Identity Operations Engineer

Salary: $85,000 - 125,000 per year Requirements: Bachelors degree in computer science, engineering, a related field, or comparable education and experience. At least five years of directly related Identity and Access Management (IAM) experience. Strong technical skills with Active Directory and Microsoft Entra ID, including directory services, delegated administration, Group Policy, OUs, sites and replication, identity synchronization, enterprise applications, federation, Conditional Access, and authentication. Hands-on experience with Saviynt or another IGA platform, including access requests and approvals, entitlement administration, access reviews, failed-task remediation, reconciliation, and audit evidence. Experience supporting identity lifecycle integrations with an authoritative HR source such as Workday, including joiner, mover, leaver, contractor, rehire, and exception processes. Experience using Microsoft 365 and ServiceNow; ServiceNow experience must include IAM incidents, requests, changes, knowledge, evidence, assignment groups, and CMDB relationships. Current hands-on experience supporting integrated IAM solutions such as Entra ID, Active Roles where applicable, Duo, PKI, and CyberArk/PAM. Strong troubleshooting and problem-analysis abilities, with clear communication of findings to business stakeholders, IT support teams, and network providers. Experience resolving issues involving identities, systems, access, accounts, authentication, authorization, entitlements, and permissions. Understanding of Microsoft 365 identity, group, collaboration, and federation dependencies. Experience with PowerShell, Python, JSON/REST, Microsoft Graph, SQL, or comparable scripting and API technologies for IAM automation and troubleshooting. Working knowledge of site-reliability and operational-engineering principles, monitoring, automation, and safe use of AI-assisted tools. Customer-focused, proactive approach; commitment to organizational policies and continuous improvement. Strong organizational skills, attention to detail, and ability to work independently and collaboratively. Experience with at least two of the following is desirable: PingOne/Aura, 1Password, HashiCorp Vault, Microsoft Graph, SAML/OIDC/OAuth, enterprise application onboarding, or secrets and service-account rotation. Experience integrating or troubleshooting ServiceNow orchestration with identity platforms, directories, SaaS applications, or enterprise applications is desirable. Legacy Java, SOAP, or database experience is beneficial. IT certifications such as an MCSE specialization in Identity Management, Certified Access Management Specialist (CAMS), or ITIL Foundations are desired. International experience is beneficial; multiple language skills are a plus. Responsibilities: Operate and continuously improve hybrid identity, access, authentication, privileged-access, and identity-governance services. Troubleshoot identity, system, access, account, authentication, authorization, entitlement, and permission issues, including specialist escalations from AD Services and TechOps IAM queues. Provide ITIL-based operational support for incidents, requests, changes, problems, and major incidents; maintain thorough ServiceNow records, troubleshooting notes, evidence, resolutions, and closure details. Operate and troubleshoot identity lifecycle integrations for joiners, movers, leavers, contractors, rehires, and exceptions; investigate provisioning failures, reconciliation issues, orphaned accounts, and data mismatches. Support Workday-driven lifecycle processes and Saviynt/IGA workflows, including access requests, approvals, entitlement ownership, reviews, remediation, audit evidence, and provisioning or reconciliation failures. Operate and support on-premises and cloud identity services, including Active Directory, Microsoft Entra ID, Microsoft 365, Duo, YubiKey/FIDO/PIV, CyberArk/PAM, Saviynt/IGA, Splunk, and connected enterprise applications and services. Troubleshoot Microsoft Entra enterprise applications and federation integrations, including SAML, OIDC/OAuth, claims, redirect URIs, app registrations, group assignments, Conditional Access, Microsoft Graph, certificates, and token or authentication failures. Support privileged and non-human identities, including elevated, service, application, RPA, resource/test, B2B/guest, and other accounts requiring vault onboarding, password rotation, or ownership validation. Support MFA and authentication operations, including recovery and reset workflows, OAuth-token issues, and failures across workforce and application services. Apply least-privilege, segregation-of-duties, secure-administration, and identity-governance practices to protect information resources. Produce required identity-management metrics and analysis; complete audit activities on schedule with relevant parties and maintain evidence for approvals, reviews, privileged access, lifecycle actions, exceptions, and remediation. Participate in security incident response as needed, including identity compromise, suspicious authentication, privileged access, credentials, and account containment. Follow industry best practices for standards, processes, procedures, tools, and documentation; ensure IAM systems are maintained, patched, operated, and monitored on schedule. Use Splunk and observability dashboards to identify failures, trends, and emerging operational risks. Maintain accurate ServiceNow CMDB relationships for identity services, configuration items, application integrations, owners, support groups, and dependencies; identify and report incomplete or stale data. Help develop automation to reduce routine work. Work scheduled shifts in a 24/7 follow-the-sun Technical Operations Center, including weekend and public-holiday coverage, on-call rotation, and structured handoffs with regional operations teams. Technologies: AI API Active Directory Cloud CMDB IAM Support ITIL JSON Java Microsoft 365 Network OAuth PowerShell Python REST RPA SAML SOAP SQL Security ServiceNow Splunk Office 365 More: We are Ekman Associates, a management consulting firm specializing in business, digital, and technology strategy, solution delivery, and meeting human-resource demands. This Identity Operations Engineer role is based in Nashville, Tennessee, with four days onsite and one day remote. The position provides specialist operational support for hybrid identity services in a global business environment and calls for effective communication across diverse cultural and technical backgrounds. It is a shift-based role supporting a 24/7, follow-the-sun Technical Operations Center. last updated 40 week of 2026