IAM Lead Engineer

OverviewThe IAM Lead Engineer works closely with access management and security engineering to manage enterprise-wide identities and access controls for systems and applications. The engineer uses IAM tools to support provisioning and de-provisioning, ensuring activities are tracked, reported, and reviewed according to established policies. Builds custom solutions using AWS services for access automation and compliance. Reports to the Director and collaborates with teammates.ResponsibilitiesLead IAM initiatives from inception through delivery.Build custom access automation solutions to manage access to cloud resources using AWS and Azure services.Work in a distributed security and technology team responsible for identities and entitlements within IAM solutions.Implement identity controls and settings that align with policies and governance structure.Understand and modify Python lambda functions as needed to support business logic.Collaborate with security leadership, teammates, and stakeholders to implement access models aligned with risk posture.Assess and resolve IAM issues across the employee base and with external entities.Secure access to both on-prem and cloud infrastructure.Document access, policies, and exceptions for audit reviews.Coordinate with internal Identity and Access Management team on periodic access reviews.Recommend improvements in automation, security practices, and user experience.Collect KPIs and operational metrics; monitor SLAs for success and improvement areas.Execute tactical requests and support the strategic vision for scalable IAM controls.Understand IAM governance, policies, and solutions across SSO, directory, certificate, MFA, privileged accounts, automation, and behavior analytics systems.Deliver IAM projects on time and within budget.Required Qualifications5+ years of cybersecurity or information technology practitioner experience.3+ years of building IAM solutions and automations.Skills & Experience5+ years in information security with 3+ years hands-on IAM practitioner experience.Familiarity with directory services, Windows and Azure AD, SSO, MFA, and RBAC.At least 3 years of Agile/Scrum project experience.Experience administering IAM systems, access controls, risk management, and security governance fundamentals.Experience with Git/Bitbucket and Jenkins.Strong experience with SailPoint IdentityIQ or similar IGA solutions.3+ years of scripting in Python, PowerShell, or JavaScript.Hands-on experience with IAM roles and AWS policies (managed/inline).Strong knowledge of cloud access controls, preferably in AWS; Azure experience is a anized, with the ability to prioritize and meet defined SLAs.Proven integrity, excellence, curiosity, adaptability, and effective communication.Team leadership experience for organizational and team growth.EducationBachelor’s or Master’s degree in computer science or related field.Location & ScheduleHybrid position in Rockville, pensation & BenefitsPay range: $75.00 - $85.00/hr. Eligibility for benefits may apply depending on role and term. Benefits may include medical, dental, vision, 401(k), Life Insurance, disability, HSA, transportation benefits, PTO/Leave, and other programs as applicable.Application DeadlineThis position is anticipated to close on Oct 1, 2025.About TEKsystemsTEKsystems is an Allegis Group company and a leading provider of technology services. We are an equal opportunity employer and consider all applications without regard to race, sex, age, color, religion, national origin, veteran status, disability, sexual orientation, gender identity, genetic information or any characteristic protected by law. #J-18808-Ljbffr

Created: 2025-09-25