IT - Systems Engineer
apex systemsMemphis (TN)
About the role
Senior Identity & Access Management (IAM) Engineer We're seeking a Senior IAM Engineer with deep hands-on identity engineering experience to support an enterprise environment focused on both traditional IAM and emerging non-human/agentic identity management. This is not a standard SailPoint administrator role. We're looking for someone who can engineer, integrate, automate, and troubleshoot identity solutions supporting AI agents, service accounts, machine identities, service principals, OAuth clients, and workload identities.
Key Responsibilities:
Engineer and support IAM solutions across SailPoint, Ping Identity, Microsoft Entra, and Active Directory Implement identity controls for AI agents and other non-human identities Build and maintain IAM integrations, APIs, connectors, scripts, and automation Support authentication, authorization, federation, provisioning, and identity lifecycle management Integrate IAM capabilities with cloud platforms, applications, API/MCP gateways, secrets platforms, and monitoring tools Support identity data integrations using SQL, ETL/data pipelines, logging, and reconciliation Troubleshoot complex identity, authentication, application, cloud, network, and data issues Build monitoring and operational analytics using Datadog and Splunk Create and maintain technical documentation, runbooks, and engineering standards Required Qualifications 10+ years of IAM, identity engineering, platform engineering, or identity integration experience Strong hands-on experience with SailPoint and/or Ping Identity Experience supporting non-human identities, such as service accounts, machine accounts, service principals, OAuth clients, workload identities, or AI agents Strong understanding of authentication, authorization, federation, provisioning, and identity lifecycle management Experience building APIs, connectors, scripts, integrations, and automation Experience with enterprise IAM platforms such as SailPoint IdentityIQ, PingFederate, PingDirectory, Microsoft Entra, and Active Directory Strong troubleshooting and production support experience Nice to Have SailPoint Identity Security Cloud / Agentic Fabric Ping Agent IAM Core / PingAuthorize Entro API or MCP gateway integrations HashiCorp Vault or OneIdentity Safeguard SQL and identity data warehouse/ETL experience Datadog and Splunk CI/CD, Infrastructure as Code, automated testing, or Git SailPoint, Ping Identity, Microsoft, cloud, or security certifications
Before you apply
Applying takes about a minute. These four things decide how fast it moves after that.
Your profile is current
It's what we read first. Occupations, seniority and locations matter more than a long history.
Two examples you can talk through
Not a portfolio — just two pieces of work where you can explain the decisions and what you'd change.
A number in mind
What you're on now and what would make you move. We negotiate better when we know both.
Your notice period
Employers plan around it, and it's the question that stalls offers most often.
Once you apply, someone reads it and calls you before anything reaches the employer — usually within two working days.