Identity and Access Management (IAM) Engineer

The Identity and Access (IAM) Engineer will help mature Clark’s security posture. The role will be responsible for administering the IAM platforms (Saviynt, Entra ID, and Okta) and onboarding applications to these platforms. The role requires working closely with the business to facilitate application onboarding, develop access control, and perform other IAM activities. This includes all phases from discovery through long-term support. The role will also work with our security and internal audit teams to provide proper access controls and auditing of our solutions.This position will be based in the office 5 days/week.

Responsibilities

• Identity and Access Governance (IGA) Administration

  • Administer and maintain the IGA platform (Saviynt)

  • Onboarding new applications to the platform

  • Resolve IAM-related issues

• Authentication and Authorization Administration

  • Configure and maintain single sign-on (SSO) integrations

  • Administer and maintain SSO platforms

• Identity Lifecycle Management

  • Automate user provisioning and de-provisioning processes.

  • Develop and maintain role and attribute-based access controls. 

• Troubleshoot, identify, and resolve technical IAM-related issues

• Improve IAM solutions and systems for protection against evolving threats and efficiency

• Coach other organization members on the best practices that should be followed in IAM

• Develop reporting for IT, Business Application Owners, and SMEs

• Drive planning and execution of IAM roadmaps and technology enhancements

• Create and maintain standards surrounding documentation related to IAM processes, procedures, and infrastructure

• Provide engineering support to automate and administer IAM and compliance requirements across all enterprise information systems

• Perform day-to-day IAM operations and support

• Participate in bimonthly maintenance days when required

Basic Qualifications

• 5+ years of experience in the information technology field

• 3+ years of experience of IAM-related experience

• Strong oral communication and writing skills

• Ability to collaborate across business units and engage with stakeholders

• Proficient knowledge of IAM concepts

  • Authentication Methods

  • Least Privilege Access

• Experience integrating with account and access management technologies

  • APIs

  • SCIM

• IGA Platform Management 

• Experience with role and attribute-based access controls

• Experience with federation protocols such as SAML, OAuth, and OIDC

• Experience with access certifications

• Alignment to Clark Standards of Excellence: Self-Motivated, Results-Oriented, Adaptable, Team Player, Accountable, Ethical, Innovative, Resilient, Builds Relationships, Builds People / Teams & Followership, Sets Direction & Executes

Preferred Qualifications

• Saviynt (or similar, ex., Sailpoint) administration and integrations

• SQL

• Entra ID

• Okta

• ServiceNow

• Scripting

• Cyberark

The work environment and requirements described below are representative of those necessary for an employee to successfully perform the essential functions of this role. 

The Physical Side of the Role: Given that a good portion of your day will be spent at a desk, you should be comfortable with prolonged periods of focused work, whether it's collaborating with colleagues, analyzing data, or developing strategies. The role demands effective communication and sharp visual acuity for reviewing complex documents and performing detailed computer work. While there are times for quiet concentration, you'll also be expected to move actively throughout the office and travel occasionally to various locations, including dynamic construction sites, utilizing different modes of transportation. The ability to lift and move objects up to 10 pounds regularly, and up to 25 pounds on occasion (think a box of files or small office equipment), is also required.

Your Work Environment: Your primary workspace will be in our professional office, which has a typical, quiet-to-moderate noise and light levels. As part of your work, you may also be required to visit active construction sites. These environments are naturally more dynamic and can include exposure to outdoor weather conditions, louder noise, and moving equipment. Your safety is our top priority, and you'll be expected to follow Clark Construction's safety policies and procedures, and all applicable laws, at all locations.

Our High-Performing Culture: This is a demanding, high-performance environment. We are looking for candidates who are energized by challenge, thrive under pressure, and are prepared to do what it takes to achieve exceptional results. Success in this role requires significant commitment, including flexibility to work extended hours, especially during critical project phases or client deadlines. Beyond regular working hours, there will be occasions where business needs require your attention, particularly for time-sensitive matters or emergencies. You are expected to monitor and respond to communications (phone calls, emails, text messages) as required to address these situations effectively. Your ability to manage these expectations and be responsive when critical issues arise is key to your success in this role and our collective success as a team.

A Drug-Free Workplace: Clark promotes a drug-free workplace. A pre-employment drug “fitness for duty” screening is required, and the company conducts random quarterly drug “fitness for duty” tests.