{"id":4309737,"url":"https://alion.io/job/newvision-software-consultancy-identity-access-engineer-senior","title":"Identity & Access Engineer Senior","company":{"id":4489094,"name":"NewVision Software & Consultancy","domain":"newvision-software.com","url":"https://alion.io/company/newvision-software-and-consultancy","size_band":"501-1000","is_staffing_agency":false,"employer_type":"services","is_intermediary":false,"listed_via":null,"ats_vendor":"Career site","truth_index":null},"role":"Industrial Engineering","role_family":"Industrial Engineering","seniority":"senior","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":7,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"CI/CD","optional":false},{"name":"CMMC","optional":false},{"name":"IAM","optional":false},{"name":"Least Privilege","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"Okta","optional":false},{"name":"SOC 2","optional":false},{"name":"Azure","optional":true},{"name":"Azure DevOps","optional":true},{"name":"Git","optional":true},{"name":"Terraform","optional":true}],"status":"live","first_seen_at":"2026-10-30T00:00:00Z","employer_posted_date":"2026-11-14","last_verified_at":"2026-11-14T11:21:27Z","board_verified":true,"closed_at":null,"days_open":15,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":15},"description":"Job Title: Identity and Access Management (IAM) Senior Engineer\nRole/Job Summary:\nWe are looking for an Identity and Access Management (IAM) Senior Engineer to act as the senior technical owner of enterprise identity platforms. The role requires deep hands-on expertise in SailPoint Identity Governance and Administration (IGA) and Microsoft Entra ID, and the ability to design and lead secure, scalable identity solutions across workforce, customer and cloud environments that meet business, security and compliance requirements.\nKey Responsibilities:\nAdvanced IAM engineering: Design and implement advanced IAM solutions across workforce and customer identity platforms, optimize identity lifecycle workflows, and enforce least-privilege, policy-driven access models.\n Microsoft Entra ID operations: Administer and engineer Entra ID across multiple geographies, covering users, groups, applications, service principals, Conditional Access, Multi-Factor Authentication (MFA), identity protection, session controls, enterprise applications and consent governance.\nCloud tenant setup: Stand up, configure and document cloud tenants for multi-regional business areas and regional compliance needs, including network connectivity, authentication, authorization and SailPoint integration.\nHybrid identity and governance: Partner with security, infrastructure and application teams on hybrid identity, directory synchronization, privileged access, access reviews and audit-ready entitlement governance, and monitor sign-in activity, risky access patterns and identity health.\nSailPoint IGA leadership: Lead SailPoint implementations and enhancements, including complex provisioning logic, role engineering, access models, certification campaign design, and troubleshooting of complex SailPoint and connector issues.\n Customer Identity and Access Management (CIAM) and federation: Design and support CIAM architectures, including external identity federation with Entra ID or Okta and secure customer authentication and authorization flows, keeping controls consistent with workforce IAM.\nNon-human and AI identity: Design and secure frameworks for service principals, workloads, automation and AI-driven identities, with appropriate controls and governance over machine and AI access.\nArchitecture and design ownership: Create and maintain reference architectures, technical design documents, integration standards and reusable engineering standards for SailPoint, Entra ID, CIAM, cloud tenants, federation and identity automation, documenting decisions, risks, assumptions and dependencies.\nTechnical decision-making: Recommend platform direction and control patterns, evaluate technical risks and tradeoffs, and influence engineering teams, application owners, security stakeholders and audit partners with clear, defensible guidance.\n Audit, compliance and risk: Own the IAM audit evidence strategy (traceable access decisions and repeatable evidence collection) and map IAM controls to SOC 2 (System and Organization Controls 2), ISO/IEC 27001, CMMC (Cybersecurity Maturity Model Certification) and internal policy requirements.\n CI/CD (Continuous Integration / Continuous Delivery) and Infrastructure as Code (IaC): Deliver IAM controls, SailPoint configurations and cloud tenant changes through source-controlled DevOps pipelines and IaC for consistent, repeatable and secure delivery.\n Incident escalation: Lead diagnosis and resolution of complex IAM outages, incidents and escalated support cases, with clear communication and coordination across Level 3 (L3) and senior technical teams.\nProject delivery: Act as technical lead and accountable engineering owner for complex IAM projects, defining deliverables, timelines and success criteria and delivering securely and on schedule.\nResearch and innovation: Evaluate emerging identity technologies, drive improvement initiatives and technical experimentation, and turn outcomes into reusable IAM patterns aligned with security architecture and policy standards.\nMentorship: Mentor IAM engineers, review technical designs, and raise IAM delivery maturity through documentation, coaching and design reviews.\nMust-Have Skills:\nStrong hands-on experience with SailPoint IGA (provisioning, role engineering, access certifications, connectors)\nHands-on Microsoft Entra ID experience in large enterprises: Conditional Access, MFA, enterprise applications, hybrid identity, privileged access, access reviews and identity lifecycle\nDeep knowledge of IAM protocols, federation and identity lifecycle design\nExperience standing up and documenting multi-regional cloud tenants, including complex network connectivity, authentication, authorization and SailPoint integration\nProven experience supporting compliance audits\nCI/CD, DevOps-based delivery and Infrastructure as Code practices for cloud, IAM and SailPoint implementations\nStrong troubleshooting and architecture skills, including ownership of escalated IAM incidents\nAbility to mentor engineers and influence technical and business stakeholders\nGood-to-Have Skills:\nLeading large-scale SailPoint implementations, upgrades, connector integrations, role engineering or access certification modernization\nEngineering Microsoft Entra ID in complex enterprise environments, including workload identities\nAzure DevOps, Git-based development, CI/CD pipelines, Terraform or similar Infrastructure as Code tooling\nExperience in SOC 2, ISO/IEC 27001, CMMC or other regulated control environments\nDesigning controls for service accounts, service principals, automation, workload and AI-enabled non-human identities\nCIAM federation experience with Okta\nExperience Required:\n7+ Years\n7+ years in IAM, identity security, infrastructure, cloud security or related enterprise security engineering roles\n5+ years of hands-on experience with enterprise IAM platforms\n3+ years designing or leading SailPoint, Microsoft Entra ID, federation or cloud identity implementations","description_format":"text","description_chars":5956,"description_truncated":false,"requirements":{"experience_years_min":7,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["IT Consulting & Digital Transformation","Custom Software Development"],"lifecycle":[{"event":"open","at":"2026-11-14T11:21:27Z"}],"visa":[],"liveness":{"score":77,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":0.9,"age_days":15,"expected_fill_days":41,"reasons":["conf:1","win:mid","comp:brand"],"computed_at":"2026-11-14T12:50:06Z"},"pay":null,"html_url":"https://alion.io/job/newvision-software-consultancy-identity-access-engineer-senior","json_url":"https://alion.io/job/newvision-software-consultancy-identity-access-engineer-senior.json","meta":{"generated_at":"2026-11-14T12:50:06Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":12705,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-15T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":4489094},"rest":"https://alion.io/mcp/rest/get_company?id=4489094"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fnewvision-software-consultancy-identity-access-engineer-senior"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"free","price":{"credits":0,"usd":0},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fnewvision-software-consultancy-identity-access-engineer-senior"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fnewvision-software-consultancy-identity-access-engineer-senior"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/newvision-software-consultancy-identity-access-engineer-senior\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fnewvision-software-consultancy-identity-access-engineer-senior"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":4309737}},{"tool":"search_jobs","arguments":{"company":"newvision-software.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":4309737},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}