{"id":97818,"url":"https://alion.io/job/invoicecloud-iam-pam-engineer","title":"IAM / PAM Engineer","company":{"id":37427,"name":"InvoiceCloud","domain":"invoicecloud.net","url":"https://alion.io/company/invoicecloud","size_band":"201-500","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":{"grade":"A","score":88,"open_postings":18,"ghost_share":0.111,"stale_share":0,"repost_share":0,"time_to_fill_p50_days":92,"computed_at":"2026-10-16T05:45:00Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Hyderabad, India"],"countries":["IN"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":18000,"max_usd":38000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":11},"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Anomaly Detection","optional":false},{"name":"Azure","optional":false},{"name":"IAM","optional":false},{"name":"Least Privilege","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"Okta","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"Zero Trust","optional":false}],"status":"live","first_seen_at":"2026-05-08T06:50:51Z","employer_posted_date":"2026-08-11","last_verified_at":"2026-10-16T19:24:30Z","board_verified":true,"closed_at":null,"days_open":161,"trust":{"level":"ok","repost_count":0,"flags":["company_stale"],"days_open":160},"description":"About InvoiceCloud: \nInvoiceCloud is a fast-growing fintech leader recognized with 20 major awards in 2025, including USA TODAY and Boston Globe Top Workplaces, multiple SaaS Awards wins for Best Solution for Finance and FinTech, and national customer service honors from Stevie and the Business Intelligence Group. Judges also highlighted our mission to reduce digital exclusion and restore simplicity and dignity to how people pay for essential services, as well as our leadership in AI maturity and responsible innovation. It’s an award-winning, purpose-driven environment where top talent thrives. To learn more, visit InvoiceCloud.com. \nIAM/PAM Engineer\nI\nJob Details:\nWe are seeking a highly skilled and security-focused IAM/PAM Engineer to support the Cybersecurity and Enterprise Technology organizations. This role is responsible for safeguarding access to Invoice Cloud's systems, applications, and cloud environments by designing, implementing, and operating scalable Identity and Access Management (IAM) and Privileged Access Management (PAM) controls.\nThis role builds and maintains the guardrails that ensure the right people and services have the right access to the right resources at the right time. The IAM/PAM Engineer partners closely with IT, Security, Compliance, Infrastructure/Cloud Operations, HR, and application owners to enforce least privilege, strengthen authentication controls, automate identity governance workflows, and produce audit-ready access evidence.\nSuccess in this role means reducing identity-related risk, improving access hygiene, strengthening zero-trust alignment, and enhancing both security and usability across workforce and administrative access environments.\nSuccess Profile:\nThis role is anchored in our company's core competencies. These competencies reflect the mindsets and behaviors that define success in this role. We outline how each competency translates into real-world actions and outcomes specific to this role.\nResults Driven\nLeads Identity Architecture & Access Control Design by designing and administering identity management solutions across hybrid cloud environments, ensuring scalable, secure authentication and authorization patterns - with a primary focus on privileged and non-human identity.\nPartners with IT to strengthen SSO & Authentication Controls (MFA, conditional access, device posture checks), contributing security requirements and control recommendations that drive measurable improvements in coverage and reduced authentication risk.\nLeads Privileged Access Management (PAM) Controls including credential vaulting, just-in-time (JIT) access, least privilege enforcement, and privileged session monitoring to reduce standing administrative risk.\nLeads Non-Human Identity (NHI) Lifecycle & Hygiene - discovering, inventorying, and governing service accounts, secrets, API keys, and machine identities; driving rotation, ownership assignment, and decommissioning of stale credentials.\nDelivers documented 30-, 150-, and 210-day outcomes including improved MFA coverage, reduced privileged-account sprawl, automated de-provisioning, and audit-ready reporting demonstrating improved access hygiene.\nTakes Ownership\nPartners with IT on Identity Governance & Joiner/Mover/Leaver (JML) processes, ensuring security control requirements and audit expectations are embedded in provisioning and de-provisioning workflows.\nConducts structured Entitlement Reviews & Access Drift Remediation, investigating anomalies, resolving privilege creep, and maintaining zero-trust and least-privilege standards across all identities.\nPartners with Security, Compliance, IT, and application owners to define access standards, role models, and evidence requirements that align to regulatory and audit expectations.\nSupports Identity-Related Incident Response by investigating suspicious logins, credential compromise, and privilege misuse events, integrating IAM/PAM telemetry into monitoring and response processes.\nDrives Efficiency\nIntegrates IAM/PAM Telemetry & Monitoring with security tooling to improve visibility into authentication patterns, privileged activity, and anomalous access behaviors.\nStandardizes IAM/PAM documentation including runbooks, operational procedures, escalation paths, and control evidence to ensure repeatable, audit-ready operations.\nAutomates provisioning, access reviews, and reporting workflows using scripting and APIs (e.g., PowerShell, Python, Graph APIs), reducing manual effort and improving timeliness of access management processes.\nEmbeds zero-trust and least-privilege principles into architecture reviews and change-management routines, ensuring identity considerations are consistently incorporated into system design decisions.\nInnovative\nApplies forward-looking identity security practices to evolve zero-trust alignment, improve user experience, and reduce friction while maintaining strong control enforcement.\nLeverages AI and automation to enhance anomaly detection in authentication patterns, streamline entitlement analysis, and generate actionable insights from identity telemetry.\nContinuously evaluates emerging IAM/PAM technologies, authentication protocols (SAML, OIDC/OAuth2, SCIM), and industry best practices, translating them into scalable, adaptive access-control improvements.\nRequirements\nBachelor's degree in Engineering -Computer Science, IT Security ,or a related field (or equivalent experience)\n5+ years of experience in IAM, PAM, or identity-focused security/IT engineering roles.\nExperience implementing and operating identity platforms such as Azure AD (Entra ID), Okta, or similar, with the ability to partner effectively across teams that own those platforms.\nStrong understanding of authentication and federation protocols (SAML, OIDC/OAuth2, SCIM) sufficient to evaluate, advise, and threat-model identity integrations.\nExperience implementing privileged access controls such as vaulting, just-in-time access, and least privilege models.\nHands-on experience automating workflows and integrations using scripting and APIs (e.g., PowerShell, Python, Graph APIs).\nExperience conducting entitlement reviews and partnering on joiner/mover/leaver processes.\nFamiliarity with zero-trust architecture principles and identity governance best practices.\nRelevant certifications such as Azure Security Engineer, Okta Professional, or similar credentials preferred.\nHigh integrity and sound judgment when handling sensitive and confidential information.\nInvoiceCloud is committed to providing equal employment opportunities to all employees and applicants. We do not tolerate discrimination or harassment of any kind based on race, color, religion, age, sex, nationality, disability, genetic information, veteran or military status, sexual orientation, gender identity or expression, or any other characteristic protected under applicable laws.\nThis commitment applies to all aspects of employment, including recruitment, hiring, placement, promotion, termination, layoff, recall, transfer, leave, compensation, and training.\nIf you require a disability-related or religious accommodation during the application or recruitment process, and wish to discuss possible adjustments, please contact .\nClick here to review InvoiceCloud’s Job Applicant Privacy Policy.\nFor recruitment agencies: InvoiceCloud does not accept unsolicited resumes from agencies. Please do not forward resumes to our job aliases, employees, or any other company location. InvoiceCloud is not responsible for any fees associated with unsolicited submissions.","description_format":"text","description_chars":7579,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Billing & Subscription Management","Payment Processing & Gateways"],"lifecycle":[{"event":"open","at":"2026-05-08T06:50:51Z"}],"visa":[],"liveness":{"score":10,"band":"cold","label":"Long shot","p_open":0.4,"p_active":0.723,"p_room":0.36,"age_days":160,"expected_fill_days":92,"reasons":["seen:65","win:tail","crowd:"],"computed_at":"2026-10-16T05:45:00Z"},"pay":null,"html_url":"https://alion.io/job/invoicecloud-iam-pam-engineer","json_url":"https://alion.io/job/invoicecloud-iam-pam-engineer.json","meta":{"generated_at":"2026-10-16T22:24:07Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":3987,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-17T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":37427},"rest":"https://alion.io/mcp/rest/get_company?id=37427"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Finvoicecloud-iam-pam-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Finvoicecloud-iam-pam-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Finvoicecloud-iam-pam-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/invoicecloud-iam-pam-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Finvoicecloud-iam-pam-engineer"}]}