Назад
Company hidden
7 дней назад

Senior IAM Engineer (AI)

115 000 - 149 500$
Формат работы
remote (только USA)/hybrid
Тип работы
fulltime
Грейд
senior
Английский
b2
Страна
US
Вакансия из списка Hirify.GlobalВакансия из Hirify Global, списка международных tech-компаний
Для мэтча и отклика нужен Plus

Мэтч & Сопровод

Для мэтча с этой вакансией нужен Plus

Описание вакансии

Текст:
/
TL;DR
Senior IAM Engineer (AI): Designing and managing IAM/PAM systems for human, non-employee, service, and AI agent identities with an accent on SailPoint ISC, BeyondTrust, Microsoft Entra, Silverfort, and non-human identity governance. Focus on establishing least-privilege frameworks for agentic systems, integrating secrets management with applications and CI/CD pipelines, and automating IAM operations through APIs and PowerShell.

Location: Remote, US; mandatory onsite onboarding at hirify.global headquarters once per quarter, with travel and accommodations covered.

Salary: $115,000–$149,500 per year, plus performance-based incentives.

Company

hirify.global provides healthcare financial solutions designed to empower healthcare consumers, including health savings account services.

What you will do

  • Design, implement, configure, and administer IAM/PAM solutions using SailPoint Identity Security Cloud, BeyondTrust, Microsoft Entra, Silverfort, and related tools.
  • Develop IAM strategies and governance for AI agents, non-human identities, service accounts, and machine-to-machine access.
  • Design Microsoft Entra Conditional Access policies and enforce risk-based, adaptive access controls across users, devices, and workloads.
  • Integrate IAM systems with applications, services, secrets-management platforms, vaults, and CI/CD pipelines.
  • Establish identity, authorization, credential lifecycle, auditability, and least-privilege frameworks for AI agents and autonomous workflows.
  • Support IAM projects, stakeholder coordination, troubleshooting, documentation, scripting, and automation through REST APIs and PowerShell.

Requirements

  • Bachelor’s degree in Computer Science, Information Technology, or a related field, or equivalent practical experience.
  • At least 5 years of IAM experience, including at least 3 years in a senior or principal engineer role.
  • Extensive hands-on experience with SailPoint Identity Security Cloud; Non-Employee Risk Management experience is strongly preferred.
  • Strong understanding of Privileged Access Management and hands-on experience with BeyondTrust.
  • Proficiency with Microsoft Entra, including Conditional Access policy design and administration.
  • Zero Trust expertise with technologies such as Silverfort.
  • Working knowledge of secrets-management and vaulting platforms for credentials, keys, and tokens used by applications, service accounts, and automations.
  • Familiarity with authentication patterns, scoped authorization, credential lifecycle management, and monitoring for AI agents and non-human identities.
  • Proficiency in scripting and automation using REST APIs and PowerShell, along with strong analytical, problem-solving, decision-making, communication, and stakeholder-influence skills.

Nice to have

  • Relevant certifications such as CISSP, CISM, or IAM-related certifications.

Culture & Benefits

  • Remote work with mandatory in-person Trailhead onboarding at headquarters once per quarter; required travel and accommodations are covered.
  • Medical, dental, and vision coverage, HSA contribution and match, and dependent care FSA match.
  • Uncapped paid time off, paid parental leave, and 401(k) match.
  • Personal and healthcare financial literacy programs, ongoing education and tuition assistance, gym and fitness reimbursement, and wellness incentives.
  • Reasonable accommodations are available for qualifying disabilities.

Hiring process

  • Screening interviews may be transcribed with Microsoft Copilot; candidates may opt out by notifying the Talent Partner in advance.
  • Live interviews and assessments must reflect the candidate’s own communication, ideas, and work unless AI assistance is explicitly permitted.

Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →