SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
OneTrust is seeking a Senior Identity and Access Management (IAM) Engineer to design, build, and operate core identity security capabilities across the enterprise. This role spans multiple IAM domains—Identity Governance & Administration (IGA), Privileged Access Management (PAM), and secrets management—requiring strategy, design, and execution-level contributions.
Key responsibilities include architecting and implementing IGA capabilities such as identity lifecycle management (joiner/mover/leaver workflows), access request and approval processes, provisioning/deprovisioning automation, access certifications, and role/entitlement governance. You will design and maintain the identity lifecycle management framework and controls, build integrations using industry standards (SCIM, SAML/OIDC, APIs), and engineer PAM controls for privileged identities including access request/approval patterns, time-bound elevation, auditing, and least privilege enforcement.
The role requires developing automation using scripting and software engineering practices (PowerShell, Python, Bash) with CI/CD-friendly workflows and infrastructure-as-code patterns (Terraform). You will create repeatable solutions for access governance, role engineering, connector onboarding, reporting/analytics, and operational runbooks. Operational responsibilities include responding to IAM tickets, investigating and remediating incidents, conducting proofs-of-concept, and recommending vendor solutions.
You will serve as a trusted advisor to stakeholders, translating complex IAM topics into clear recommendations and implementation plans. Documentation, standards, and procedures supporting audits and operational readiness are essential. Mentoring peers and influencing the team's technical direction are expected.
Required technical skills include IGA architecture and engineering expertise (identity lifecycle, RBAC/ABAC, access reviews, entitlement modeling, SoD/least privilege), PAM concepts and hands-on implementation (JIT/JEA, session controls, privileged identity separation, auditing), secrets management (vaulting, rotation, access policies, non-human identity security), and scripting/development skills (SQL, JavaScript, PowerShell, Python, Velocity, SOAPUI, Postman, Java/J2EE, Bash, API integration, Git).
