IAM Engineer

About the Role:

We are seeking a skilled and motivated IAM Engineer with expertise in JavaScript, Groovy, and PowerShell to join our Identity & Access Management (IAM) team. In this role, you will be responsible for configuring, customizing, and maintaining the current IAM solution to meet the organization’s identity management, security, and compliance needs. You will work closely with cross-functional teams to implement identity federation, authentication, authorization, and other IAM capabilities while leveraging your scripting skills to automate and streamline processes.

What You’ll Do:

• IAM Configuration & Customization:
  Configure, implement, and maintain current IAM systems to setup of new application connectors, automated user provisioning, and identity governance.
• Script Development & Automation:
  Develop custom scripts and integrations using JavaScript, Groovy, and PowerShell to automate workflows, streamline user provisioning and deprovisioning, and integrate current IAM systems with other enterprise systems (e.g., HRIS, Active Directory, databases, cloud services).
• Application Integrations:
  Design and implement custom connectors to connect IAM systems with 3rd party and internally developed applications and services, to support automated provisioning and deprovisioning. Should have expertise in SCIM and GraphQL.
• Security & Compliance:
  Ensure that identity and access management solutions comply with relevant security policies, industry standards, and regulations (e.g., PCI, SOX). Perform security assessments of the ForgeRock environment and remediate vulnerabilities as needed.
• Troubleshooting & Support:
  Provide ongoing support for ForgeRock IAM solutions, including troubleshooting issues related to identity flows, user provisioning, and integration with other systems. Work with other teams to resolve incidents and ensure minimal disruption to IAM services.
• Monitoring & Reporting:
  Set up and maintain monitoring for ForgeRock components to ensure high availability and optimal performance. Generate and review reports on process, system, and application health as well as data validation and data anomalies.
• Documentation & Knowledge Sharing:
  Document all configurations, customizations, and processes related to IAM solutions. Create user guides, troubleshooting manuals, and best practice documentation. Share knowledge with team members and provide training where necessary.
• Collaboration with Cross-Functional Teams:
  Collaborate with Security, IT, Development, Operations and Business teams to integrate IAM solutions into existing infrastructure, including cloud environments. Provide guidance on IAM best practices and assist in implementing security controls for user access management. Soliciting end user feedback is highly encouraged

What You’ll Need to Have for the Role:

• Education & Experience:
  • 3 years of experience in Identity and Access Management (IAM) solutions, with hands-on expertise in mainstream IAM products.
  • 3 years of experience in JavaScript, Groovy, and PowerShell scripting.
  • Experience with IAM-related protocols such as SAML, OAuth, OpenID Connect, LDAP, SCIM and GraphQL.
• Technical Skills:
  • Strong hands-on experience with mainstream IAM products such as Okta, Ping, Azure and ForgeRock.
  • Proficiency in JavaScript and Groovy for scripting and customization within ForgeRock products.
  • Solid experience with PowerShell for automating system administration tasks, user provisioning, and integration with third-party systems.
  • Experience with RESTful APIs and JSON for system integrations.
  • Familiarity with identity federation and SSO technologies.
  • Knowledge of LDAP, Active Directory, and other directory services.
  • Experience with MFA (Multi-Factor Authentication) and RBAC (Role-Based Access Control) in IAM systems.
  • Familiarity or experience in mainstream SaaS-based IAM platforms
• Soft Skills:
  • Strong problem-solving abilities and attention to detail.
  • Ability to work independently and manage multiple priorities in a fast-paced environment.
  • Strong communication skills, with the ability to explain technical concepts to non-technical stakeholders.
  • Ability to collaborate effectively with cross-functional teams, including Security, IT, and Development teams.

Nice to Have:

• Familiarity with HRIS systems such as WorkDay
• Knowledge of cloud identity management solutions (e.g., Okta, Ping, SailPoint, Entra ID).
• Familiarity with DevOps practices and tools for IAM infrastructure automation (e.g., Jenkins, Ansible).
• Experience with DevSecOps practices and integrating IAM solutions into continuous integration and deployment pipelines.
• Certification in mainstream IAM-related technologies is a plus.

** Preference is hybrid out of our Lincolnshire, IL or Chicago, IL offices. **

Pay Range:

In addition to competitive pay, we offer Paid Time Off, 401(k), an Employee Assistance Program, Good Sam Roadside Assistance, discounts, paid parental leave (if eligibility is met), Tuition Reimbursement (if eligibility is met), and on the job training opportunities. Full-time associates are offered a comprehensive benefit package including medical, dental, vision and more! Part-time associates are offered access to dental & vision coverage! For more information please visit: www.mycampingworldbenefits.com

Salary : $108,360 - $162,540