IAM operations Engineer II

MatchPoint Solutions is a fast-growing, young, energetic global IT-Engineering services company with clients across the US. We provide technology solutions to various clients like Uber, Robinhood, Netflix, Airbnb, Google, Sephora, and more! More recently, we have expanded to working internationally in Canada, China, Ireland, UK, Brazil, and India. Through our culture of innovation, we inspire, build, and deliver business results, from idea to outcome. We keep our clients on the cutting edge of the latest technologies and provide solutions by using industry-specific best practices and expertise.

We are excited to be continuously expanding our team. If you are interested in this position, please send over your updated resume. We look forward to hearing from you!

Job Title:IAM Operations Engineer

Location: Remote

Employment Type: Contract

Pay Range: 55-60/hr

We are looking for an IAM Operations Engineer who lives and breathes security. You bring clarity and organization to complex systems, and you are energized by collaborating with brilliant teammates to tackle tough technical challenges.

About The Role

The Application Developer II is responsible for overseeing and optimizing Identity and Access Management (IAM) operations, ensuring secure and efficient access to Uber systems. This role requires independent ownership of production systems and integrations, hands-on coding and technical depth, platform-anchored system design, cross-functional collaboration, and structured architecture and execution planning. The ideal candidate will have a strong foundation in IAM frameworks, authentication protocols, and identity governance processes.

What You'll Do

Manage provisioning, de-provisioning, identity lifecycle, and access control for user accounts across enterprise systems.

Independently own IAM production systems, integrations, and operational workflows, including troubleshooting, root cause analysis, remediation, and continuous improvement.

Implement, monitor, and maintain Role-Based Access Control (RBAC), Least Privilege Access (LPA), and Just-in-Time (JIT) access models.

Administer Single Sign-On (SSO), Multi-Factor Authentication (MFA), and Privileged Access Management (PAM) solutions.

Investigate and resolve complex IAM-related incidents, including unauthorized access, provisioning failures, account lockouts, authentication issues, and security events.

Identify recurring operational issues and drive sustainable solutions through automation, monitoring, process improvements, and platform enhancements.

Ensure adherence to regulatory frameworks (e.g., SOX, GDPR, HIPAA) by performing regular audits, access reviews, control validation, and maintaining IAM documentation.

Maintain and configure IAM tools and platforms such as Active Directory, Okta, SailPoint, Azure AD/Entra ID, OneLogin, Duo, CyberArk, or other IAM solutions.

Develop scripts, workflows, and API integrations using technologies such as Python and PowerShell to automate IAM processes, reduce manual effort, and improve reliability.

Write clean, maintainable, and production-ready automation with appropriate testing, logging, validation, error handling, and retry mechanisms.

Design and implement end-to-end IAM solutions grounded in platform capabilities and constraints, considering technical tradeoffs, dependencies, security risks, deployment considerations, and potential failure modes.

Design, implement, and manage Cloud IAM solutions across AWS IAM, Azure AD/Entra ID, Oracle Cloud, and Google Cloud IAM.

Break down ambiguous IAM problems into structured technical requirements, implementation tasks, dependencies, milestones, and execution plans.

Partner with Engineering, Security, Compliance, IT, and application teams to deliver IAM solutions and drive cross-functional dependencies to completion.

Communicate complex IAM risks and technical decisions clearly to technical and non-technical stakeholders and maintain accountability for end-to-end outcomes.

Develop and maintain IAM metrics, dashboards, and reports for executive leadership.

Utilize AI-based analytics to generate IAM performance reports and identify operational trends, risks, and improvement opportunities.

Evaluate and implement emerging AI and machine learning tools to optimize support, access request workflows, operational analysis, and IAM automation.

What You Will Have

Bachelor's degree in Computer Science, Cybersecurity, Information Technology, or a related field.

5+ years of experience in Identity and Access Management (IAM) operations with demonstrated ownership of production applications or integrations.

Hands-on coding skills with proficiency in Python, PowerShell, or API integrations for IAM automation, writing clean, maintainable, and production-ready code with minimal guidance.

Expertise in IAM frameworks, authentication protocols (SAML, OAuth, OIDC, LDAP), directory services, and platform depth (e.g., SailPoint, Okta, OneLogin, Duo, CyberArk, Microsoft Entra ID).

Proven ability in platform-anchored system design, grounding end-to-end solutions within realistic platform constraints, risk identification, deployment considerations, and failure modes.

Strong architecture and execution planning skills to break down ambiguous problems into structured, executable plans with pragmatic design decisions.

Strong troubleshooting and problem-solving skills with the ability to diagnose complex IAM issues across multiple platforms, integrations, directories, and downstream applications.

Strong cross-functional collaboration skills, influencing technical and non-technical partners through clarity, sound judgment, and accountability for outcomes.

Experience with compliance frameworks (ISO 27001, NIST, HIPAA, GDPR, SOX) and enforcing least privilege principles.

Nice to have

Experience with Zero Trust security models and AI-driven identity analytics.

Knowledge of Cloud IAM (AWS IAM, Azure AD, Google Cloud IAM) and AI-enhanced cloud security.

Hands-on experience with IAM automation platforms, AI-based fraud detection, and anomaly detection.

Familiarity with DevSecOps and AI-driven IAM orchestration strategies

MatchPoint Solutions provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws.

This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation, and training.