Identity and Access Management Engineer

EDF Renewables North America

. Administer and configure core IAM platforms and technologies .

Posted 10/30/2026full-timeSan Diego • California • United StatesMid-LevelSenior💰 $107,200 - $178,600 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in Identity and Access Management (IAM) administration, including the design and integration of SSO and MFA solutions, as well as managing Active Directory and LDAP services. Proficient in scripting and automation with PowerShell and Python, and knowledgeable in compliance standards such as NIST and GDPR.

Highest-signal resume keywords

IAM AdministrationSAML 2.0, OAuth 2.0, OIDC, SCIMActive Directory ManagementPowerShell ScriptingCISSP Certification

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

IAM PlatformsIdentity Lifecycle ManagementPAM SolutionsIGA InfrastructureTechnical DocumentationAutomation ScriptsSSO SolutionsMFA SolutionsIntegration with SaaSFederation Protocols

Soft Skills

CollaborationTrainingProblem-SolvingCommunication

Tools & Technologies

Clear SkyeVezaEntra ID GovernanceOktaPing IdentityAWS IAMAzure IAMGoogle Cloud IAM

Certifications & Qualifications

CISSPCompTIA Security+

Industry Keywords

CybersecurityNISTISO 27001SOXGDPRHIPAA

Tech Stack

Tools & technologies

AWSAzureCloudCyber SecurityDNSFirewallsPythonShell ScriptingTCP/IP

About the role

Key responsibilities & impact

Administer and configure core IAM platforms and technologies
Engineer integrations between IAM platforms and target applications using SAML 2.0, OAuth 2.0, OIDC, and SCIM
Develop custom connectors and workflows for legacy and homegrown applications
Manage and secure Active Directory and LDAP services
Develop and maintain PowerShell, Python, or similar automation scripts
Contribute to the cybersecurity strategy and identity technology roadmap
Architect, design, deploy, and maintain enterprise-wide IGA, AM, and PAM infrastructure
Evaluate emerging IAM technologies, trends, and security threats
Collaborate with application owners, infrastructure teams, HR, and business stakeholders
Provide IAM subject matter expertise and training to IT support teams, developers, and end-users
Design and integrate SSO and MFA solutions across cloud and on-premises applications
Monitor IAM system health, performance, and security; analyze logs and alerts
Investigate and respond to identity-related security incidents
Troubleshoot and resolve complex authentication, authorization, and access incidents
Develop and maintain IAM technical documentation, architectural diagrams, configuration guides, runbooks, and disaster recovery plans
Manage user identity lifecycles, including onboarding, provisioning, attribute changes, and de-provisioning
Develop and enforce least-privilege and RBAC models
Design and manage PAM solutions
Lead periodic access certification campaigns
Support internal and external audits by providing evidence, explaining controls, and remediating findings
Perform other duties as assigned

Requirements

What you’ll need

Bachelor’s degree required; equivalent years of experience in this specific field may be substituted for a degree
Minimum of 6 years of experience in IT/Cybersecurity
At least 4 years heavily focused on IAM administration, directory services, and federation protocols (SAML, OIDC, OAuth)
Certifications such as CISSP, CompTIA Security+, and/or vendor-specific credentials preferred
Experience writing technical documentation, SOPs, and runbooks for identity management
Hands-on experience managing Microsoft Active Directory and LDAP
Experience integrating IAM solutions with SaaS and on-premises applications
Deep expertise in at least one leading IAM platform, such as Clear Skye, Veza, Entra ID Governance, Okta, or Ping Identity
Strong proficiency in SAML, OAuth 2.0, OIDC, and SCIM
Solid scripting and automation skills using PowerShell, Python, or Shell scripting
Understanding of Identity Lifecycle Management, SSO, MFA, and Federation
Practical knowledge of PAM and IGA principles and solutions
Familiarity with AWS IAM, Azure IAM, and Google Cloud IAM
Understanding of TCP/IP, DNS, firewalls, and load balancers as they relate to IAM
Knowledge of NIST, ISO 27001, SOX, GDPR, and HIPAA
Ability to lift 50 lbs to install and manage hardware components

Benefits

Comp & perks

Competitive bonus incentives; eligible for annual bonus program
Low-cost health and wellness coverage for employees and eligible dependents
Generous 401(k) matching contribution
Paid time off programs
Paid parental leave after one year of service
Learning, career development, and advancement opportunities
Mentorship and buddy programs