{"id":108210,"url":"https://alion.io/job/idexx-laboratories-identity-access-management-iam-engineer","title":"Senior Identity & Access Management (IAM) Engineer, IGA","company":{"id":5908,"name":"IDEXX Laboratories","domain":"idexx.com","url":"https://alion.io/company/idexx-laboratories","size_band":"201-500","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"A","score":85,"open_postings":29,"ghost_share":0,"stale_share":0.552,"repost_share":0.069,"time_to_fill_p50_days":23,"computed_at":"2026-10-29T05:49:05Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Westbrook, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":100000,"max":125000,"currency":"USD","period":"year","gross":null,"usd_annual":125000},"salary_estimate":null,"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AI Agents","optional":false},{"name":"Azure","optional":false},{"name":"IAM","optional":false},{"name":"ISO 27001","optional":false},{"name":"Java","optional":false},{"name":"Least Privilege","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"Okta","optional":false},{"name":"PowerShell","optional":false},{"name":"Rest API","optional":false},{"name":"ServiceNow","optional":false},{"name":"SOC 2","optional":false},{"name":"Active Directory","optional":true},{"name":"AWS","optional":true},{"name":"BeyondTrust","optional":true},{"name":"CyberArk","optional":true},{"name":"Delinea","optional":true},{"name":"GCP","optional":true},{"name":"ITSM","optional":true}],"status":"live","first_seen_at":"2026-07-28T00:00:00Z","employer_posted_date":"2026-10-19","last_verified_at":"2026-10-30T02:47:08Z","board_verified":true,"closed_at":null,"days_open":94,"trust":{"level":"stale","repost_count":0,"flags":["stale"],"days_open":93},"description":"IT accelerates the success of IDEXX employees and customers by providing scalable and innovative solutions and leadership. We are a global organization that supports all technology needed to deliver products and solutions to customers enabling them to focus on delivering high quality patient care. We strive to provide exceptional customer service and experience in the most efficient means possible, requiring alignment and cross-functional communication.\nWe are seeking a Senior IAM Engineer with direct, hands-on experience implementing and/or administering an enterprise Identity Governance and Administration (IGA) platform - such as SailPoint IdentityNow/IdentityIQ, Saviynt, Okta Identity Governance, or Microsoft Entra ID Governance. This is IDEXX's lead technical hire for a planned enterprise IGA implementation: IDEXX expects to select a platform (most likely SailPoint or Saviynt) by the end of 2026 and carry out an approximately year-long implementation to replace today's largely manual access provisioning with automated, governed identity lifecycle management.\nThis is a technical, hands-on engineering role where you have personally built, configured, scripted, migrated, or automated within an IGA platform.\nIn this role, you will be responsible for…\nIdentity Governance & Administration (IGA) - primary focus\nPersonally implement, configure, and administer the enterprise IGA platform (SailPoint, Saviynt, or equivalent)\nBuild and automate joiner, mover, and leaver (JML) workflows\nConfigure access requests, approval workflows, and access certification/attestation processes\nMap entitlements and integrate applications into the IGA platform\nDesign and implement role-based access control (RBAC) and access governance models\nDevelop scripting and orchestration to automate provisioning, deprovisioning, and governance workflows (Java is particularly relevant within SailPoint/Saviynt environments; other vendor-specific scripting languages may also apply)\nSupport audit, compliance, and regulatory reporting and attestation\nService Account, Managed Identity, and Workload Identity Governance\nEstablish governance standards, inventory, ownership, and lifecycle processes for service accounts across on-prem and cloud\nDesign and govern Azure Managed Identities and other cloud-native workload identities\nReduce interactive use of service accounts; implement secure authentication and credential rotation\nPartner with application teams to eliminate embedded credentials/secrets\nConduct periodic reviews to identify orphaned, stale, or over-privileged accounts\nAI Agents & Non-Human Identity Management\nDefine governance frameworks for AI agents, automation platforms, bots, APIs, and machine identities\nEstablish identity creation, ownership, access review, and lifecycle controls for non-human identities\nEnsure visibility and traceability of non-human activity across enterprise systems\nAutomation & Engineering\nBuild automation using PowerShell, Graph API, REST APIs, and cloud-native tooling\nBuild integrations between the IGA platform, cloud providers, HR systems, ServiceNow, and enterprise applications\nSecurity & Compliance\nEnforce least privilege and separation-of-duties controls\nSupport security assessments, audits, and identity-related incident investigations\nMaintain alignment with NIST, ISO 27001, SOC 2, and CIS frameworks\nWhat you'll need to succeed…\n Direct, hands-on experience personally implementing and/or administering an enterprise IGA platform (SailPoint IdentityNow/IdentityIQ, Saviynt, Okta Identity Governance, or Microsoft Entra ID Governance) - able to clearly describe individual technical ownership: what you configured, built, scripted, migrated, or automated\nFor this role, it is good to have broad general IAM experience or advanced Microsoft Entra ID expertise, but required would be hands-on experience with IGA platform implementation, configuration, or automation experience.\nExperience developing provisioning/deprovisioning workflows, access request and approval processes, RBAC, entitlement mapping, and access certifications within an IGA platform\nScripting and automation experience (Java is particularly valuable in SailPoint/Saviynt environments; other vendor-specific or general-purpose scripting also considered)\n5+ years of experience in Identity and Access Management, Identity Governance, or Security Engineering\nExperience with Microsoft Entra ID, Active Directory, Azure, AWS IAM, or Google Cloud IAM\nProficiency with PowerShell, REST APIs, and automation scripting\nPreferred Qualifications\nExperience with Privileged Access Management (CyberArk, BeyondTrust, Delinea, Microsoft PAM, etc.)\nExperience governing AI agents, automation platforms, and machine identities\nKnowledge of cloud-native authentication methods and secrets management\nExperience integrating IAM/IGA solutions with HR, ITSM, and enterprise application ecosystems\nSailPoint, Saviynt, Microsoft, CISSP, Security+, or other relevant IAM/IGA certifications\nLocation: Preference for candidates within driving distance of IDEXX HQ in Westbrook, Maine (flexible hybrid - 8 days/month on-site). Also open to candidates in NH or MA who can come on-site less frequently. Recruiting is initially focused on ME, NH, and MA.\nWhat you can expect from us:\nBase annual salary target: $100000 - $125000 (yes, we do have flexibility if needed)\nOpportunity for annual cash bonus\nHealth / Dental / Vision Benefits Day-One\n5% matching 401k\nAdditional benefits including but not limited to financial support, pet insurance, mental health resources, volunteer paid days off, employee stock program, foundation donation matching, and much more!\nWhy IDEXX?\nWe’re proud of the work we do, because our work matters. An innovation leader in every industry we serve, we follow our Purpose and Guiding Principles to help pet owners worldwide keep their companion animals healthy and happy, to ensure safe drinking water for billions, and to help farmers protect livestock and poultry from diseases. We have customers in over 175 countries and a global workforce of over 10,000 talented people.\nSo, what does that mean for you? We enrich the livelihoods of our employees with a positive and respectful work culture that embraces challenges and encourages learning and discovery. At IDEXX, you will be supported by competitive compensation, incentives, and benefits while enjoying purposeful work that drives improvement.\nLet’s pursue what matters together.\nIDEXX values a diverse workforce and workplace and strongly encourages women, people of color, LGBTQ+ individuals, people with disabilities, members of ethnic minorities, foreign-born residents, and veterans to apply.\nIDEXX is an equal opportunity employer. Applicants will not be discriminated against because of race, color, creed, sex, sexual orientation, gender identity or expression, age, religion, national origin, citizenship status, disability, ancestry, marital status, veteran status, medical condition, or any protected category prohibited by local, state, or federal laws.","description_format":"text","description_chars":7053,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["401k plan"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Veterinary Medicine","Environmental Science"],"lifecycle":[{"event":"open","at":"2026-07-28T00:00:00Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"H-1B filings in 12 months: 17 · green card filings: 1","filings_12m":17,"filings_prev_12m":21,"green_card_filings_12m":1,"median_offered_wage_usd":145556,"route":null,"cap_exempt":false,"checked_at":"2026-10-29T16:27:21+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)","US Department of Labor: PERM disclosure data (green cards)"],"filings_for_role_12m":1}],"liveness":{"score":10,"band":"cold","label":"Long shot","p_open":1,"p_active":0.362,"p_room":0.28,"age_days":93,"expected_fill_days":23,"reasons":["conf:4","stale_co","velocity","win:tail","crowd:brand"],"computed_at":"2026-10-29T05:49:05Z"},"pay":{"stated_usd_annual":125000,"is_top_pay":false},"html_url":"https://alion.io/job/idexx-laboratories-identity-access-management-iam-engineer","json_url":"https://alion.io/job/idexx-laboratories-identity-access-management-iam-engineer.json","meta":{"generated_at":"2026-10-30T04:43:40Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":6534,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-31T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":5908},"rest":"https://alion.io/mcp/rest/get_company?id=5908"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fidexx-laboratories-identity-access-management-iam-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fidexx-laboratories-identity-access-management-iam-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fidexx-laboratories-identity-access-management-iam-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/idexx-laboratories-identity-access-management-iam-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fidexx-laboratories-identity-access-management-iam-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":108210}},{"tool":"search_jobs","arguments":{"company":"idexx.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":108210},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}