AI-Augmented IAM Security Engineer

About the role

We are looking for an AI‑Augmented IAM Security Engineer to own the hands‑on implementation, configuration, automation and daily operation of enterprise Identity and Access Management (IAM) solutions. Working within the standards and designs defined by IAM architects, you will focus on building, scripting, running and troubleshooting IAM controls while leveraging AI‑driven automations to reduce manual effort.

Key responsibilities

• Implement, configure and operate IAM platforms according to architect‑defined standards.
• Design and maintain automated Joiner/Mover/Leaver lifecycle processes across target systems.
• Configure core IAM capabilities such as SSO, federation, MFA, passwordless authentication, conditional access, RBAC/ABAC and least‑privilege access.
• Develop and maintain integrations with cloud platforms, SaaS applications, directories, databases and APIs using PowerShell, Python, REST, SCIM and Terraform.
• Execute access certification campaigns, entitlement clean‑up and segregation‑of‑duties rule enforcement.
• Operate Privileged Access Management controls, including credential vaulting, secrets rotation, session management and just‑in‑time access.
• Create and support AI‑assisted automations for access request triage, entitlement analysis, anomaly detection and runbook generation.
• Monitor IAM platform health, troubleshoot incidents, apply patches, upgrades and hardening measures.
• Implement logging, alerting, backup and recovery procedures in line with resilience requirements.

Required profile

• Hands‑on experience delivering and operating enterprise IAM solutions.
• Strong background in scripting and automation of identity lifecycle processes.
• Familiarity with security best practices, access certification and privileged access management.
• Ability to work within defined architectures and collaborate with IAM architects and security leadership.

Required skills

• PowerShell
• Python
• REST APIs
• SCIM
• Terraform
• SSO, Federation, MFA, Passwordless authentication, Conditional access
• RBAC, ABAC
• Privileged Access Management
• Credential vaulting, Secrets rotation, Session management
• AI/LLM integration, Function calling, Webhooks