{"id":3129580,"url":"https://alion.io/job/kalles-group-identity-operations-engineer-consultant-access-lifecycle-automation","title":"Identity Operations Engineer Consultant - Access Lifecycle & Automation","company":{"id":679202,"name":"Kalles Group","domain":"kallesgroup.com","url":"https://alion.io/company/kallesgroup","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":null},"role":"Industrial Engineering","role_family":"Industrial Engineering","seniority":"middle","employment_type":null,"work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Seattle, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":120000,"max":140000,"currency":"USD","period":"year","gross":null,"usd_annual":140000},"salary_estimate":null,"experience_years_min":3,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Azure","optional":false},{"name":"IAM","optional":false},{"name":"ITSM","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"Power Automate","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"Rest API","optional":false},{"name":"Service Desk","optional":false},{"name":"ServiceNow","optional":false},{"name":"BeyondTrust","optional":true},{"name":"Bicep","optional":true},{"name":"SIEM","optional":true},{"name":"Terraform","optional":true}],"status":"live","first_seen_at":"2026-10-22T22:47:10Z","employer_posted_date":"2026-10-22","last_verified_at":"2026-10-28T00:06:52Z","board_verified":true,"closed_at":null,"days_open":5,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":5},"description":"ABOUT KALLES GROUP:\nEveryone deserves to be secure. Our mission at Kalles Group is to help secure the future for companies of all shapes and sizes.\nWhile our expertise spans multiple disciplines, our method remains consistent: building trust and relationship with people -- whether you are a client, a consultant, or--in this case--a candidate.\nNo matter what role you come from--whether you're an executive or just starting your career-you can expect our highest level of attention and respect. We want to find the right fit for each role, but we also want you to find the right fit for your career.\nWe believe the best way to show you what our team is like is to treat you like you're already a part of it. We hope you'll consider joining our team of experienced professionals who are building their careers at Kalles Group-and having fun while doing it.\nWHAT YOU WILL DO: \nAs an Identity Operations Engineer with Kalles Group, you’ll be on assignment with one of our enterprise clients, supporting workforce, partner and contractor access across Microsoft Entra ID and SailPoint Identity Security Cloud while the client moves application authentication from a legacy identity provider to Entra. This is a hands-on operations role. Most of your time will go to working the identity ticket queue: joiner/mover/leaver events, access requests, provisioning and hybrid sync failures, privileged access, access certifications, and audit evidence for SOX and PCI. The rest of your time you’ll spend automating repeat work with PowerShell, Microsoft Graph, SailPoint ISC APIs and workflow tools such as Logic Apps, Power Automate and Azure Automation/Functions, all integrated with the ITSM platform. When access breaks, you’ll be the go-to escalation point, working closely with Identity Architecture, HR, ITSM, application owners and Security Operations to resolve issues quickly and prevent repeats. This is a hybrid role in Seattle, with after-hours support as needed.\nKEY RESPONSIBILITIES: \nIDENTITY LIFECYCLE OPERATIONS (Joiner / Mover / Leaver)\nFulfill JML requests from the ITSM queue within SLA - account creation, baseline/role-based access, transfers & promotions, timely deprovisioning (terms, contractors, leaves).\nOperate SailPoint ISC day to day - access requests, provisioning failures, aggregations & identity refreshes, attribute/source-data fixes, role & access profile assignments.\nAdminister Entra ID - users, groups (incl. dynamic), licensing, enterprise app role assignments, guests, Lifecycle Workflows and Entitlement Management requests.\nTroubleshoot HR-to-identity provisioning and hybrid sync (Entra Connect / Cloud Sync) - attribute mismatches, duplicate/conflicting accounts.\nHandle privileged/elevated access (PIM eligible assignments, role-assignable groups) with approvals and audit trail.\nSupport app access - SSO (SAML/OIDC) assignments, SCIM errors, onboarding apps/connectors to established patterns.\nRun access certification / review campaigns operationally and produce audit evidence (SOX, PCI).\nOngoing account hygiene - orphaned/dormant/stale accounts, guest cleanup, service account inventory, Entra/SailPoint/AD reconciliation.\nAUTOMATION & CONTINUOUS IMPROVEMENT\nBuild lifecycle/access automation with PowerShell, Graph API / Graph PowerShell SDK, Python, SailPoint ISC APIs, workflows and rules.\nEvent-driven/scheduled workflows (Azure Automation, Logic Apps, Power Automate, Azure Functions) with ITSM ticket auto-fulfillment and closure.\nAnalyze ticket volume, SLAs and failure patterns to target automation; track tickets eliminated, time saved, error reduction.\nTreat automation as production code - source control, peer review, testing, logging, error handling. Use AI tooling to speed scripting and troubleshooting.\nACROSS THE ROLE\nWrite runbooks, SOPs and KB articles; serve as escalation point for service desk and app teams.\nPartner with HR/HRIS, ITSM and SecOps on data quality, lifecycle timing and identity signals.\nParticipate in identity incident response, including after-hours support as needed.\nABOUT YOU:\nYour values:\nIntegrity: You believe in doing the right thing, even when it's uncomfortable, seemingly inefficient, or costly.\nPurposefulness: You have a desire to serve others with your skillset and an openness to continuous learning and growth.\nOwnership: You stick to your commitments, follow up with action, and seek clarity in communication & expectations.\n\nYOUR EXPERIENCE:\nRequired Qualifications\nBachelor's/master's in CS, Cybersecurity, IT, or equivalent experience.\n3+ years in IAM, IAM operations, or systems/security engineering, including hands-on JML processes.\nHands-on Entra ID user/group/app admin; working knowledge of Conditional Access, PIM, and Entra ID Governance (Lifecycle Workflows, Entitlement Management, Access Reviews).\nHands-on enterprise IGA operations - SailPoint ISC/IdentityNow preferred (comparable IGA considered): access requests, provisioning, source connectors, troubleshooting.\nPowerShell and Microsoft Graph API / Graph PowerShell SDK required; Python and REST API integration strongly valued.\nWorking knowledge of SAML, OAuth 2.0, OIDC, SCIM sufficient to troubleshoot SSO/provisioning.\nHybrid identity - on-prem AD, Entra Connect / Cloud Sync; sync and attribute troubleshooting.\nITSM ticketing (e.g., ServiceNow), managing queues against SLAs, documenting to audit standards.\nStrong troubleshooting, attention to detail, clear communication with technical and non-technical partners.\nPreferred Qualifications\nCertifications: SC-300, SailPoint ISC, AZ-500, Security+, or CISSP.\nITSM-integrated automation (e.g., ServiceNow → SailPoint or Entra fulfillment).\nLow-code automation (Power Automate, Logic Apps) and IaC/config-as-code (Terraform, Bicep).\nHRIS-driven provisioning (e.g., Workday) and source-of-truth data quality.\nPAM familiarity (e.g., BeyondTrust) and PAM/PIM interplay.\nAudit/compliance support (SOX, PCI) for access controls and evidence.\nITDR exposure; identity signals into SIEM/SOAR.\nLarge-scale retail, ecommerce, or high-transaction enterprise experience.\nWHAT WE OFFER:\nThe annual salary range for this role is $120,000-$140,000. \nWe offer Medical, Dental, Vision plans, 401K with matching, and PTO for salaried employees.\nWork/life balance - we know there’s more to life than work! We encourage our team to pursue other passions, get outside, and spend time with family. We work with clients and consultants to set expectations for a manageable workload.\nLOCATION:\nThis role is hybrid with onsite requirements at our client's location in Seattle, WA. Therefore, we are currently only considering candidates that are already living in the Seattle area.\nHOW TO APPLY:\nPlease fill out the form below (including uploading your most recent resume) and we'll be in touch! We know imposter syndrome can be a barrier to many great applicants. We hope you'll still consider applying. That's why we've made the application process as short and simple as possible.\nEven if you're not a fit for the role, you can expect to hear back from us! We want you to have the best experience as a candidate, so please feel free to share feedback at any stage of the process to .\nKalles Group is an equal-opportunity employer and does not discriminate on the basis of creed, nationality, race, ethnicity, disability, gender, or other protected class.","description_format":"text","description_chars":7376,"description_truncated":false,"requirements":{"experience_years_min":3,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["401k plan","Continuous learning"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Management Consulting"],"lifecycle":[{"event":"open","at":"2026-10-23T03:13:49Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":4,"expected_fill_days":73,"reasons":["conf:3","win:early"],"computed_at":"2026-10-27T05:46:45Z"},"pay":{"stated_usd_annual":140000,"is_top_pay":true},"html_url":"https://alion.io/job/kalles-group-identity-operations-engineer-consultant-access-lifecycle-automation","json_url":"https://alion.io/job/kalles-group-identity-operations-engineer-consultant-access-lifecycle-automation.json","meta":{"generated_at":"2026-10-28T03:31:33Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":4683,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-29T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":679202},"rest":"https://alion.io/mcp/rest/get_company?id=679202"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fkalles-group-identity-operations-engineer-consultant-access-lifecycle-automation"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fkalles-group-identity-operations-engineer-consultant-access-lifecycle-automation"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fkalles-group-identity-operations-engineer-consultant-access-lifecycle-automation"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/kalles-group-identity-operations-engineer-consultant-access-lifecycle-automation\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fkalles-group-identity-operations-engineer-consultant-access-lifecycle-automation"}]}