What are the responsibilities and job description for the Identity and Access Management (IAM) Engineer position at Trinity Careers?
Trinity Industries is seeking a skilled and experienced Identity and Access Management (IAM) Engineer to oversee our enterprise IAM systems. This role is pivotal in ensuring secure, seamless access to enterprise systems, applications, and data while maintaining compliance with security standards and protocols. The IAM Engineer will implement and manage identity solutions that protect organizational assets and enhance user experiences.
What you’ll do:
- Implement and integrate Identity and Access Management (IAM) systems and solutions including identity governance (IGA), privileged management (PAM/PIM), multifactor authentication (MFA), single sign-on (SSO) tools. Ensure that solutions protect information resources against unauthorized use, inappropriate degrees of access, disclosure, damage and/or loss.
- Troubleshoot and manage the resolution of issues related to identities, systems, access, accounts, authentication, authorization, entitlements, and permissions.
- Ensure the maintenance and monitoring of IAM systems. Troubleshoot, support and resolve system incidents, problems and changes, as required.
- Continuously improve IAM processes, systems, and tools to enhance security and efficiency.
- Manage user onboarding, offboarding, and role changes, ensuring adherence to security policies and compliance requirements.
- Automate user provisioning and deprovisioning processes to enhance efficiency.
- Plan onboarding and continuous improvement of business applications into IAM tool
- Provide level 2 and level 3 support for clients and coordinate as needed with the technology vendors (performing diagnosis on incidents, implementing standard changes to the infrastructure)
- Produce IAM technical documentation such design, configuration guides etc.
- Manage and administer Microsoft Active Directory and Entra ID environments including supporting built in IAM functions (SSO, MFA)
- Support change and release processes for various IAM tools
What you’ll bring:
- Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related field (or equivalent experience).
- 3 years of relevant work experience in Identity & Access Management, Identity Governance, Privileged Access Management (PAM), cybersecurity or related field
- Extensive hands-on knowledge of identity and access management best practices, procedures, and software solutions.
- Experience in one of IAM solutions such as: Saviynt (preferred), CyberArk, NetIQ, Oracle, ForgeRock, OIM, Radius, RSA, PKI, SailPoint, Thycotic, BeyondTrust, Ping Identity
- 5 years experience managing public cloud solutions (AWS, Azure, Google Cloud)
- Proficiency in authentication protocols (e.g., SAML, OAuth, OpenID Connect, LDAP, Kerberos).
Familiarity with scripting languages (e.g., PowerShell, Python) and automation tools.
Understanding of compliance frameworks and security standards (e.g., NIST, SOC 2, ISO 27001).
Strong problem-solving and analytical skills.
Excellent communication and teamwork abilities.
Certifications (Optional but beneficial)
CIMP, CIAM, CIMP, CISSP, CISM, or specific IAM tool certifications (e.g., Okta Certified Professional).
Microsoft Azure or other public cloud certification
