Senior IAM Engineer

Job description

Austin, United States | Posted on 09/25/2026

Client Name Texas Department of Public Safety

Date Opened 09/25/2026

Job Type Contract

Work Location Arrangement Hybrid

Work Experience 8 years

Application Deadline 10/05/ :00

No. of Hours 2080

Target Date 10/01/2026

Contract End Date 08/31/2027

Industry Government & Public Sector

City Austin

State/Province Texas

Country United States

Job Description

This is a hybrid role; only local candidates will be considered.

The Senior IAM (Identity and Access Management) Engineer will support the Texas Department of Public Safety (TxDPS). This role manages the agency's enterprise IAM ecosystem, including the design and implementation of a centralized identity provider framework using SAML 2.0 and OIDC for single sign-on (SSO) and multi-factor authentication (MFA). The engineer will develop lifecycle workflows, onboard applications through REST APIs, and establish Role-Based Access Control (RBAC). The role also supports Identity Governance and Administration (IGA), Access Management, and Privileged Access Services, including the deployment and ongoing maintenance of a privileged access management solution. The engineer will collaborate with security and IT teams to maintain consistent IAM practices across the agency.

Responsibilities

Design and implement a centralized identity provider framework using SAML 2.0 and OIDC to support SSO and MFA.

Develop identity lifecycle workflows and automate user provisioning and reporting using PowerShell and Python.

Onboard and integrate business applications with IAM systems through REST APIs.

Establish RBAC models, enforce separation of duties, and design access certification campaigns.

Integrate IAM solutions across platforms and support IGA, Access Management, and Privileged Access Services.

Deploy a privileged access management solution featuring secure credential vaulting, automated password rotation, and just-in-time provisioning.

Perform long-term system maintenance, including performance tuning and troubleshooting provisioning errors and connection failures.

Collaborate with security and IT teams to maintain consistent IAM practices.

Assess IAM technologies regularly and maintain technical documentation.

Provide support for Directory and IAM services, servers, and databases.

Requirements

Minimum Qualifications

8 years of experience in IAM platform governance, engineering, lifecycle automation, and scripting.

8 years of experience in application onboarding and integrating business applications with IAM systems.

5 years of experience designing and implementing RBAC models, enforcing separation of duties, and designing certification campaigns.

5 years of experience managing a centralized identity provider and configuring SSO and MFA.

3 years of experience with SailPoint Identity Security Cloud.

3 years of experience implementing user access reviews with SailPoint Identity Security Cloud.

3 years of experience integrating applications with SailPoint Identity Security Cloud.

3 years of experience using Privileged Access Management.

3 years of experience automating user provisioning and reporting using PowerShell and Python.

Preferred Qualifications

2 years of experience working with a state government agency.

Additional Requirements

Candidates must currently live within 50 miles of the Austin, Texas work location.

Work outside normal business hours, including weekends, evenings, and holidays, may be required as requested.

Work Location and Schedule

Schedule: Monday through Friday, 8:00 AM to 5:00 PM, excluding State holidays.

Work Arrangement: Hybrid (on-site and telework).

Air InfoSec, LLC is an Equal Opportunity Employer and does not discriminate on the basis of race or ethnicity, religion, sex, national origin, age, veteran disability or genetic information or any other reason prohibited by law in employment.

#J-18808-Ljbffr

Who can apply

Review the original listing for work authorization, qualifications and employer requirements.