Identity and Access Management (IAM) Engineer

Piper Companies is seeking an Identity and Access Management (IAM) Engineer to join a leading cybersecurity organization. This role is critical in managing and optimizing enterprise IAM systems, with a strong focus on operational excellence, security, and strategic alignment with compliance frameworks. This position is onsite in Reston, VA!

Responsibilities of the IAM Engineer include:

• Provide hands-on technical administration of IAM systems and applications, ensuring performance, integration, and security
• Design, implement, and manage Single Sign-On (SSO) solutions using Ping Identity
• Develop and execute Multi-Factor Authentication (MFA) strategies and integrate them into the IAM framework
• Lead Identity Governance and Administration (IGA) projects using SailPoint, including application onboarding, access certification, and lifecycle events
• Deploy and manage Privileged Access Management (PAM) solutions to secure critical systems and monitor privileged access
• Align IAM architecture with security objectives and compliance frameworks such as NIST and CIS
• Collaborate with cross-functional teams and vendors to enhance IAM capabilities and evaluate new technologies

Qualifications for the IAM Engineer:

• 8+ years of experience in IT with a focus on IAM security architecture and platform administration
• Relevant certifications such as CIAM, CISSP, or IAM vendor-specific credentials
• Proficiency in Java, Python, and Ansible
• Deep understanding of SSO, MFA, PAM, and IAM protocols (SAML, OAuth, OIDC)
• Experience with SailPoint IdentityIQ, including connector development and REST API integrations
• Direct experience with Ping Identity and SailPoint solutions
• Familiarity with IAM in cloud environments (AWS, Azure) and cloud IAM roles and policies
• Ability to design IAM solutions for complex, high-availability infrastructures
• Bachelor’s degree in computer science, technology, or a related field

Compensation for the IAM Engineer:

• Salary Range: $140,000 – $170,000
• Comprehensive Benefits: Medical, Dental, Vision, 401(k), PTO, Sick Leave (as required by law), and Holidays

This job opens for applications on 5/27/25. Applications will be accepted for at least 30 days from the posting date.

Keywords: #LI-MM1 #LI-ONSITE

IAM Engineer, Identity and Access Management, Ping Identity, SailPoint, IdentityIQ, SSO, MFA, PAM, IGA, OAuth, SAML, OIDC, Cybersecurity, IAM Architecture, Cloud IAM, AWS, Azure, REST API, Ansible, Java, Python, PKI, FIPS, CIS Benchmarks, DISA STIG, FedRAMP, NIST, CISSP, CIAM, IAM Certifications, Privileged Access, Identity Lifecycle, Application Onboarding, IAM Compliance