Senior Developer Identity & Access Management (IAM)

Location: NYC, Jersey City, or Pittsburgh (2-3 days onsite)

Duration: 12-month engagement

Role Overview
We are seeking an experienced Senior IAM Developer to design, build, and automate identity solutions across enterprise multi-cloud environments. This role goes beyond administration the ideal candidate is a hands-on developer with genuine coding instincts who can engineer scalable identity capabilities, build automation for access lifecycle and governance workflows, and integrate applications with enterprise identity platforms.

Key Responsibilities
Design, develop, and maintain IAM solutions and automation across enterprise multi-cloud environments (Azure, AWS, GCP).

Build and enhance automation for identity provisioning, access governance, privileged access workflows, and authentication integrations using PowerShell, Python, and Microsoft Graph / Entra APIs.

Administer and support Active Directory and Microsoft Entra ID environments, including hybrid identity operations, Conditional Access, MFA, Identity Protection, PIM, app registrations, and service principal governance.

Develop and maintain application integrations using SAML, OIDC, OAuth2, LDAP, and SCIM provisioning including end-to-end configuration, attribute mapping, token validation, and troubleshooting.

Build and support SCIM-based auto-provisioning workflows for enterprise application onboarding, ensuring consistent identity lifecycle management across platforms.

Engineer identity solutions aligned with multi-cloud identity strategies including cross-tenant configurations, cloud-native IAM services, and federated identity architectures.

Partner with infrastructure, security, and application teams to implement secure access controls, identity governance models, and enterprise identity standards.

Contribute to the design of secure identity architecture; document technical designs, integration patterns, and operational procedures.

Troubleshoot and resolve complex IAM issues across authentication, authorization, federation, provisioning, and directory services.

Support governance, audit, and compliance activities related to identity and access controls.

Required Skills & Experience
8+ years of experience in identity and access management with a strong development and automation background.
Demonstrated ability to write production-quality automation in PowerShell and Python.
Strong hands-on experience with Active Directory and hybrid identity as a foundation for cloud identity work.
Deep experience with Microsoft Entra ID including Conditional Access, MFA, Identity Protection, PIM, app registrations, service principal governance, and Microsoft Graph API.
Hands-on experience integrating enterprise applications using SAML, OIDC, OAuth2, and SCIM provisioning including end-to-end configuration, attribute mapping, token validation, and federation troubleshooting.
Multi-cloud identity experience across at least two of: Azure Entra ID, AWS IAM / IAM Identity Center, GCP Identity and Access Management.
Experience with federated identity architectures, cross-tenant configurations, and cloud-native IAM services.
Proficiency with Microsoft Graph API and Entra APIs for automation, governance, and integration development.
Familiarity with enterprise IAM and PAM platforms such as SailPoint, Okta, and CyberArk.
Strong understanding of identity protocols and standards: Kerberos, NTLM, LDAP, SAML, OIDC, OAuth2, and SCIM.