Identity and Access Management Engineer

About this role

AgWest Farm Credit seeks an Identity and Access Management Engineer to configure and implement IAM solutions across their infrastructure. This role manages identity lifecycle processes, authentication controls, and governance frameworks while supporting a cloud-forward, Zero Trust strategy.

What you'll do

• Administer directory services including Ping One, Entra ID, Active Directory, and LDAP with focus on data integrity and automation
• Implement and manage authentication methods, SSO integrations (SAML, OAuth, OIDC), and access controls
• Build identity automation using PowerShell, Graph API, REST APIs, and Logic Apps to reduce manual processes
• Troubleshoot complex authentication and authorization issues across hybrid and cloud environments
• Partner with application and security teams to onboard systems and provide Tier 3 incident support
• Assist with IAM roadmap planning, tool evaluations, and proof-of-concept initiatives

What they're looking for

• Entra ID / Azure AD and Active Directory administration
• PowerShell scripting and automation
• SSO protocols (SAML, OAuth, OIDC, SCIM)
• Conditional Access and entitlement management
• REST APIs and Graph API
• Zero Trust architecture and least privilege principles
• MFA and identity federation
• Incident troubleshooting and Tier 3 support

Benefits

• Performance-based incentive (10-15% of base depending on level)
• Competitive salary range ($72,600-$163,000 depending on level and location)
• Full-time position with Infrastructure and Operations team
• Occasional travel for team and all-staff meetings
• Opportunity to advance enterprise IAM maturity
• Member-owned cooperative with 100+ year legacy in agriculture finance