Ensono

Ensono

IAM Senior Engineer

United States · Senior

Sponsorship not specifiedDetected 29 days ago
PythonPowerShellAWSAzureCloud PlatformsTerraformOAuthSOC OperationsLeadershipCommunicationCollaborationMentoring

About the role

  • We want all new Associates to succeed in their roles at Ensono.

Responsibilities

  • IAM Architecture & Design Leadership
  • Lead the design and implementation of IAM solutions across authentication, authorization, secrets management, identity governance, and privileged access domains
  • Define and maintain IAM reference architectures, integration patterns, and best practices aligned to enterprise standards
  • Own IAM outcomes for assigned programs and migrations, ensuring solutions meet security, compliance, and performance expectations
  • Lead IAM readiness activities for migrations and cutovers, including risk identification, mitigation planning, and execution support
  • Develop and enhance accelerators, automation, and self-service capabilities to improve delivery efficiency and consistency
  • Lead or coordinate IAM-related security testing, including authentication/authorization validation and vulnerability assessments

Requirements

  • 7+ years of progressive experience in Identity and Access Management engineering, including leadership of complex IAM initiatives
  • Demonstrated ability to act as a technical authority and advisor, influencing IAM decisions and standards
  • To be considered for this role, it's important that you meet all Required Qualifications.
  • Proven experience designing and implementing IAM solutions in large-scale, hybrid, or cloud environments

Nice to have

  • Advanced knowledge of Active Directory, LDAP, and identity integrations
  • Experience with cloud platforms (AWS, Azure) and cloud-native IAM services
  • Strong scripting and automation capabilities (PowerShell, Python, Terraform, or equivalent)
  • Excellent troubleshooting, analytical, and communication skills
  • Experience in financial services or highly regulated industries preferred
  • CyberArk Certified Defender or Delivery Engineer
  • HashiCorp Certified Vault Associate / Professional
  • ForgeRock Certified Engineer

Skills

  • SailPoint (IdentityIQ, IdentityNow - access certifications, provisioning, role management)
  • ESF (Enterprise Security Framework - entitlement management and access controls)

This listing is sourced directly from Ensono's careers page and normalized into a canonical job model.