisioning/deprovisioning, birthright/role-based access, movers entitlements

Access governance: entitlements, group management, SOD policies, certification campaigns

Role engineering: business/technical roles aligned to least privilege

Platform ops: patching, upgrades, performance tuning, troubleshooting

Customization: rules/workflows/tasks (Java/Beanshell for IIQ), UI config, reporting, dashboards

Implement identity-first controls: MFA, PKI, conditional access, adaptive/risk-based auth

Integrate with CASB and endpoint posture signals

Align with Zero Trust principles (least privilege, continuous verification)

Build APIs/scripts (PowerShell, Python) for IAM workflows

Support CI/CD for IAM configs and environment promotion

Maintain audit evidence; enforce SOD; reduce identity risk through metrics

Qualification

SailPoint IdentityIQZero Trust architectureIAM/IGA experienceScripting PowerShellScripting PythonIdentity protocols (OIDC/OAuth2/SAML)SailPoint certificationsCISSPAZ-500Integration with CASBServiceNow experience