Identity and Access Management and Privileged Access Management Engineer

We are seeking a highly skilled and security-focused IAM/PAM Engineer to support the Cybersecurity and Enterprise Technology organizations. This role is responsible for safeguarding access to InvoiceCloud's systems, applications, and cloud environments by designing, implementing, and operating scalable Identity and Access Management (IAM) and Privileged Access Management (PAM) controls.

Requirements

• Bachelor’s degree in IT Security, Computer Science, or a related field (or equivalent experience)
• 5+ years of experience in IAM, PAM, or identity-focused security/IT engineering roles
• Experience implementing and operating identity providers such as Azure AD (Entra ID), Okta, or similar platforms
• Strong understanding of authentication and federation protocols including SAML, OIDC/OAuth2, and SCIM
• Experience implementing privileged access controls such as vaulting, just-in-time access, and least privilege models
• Hands-on experience automating workflows and integrations using scripting and APIs (e.g., PowerShell, Python, Graph APIs)
• Experience conducting entitlement reviews and managing joiner/mover/leaver processes
• Familiarity with zero-trust architecture principles and identity governance best practices
• Relevant certifications such as Azure Security Engineer, Okta Professional, or similar credentials preferred
• High integrity and sound judgment when handling sensitive and confidential information