Cybersecurity Staff Engineer – IAM Consultant

Introduction

We are seeking a senior Cybersecurity Staff Engineer – IAM / CIAM Consultant with strong hands-on experience in Customer Identity and Access Management, SailPoint Identity Security Cloud, Active Directory, and Microsoft Entra ID. The ideal candidate will support enterprise identity initiatives across workforce IAM and customer identity use cases. This role requires strong technical depth in identity governance, identity lifecycle, application integrations, access controls, authentication, authorization, and identity data flows.

Responsibilities

• Lead and support Customer Identity and Access Management initiatives across customer-facing and external-user applications.
• Design, configure, and support CIAM registration, login, MFA, passwordless authentication, account recovery, and profile management flows.
• Support CIAM integrations for web, mobile, SaaS, partner, and internal applications.
• Work with SailPoint Identity Security Cloud / ISC for identity governance, access modeling, RBAC, application onboarding, certifications, and lifecycle processes.
• Work with Active Directory and Microsoft Entra ID for identity, group, role, and access management.
• Analyze identity data, entitlements, roles, groups, and access models.
• Support SSO, MFA, federation, and authentication-related integrations.
• Provide technical mentorship to junior engineers and develop documentation to support operational continuity and audit readiness.
• Contribute to the strategic roadmap for IAM, identifying opportunities for innovation, risk reduction, and operational efficiency.
• Provide weekly status updates, risks, issues, and recommendations to leadership.

Requirements

Required Skills:

• 8 years of experience in Identity and Access Management engineering, cybersecurity, or a related field.
• Strong hands-on experience with Customer Identity and Access Management platforms and customer-facing identity use cases.
• Strong hands-on experience with SailPoint Identity Security Cloud / ISC, including sources, connectors, identity profiles, access profiles, roles, entitlements, certifications, workflows, provisioning, and lifecycle states.
• Strong experience with Active Directory, including users, groups, OUs, permissions, service accounts, and group-based access.
• Strong experience with Microsoft Entra ID / Azure AD, including enterprise applications, app registrations, conditional access, MFA, groups, external identities, and identity governance.
• Experience designing, implementing, or supporting customer registration, login, MFA, account recovery, profile management, and lifecycle flows.
• Experience with B2B, B2C, partner, vendor, and external-user identity models.
• Experience with SSO, federation, and provisioning technologies, including SAML, OAuth 2.0, OIDC, LDAP, and SCIM.
• Experience with CIAM security controls, including adaptive authentication, risk-based authentication, step-up authentication, session management, botprotection, and account takeover prevention.
• Ability to troubleshoot CIAM and IAM issues across authentication, authorization, federation, provisioning, synchronization, MFA, sessions, and application access.
• Ability to work with application owners, security teams, infrastructure teams, audit teams, privacy teams, and business stakeholders.
• Excellent communication, analytical, and organizational skills.
• Comfortable working independently or within a team in a hybrid work environment.

Preferred Skills:

• CIAM
• Customer Facing
• OIDC
• SailPoint
• SAML
• Okta
• Auth0