Identity and Access Management (IAM) Engineer
Trinity Industries is seeking a skilled and experienced Identity and Access Management (IAM) Engineer to oversee our enterprise IAM systems. This role is pivotal in ensuring secure, seamless access to enterprise systems, applications, and data while maintaining compliance with security standards and protocols. The IAM Engineer will implement and manage identity solutions that protect organizational assets and enhance user experiences.
What you’ll do:
- Implement and integrate Identity and Access Management (IAM) systems and solutions including identity governance (IGA), privileged management (PAM/PIM), multifactor authentication (MFA), single sign-on (SSO) tools. Ensure that solutions protect information resources against unauthorized use, inappropriate degrees of access, disclosure, damage and/or loss.
- Troubleshoot and manage the resolution of issues related to identities, systems, access, accounts, authentication, authorization, entitlements, and permissions.
- Ensure the maintenance and monitoring of IAM systems. Troubleshoot, support and resolve system incidents, problems and changes, as required.
- Continuously improve IAM processes, systems, and tools to enhance security and efficiency.
- Manage user onboarding, offboarding, and role changes, ensuring adherence to security policies and compliance requirements.
- Automate user provisioning and deprovisioning processes to enhance efficiency.
- Plan onboarding and continuous improvement of business applications into IAM tool
- Provide level 2 and level 3 support for clients and coordinate as needed with the technology vendors (performing diagnosis on incidents, implementing standard changes to the infrastructure)
- Produce IAM technical documentation such design, configuration guides etc.
- Manage and administer Microsoft Active Directory and Entra ID environments including supporting built in IAM functions (SSO, MFA)
- Support change and release processes for various IAM tools
What you’ll bring:
- Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related field (or equivalent experience).
- 3+ years of relevant work experience in Identity & Access Management, Identity Governance, Privileged Access Management (PAM), cybersecurity or related field
- Extensive hands-on knowledge of identity and access management best practices, procedures, and software solutions.
- Experience in one of IAM solutions such as: Saviynt (preferred), CyberArk, NetIQ, Oracle, ForgeRock, OIM, Radius, RSA, PKI, SailPoint, Thycotic, BeyondTrust, Ping Identity
- 5 years experience managing public cloud solutions (AWS, Azure, Google Cloud)
- Proficiency in authentication protocols (e.g., SAML, OAuth, OpenID Connect, LDAP, Kerberos).
Familiarity with scripting languages (e.g., PowerShell, Python) and automation tools.
Understanding of compliance frameworks and security standards (e.g., NIST, SOC 2, ISO 27001).
Strong problem-solving and analytical skills.
Excellent communication and teamwork abilities.
Certifications (Optional but beneficial)
CIMP, CIAM, CIMP, CISSP, CISM, or specific IAM tool certifications (e.g., Okta Certified Professional).
Microsoft Azure or other public cloud certification
EOE
Trinity Industries, Inc., and its subsidiary or affiliated companies (hereinafter “Trinity”) are committed to equal employment opportunity. It is our policy to consider candidates for employment without regard to race, color, sex, sexual orientation, gender identity, religion, age, national origin, disability, or veteran status.
View the following posters by clicking the links below:
Pay Transparency Nondiscrimination Provision
Know Your Rights: Workplace Discrimination is Illegal
Trinity participates in E-Verify and will provide the federal government with your Form I-9 information to confirm that you are authorized to work in the U.S.
View the following poster by clicking the link below:
Trinity is committed to working with and providing reasonable accommodations to individuals with disabilities. If you need a reasonable accommodation because of a disability for any part of the employment process, please send an e-mail to trinityrecruiting@trin.net. This email address should only be used for accommodations and not general inquiries or resume submittals.