Identity & Access Management (IAM) Engineer

IAM Engineer needed to design and develop IAM architecture (Okta or equivalent IdP): SSO (SAML/OIDC), SCIM provisioning, groups/RBAC, lifecycle, MFA/passkeys; build and maintain identity governance (least-privilege, quarterly access reviews, joiner/mover/leaver with offboarding); advance Zero Trust (conditional access, device trust, MDM like Mosyle/Jamf); administer corporate SaaS identity (Google Workspace, Slack) including SSO integrations and cross-domain migrations; automate IAM processes via API and scripts (n8n/Make); document processes and act as technical reference for the team. The role requires 3-4+ years in IAM or related IT-security roles, practical IdP experience, SSO/SCIM/RBAC, access governance, Zero Trust, SaaS identity administration, API automation skills, and experience with AI tooling in enterprise environments. Nice-to-have: Okta expertise, tenant migrations experience, certifications (Okta, CompTIA Security+), SOC 2 / ISO 27001, cloud security (AWS IAM), and secrets management (1Password).