Position Summary

We are seeking a Principal IAM Engineer to serve as the senior hands-on technical authority for identity engineering during an active consolidation and modernization effort. This role is focused on building and operating solutions-not solely on policy or advisory architecture.
You will personally design and implement integrations, connectors, and migrations; establish engineering standards; resolve complex technical challenges; and help expand the capabilities of the engineering team.

Key Responsibilities

• Design, implement, and operate identity integrations, connectors, and migrations across the full identity lifecycle.


• Build and enhance joiner-mover-leaver automation, authoritative-source integrations, access request and approval workflows, role models, and certification campaigns.


• Engineer and administer identity governance platforms, including:
  
  
  
  • Custom connector development
  
  
  • Scripting and automation
  
  
  • Provisioning and deprovisioning logic
  
  
  • Role mining
  
  
  
  


• Lead or execute migrations between major identity governance platforms, including target-state design, data and configuration migration, and governance rebuilding.


• Support directory and tenant consolidation efforts, including:
  
  
  
  • Forest and trust configuration
  
  
  • Schema and group policy work
  
  
  • Hybrid synchronization troubleshooting
  
  
  • Object migration activities
  
  
  
  


• Design integrations across identity governance, privileged access management, and single sign-on or federation environments.


• Review the work of specialist engineers and provide technical direction across identity access domains.


• Establish engineering standards, review designs and code, mentor engineers, and document repeatable technical patterns.


• Communicate technical decisions and tradeoffs clearly with security leadership, application owners, and audit stakeholders.


• Contribute to service account and non-human identity lifecycle management, including naming standards, reconciliation, and automated credential rotation.


• Apply awareness of workload identity and AI-agent authorization patterns, including federated identity and just-in-time credentialing.

Required Qualifications

• Principal-level, hands-on identity engineering experience across the full lifecycle.


• Demonstrated experience personally building and operating identity solutions in production, with the ability to explain the code, configuration, and results.


• Deep identity governance platform engineering experience.


• Experience developing custom connectors and scripts using one or more of the following:
  
  
  
  • Java
  
  
  • JavaScript
  
  
  • Ruby
  
  
  • PowerShell
  
  
  
  


• Experience with provisioning and deprovisioning logic, role modeling, role mining, access workflows, and certification processes.


• Experience leading or executing a live migration between major identity governance platforms, including target-state design, data and configuration migration, and governance rebuilding.


• Hands-on experience with enterprise directory services and cloud identity directories.


• Experience with forest and trust configuration, schema and group policy work, hybrid synchronization troubleshooting, and object migration tooling.


• Experience supporting a real directory or tenant consolidation.


• Working experience with privileged access management platforms.


• Experience with single sign-on and federation technologies, including SAML, OIDC, and conditional access.


• Ability to design integrations across identity governance, privileged access management, and access management domains.


• Demonstrated technical leadership through engineering standards, design and code reviews, mentorship, and documentation.


• Strong communication skills, including the ability to explain technical tradeoffs to security leadership, application owners, and audit stakeholders.

Preferred Qualifications

• Experience with service account and non-human identity lifecycle management.


• Familiarity with naming standards, reconciliation, and automated credential rotation.


• Awareness of workload identity and AI-agent authorization patterns, including federated identity and just-in-time credentialing.


• Experience working with directory owners while maintaining responsibility for identity engineering rather than directory ownership.


• Experience supporting consolidation efforts following organizational mergers.

Why This Opportunity May Be Appealing

• Serve as the senior hands-on technical authority during a significant identity consolidation and modernization effort.


• Personally build the most complex integrations, connectors, and migrations while shaping solutions that the broader engineering team can extend.


• Establish standardized connector, workflow, and lifecycle patterns that reduce rework.


• Help deliver directory and tenant consolidation milestones while minimizing environment instability.


• Rebuild or strengthen governance processes as identity platforms change.


• Raise the capabilities of other engineers through mentorship, technical reviews, and well-documented patterns.


• Work across identity governance, directory services, privileged access management, single sign-on, federation, non-human identity, and AI-agent authorization.

Dexian stands at the forefront of Talent + Technology solutions with a presence spanning more than 70 locations worldwide and a team exceeding 10,000 professionals. As one of the largest technology and professional staffing companies and one of the largest minority-owned staffing companies in the United States, Dexian combines over 30 years of industry expertise with cutting-edge technologies to deliver comprehensive global services and support.

Dexian connects the right talent and the right technology with the right organizations to deliver trajectory-changing results that help everyone achieve their ambitions and goals. To learn more, please visit .

Dexian is an Equal Opportunity Employer that recruits and hires qualified candidates without regard to race, religion, sex, sexual orientation, gender identity, age, national origin, ancestry, citizenship, disability, or veteran status.