[Hiring] Senior IAM Engineer @Aubrant Digital

Role Description

Aubrant Digital is seeking a Senior IAM Engineer, Identity Governance, to be the go-to engineer for a large US-based client's SailPoint environment, which governs 75,000+ identities. You will:

• Own SailPoint configuration, updates, upgrades, and incident response.
• Plan and run access certification campaigns.
• Build and maintain connectors and workflows.
• Own joiner, mover, and leaver processes and script provisioning that is still manual.
• Run updates that can't happen during the day in planned off-hours windows.
• Support CyberArk privileged access operations.
• Back up the senior Ping engineer, who backs you up in turn.

You will join Aubrant's cloud and infrastructure engineering group (we call it a Studio), which gives you a technical leader to escalate to, peers on other engagements to call on, and a shared catalog of scripts and hardened builds to start from.

Qualifications

• 7+ years in identity and access management, with 4+ years hands-on with SailPoint.
• Experience with access certification campaigns.
• Building and maintaining SailPoint connectors and workflows.
• Joiner, mover, and leaver process design and automation.
• Active Directory and Entra ID in a hybrid setup.
• Scripting in PowerShell or Python, with changes kept in a Git repository (the client uses GitHub).
• Ability to triage and resolve tickets and alerts independently through incident, change, and problem management, escalating only when needed.
• Willingness and availability to participate in the client's seven-day on-call rotation and to shift working hours for planned overnight maintenance windows.
• Professional written and spoken English; daily collaboration with a US-based client team.

Requirements

• Ping (PingFederate) and SSO, enough to cover for the Ping engineer.
• CyberArk.
• Microsoft 365 administration.
• GitHub and ServiceNow.
• Automating identity processes beyond scripting: forms, workflows, and built-in tool features that remove manual steps such as service account requests.

Could-Have / Nice-to-Have Requirements

• Relevant vendor certifications (not required; hands-on experience is valued over certificates).

Ideal Candidate Traits

• Curious, proactive, and collaborative.
• Strong communication and teamwork skills are important.
• Committed to delivering solutions together, not in competition.
• Embraces Works Agile comfortably methodology inside the client's incident, change, and problem management.
• Keeps looking for the next thing to automate and promotes a one-team culture.