Identity Operations Engineer

Confiz is seeking an Identity Operations Engineer  for one of our largest retail clients in Seattle, WA.This is a hands-on operations role, not an architecture role. You’ll spend most of your time working the identity ticket queue and troubleshooting provisioning and sync failures, and the rest automating the tickets and manual steps that shouldn’t exist. You’ll partner with Identity Architecture, HR, ITSM, application owners, and Security Operations.

Work Type: Hybrid: Onsite 4 days Per Week, Remote Fridays

Work Schedule: 8:00 AM - 5:00 PM PT 

Responsibilities

• Fulfill JML requests from the ITSM queue within SLA: account creation, role-based access, access changes for transfers, and complete deprovisioning for terminations and leaves.
• Operate SailPoint ISC: process access requests, remediate provisioning failures, monitor aggregations and identity refreshes, and fix identity attribute issues.
• Administer Entra ID: users, groups, licenses, app role assignments, guest accounts, Lifecycle Workflows, and Entitlement Management requests.
• Troubleshoot HR-to-identity provisioning and hybrid sync issues between Entra ID and on-premises Active Directory (Entra Connect / Cloud Sync).
• Handle PIM and privileged access requests with proper approvals and audit trail.
• Run access review campaigns, clean up orphaned and dormant accounts, and produce audit evidence (e.g., SOX, PCI).
• Build automation with PowerShell, Microsoft Graph, Python, and SailPoint ISC APIs and workflows.
• Create event-driven workflows (Azure Automation, Logic Apps, Power Automate) with ITSM integration for auto-fulfillment and closure.
• Analyze ticket trends to prioritize automation and track time saved.
• Treat automation as production code: source control, peer review, testing, and logging.
• Write runbooks and knowledge articles, and serve as an escalation point for the service desk.
• Participate in incident response and escalation coverage, including after-hours support as needed.

Requirements

• Bachelor’s degree in Computer Science, Cybersecurity, IT, or equivalent experience.
• 5+ years in IAM operations or systems/security engineering, including hands-on JML process work.
• Hands-on Microsoft Entra ID administration, with working knowledge of Conditional Access, PIM, and Entra ID Governance.
• Hands-on experience operating an enterprise IGA platform (SailPoint ISC / IdentityNow preferred), including troubleshooting failed provisioning.
• Strong PowerShell and Microsoft Graph scripting skills; Python and REST API experience valued.
• Working knowledge of SAML, OAuth 2.0, OIDC, and SCIM.
• Experience with hybrid identity (Active Directory, Entra Connect / Cloud Sync).
• Experience in an ITSM environment (e.g., ServiceNow) working against SLAs.

Nice to Have

• Certifications: SC-300, SailPoint ISC, AZ-500, Security+, or CISSP.
• ITSM-integrated automation, low-code tools, or Terraform/Bicep.
• HRIS-driven provisioning (e.g., Workday) and audit/compliance experience.
• Familiarity with PAM (e.g., BeyondTrust), ITDR, or SIEM/SOAR integration.
• Retail or ecommerce

We have a global team of amazing individuals working on highly innovative enterprise projects & products. Our customer base includes Fortune 100 retail and CPG companies, leading store chains, fast growth fintech, and multiple Silicon Valley startups.

What makes Confiz stand out is our focus on processes and culture. Confiz is ISO 9001:2015 (QMS), ISO 27001:2022 (ISMS), ISO 20000-1:2018 (ITSM) and ISO 14001:2015 (EMS) Certified. We have a vibrant culture of learning via collaboration and making workplace fun.

People who work with us work with cutting-edge technologies while contributing success to the company as well as to themselves. 

To know more about Confiz Limited, visit https://www.linkedin.com/company/confiz/