One Identity Engineer

About the job

One Identity IAM Engineer is responsible for implementing, configuring, and supporting the One Identity Identity and Access Management (IAM) platform to manage user identities, access rights, and entitlements across enterprise systems. This role ensures secure and compliant identity lifecycle management, access governance, and seamless integration with critical business applications.

Key Responsibilities:

• Design, deploy, and maintain One Identity Manager components, including Identity Manager, Authentication Services, Password Manager, Safeguard, and Starling Connect.
• Configure and manage identity lifecycle processes such as provisioning, de-provisioning, role management, and attestation.
• Develop and maintain system connectors for integrations with Active Directory, Azure AD, SAP, ServiceNow, CSV, SQL, and other enterprise applications.
• Utilize One Identity Manager tools such as Designer, Manager, Job Queue Info, and Object Browser for configuration, troubleshooting, and optimization.
• Implement and maintain Role-Based Access Control (RBAC), Segregation of Duties (SoD), and Access Request workflows to ensure compliance and governance.
• Design and manage attestation and recertification campaigns to validate user access and maintain audit readiness.
• Configure identity synchronization, data mapping, and attribute flows across connected systems to maintain data accuracy and consistency.
• Administer Privileged Access Management (PAM) through One Identity Safeguard, ensuring secure handling of privileged credentials.
• Customize and extend One Identity Manager functionality using scripts, workflows, and API-based integrations.
• Perform regular troubleshooting, upgrades, and patch management of the IAM environment.
• Collaborate with security, compliance, and application teams to enforce least-privilege and zero-trust access models.
• Prepare and maintain detailed technical documentation, standard operating procedures, and compliance reports.

Required Skills & Experience:

• 3–7 years of hands-on experience with One Identity Manager (OIM) or similar IAM platforms (SailPoint, Okta, ForgeRock, etc.).
• Proven experience working with system connectors (Active Directory, Azure AD, SAP, ServiceNow, CSV, SQL).
• Strong knowledge of One Identity Manager tools: Designer, Manager, Job Queue Info, and Object Browser.
• Understanding of Role-Based Access Control (RBAC), Segregation of Duties (SoD), and Access Request processes.
• Experience designing and managing attestation and recertification campaigns.
• Solid grasp of identity synchronization concepts, data mapping, and attribute flow design.
• Proficiency in PowerShell, SQL, and API-based integrations.
• Strong understanding of Active Directory, LDAP, SSO, and MFA principles.
• Knowledge of ITIL processes, identity governance, and compliance frameworks (GDPR, ISO 27001, SOX).
• Excellent analytical, troubleshooting, and problem-solving skills with attention to detail.

Preferred Qualifications:

• One Identity Certified Professional (OICP) certification.
• Experience with cloud-based IAM solutions, especially Azure AD or AWS IAM.
• Familiarity with DevOps integration (CI/CD pipelines for IAM configuration and deployment).