<p>Kforce has a client in Denver, CO that is seeking a Senior IAM Engineer to support their Identity & Access Management program. The candidate must be Local to Denver - onsite 3 days/week (no relocation assistance).</p> <p>Duties:</p> <ul> <li>Senior IAM Engineer will provide deep technical expertise in IAM engineering, own the technical roadmap for IAM (Azure AD, PAM/PIM, automation) </li><li>Help fix manual/legacy IAM processes and implement scalable solutions </li><li>Serve as the go-to SME while mentoring the rest of the team* PAM/PIM rollout experience - privileged account controls, implementation, best practices </li><li>Integration experience - ServiceNow, SailPoint, APIs, data mapping </li><li>Azure AD expertise - advanced group management, conditional access, MFA, nested group issues </li><li>Automation & scripting - strong PowerShell required; SQL; Java/BeanShell a plus </li><li>Audit/compliance knowledge - SOX, ISAE, IAM controls </li><li>SME/leadership presence - ability to define roadmap, guide best practices, and present to leadership (including CISO visibility). </li><li>The ideal candidate will bring an automation-first mindset </li></ul> <p>Nice-to-Haves:</p> <ul> <li>SailPoint experience (team already has a strong SME, but overlap is a plus) </li><li>ServiceNow IAM workflow integration </li><li>Experience in financial services, asset management, or regulated industries </li><li>Large-scale platform migrations (e.g., Charles River, Aladdin) </li><li>Broader coding skills (Java, Python, etc.) beyond scripting </li><li>Previous mentorship or team leadership experience </li></ul>