IAM Automation Engineer

Company URL: https://www.berkleytechnologyservices.com/                                        

Berkley Technology Services (BTS) is a dynamic company committed to providing world class IT services. We offer a unique culture, enabling our team members to be on the cutting edge of technology while delivering high quality solutions. We are looking for outstanding individuals who will bring unique perspectives, insight and innovation to our teams. BTS, a member company of W. R. Berkley Corporation, has facilities located in Des Moines, Iowa and Wilmington, Delaware.  Our functions include working with various third parties to develop, integrate, and support insurance systems of WRBC's operating units. BTS strives to provide these functions in a holistic manner including helpdesk support, system connectivity, and operational support. Additional responsibilities include coordinating communications regarding best practices in the use of our supported systems and researching new technology. At BTS, there are opportunities associated with being a part of an established and empowering corporation while maintaining a positive personal working environment. Additionally, we provide a competitive compensation and benefits package including a casual dress code. BTS is constantly growing and expanding to meet the changing demands of one of the most successful insurance organizations in the world. Visit us at berkley-bts.com to learn more information.

The Company is an equal employment opportunity employer. 

At Berkley Technology Services, we believe AI-assisted ways of working are becoming a foundational part of how excellent engineering work gets done - much like the way digital communication tools did a generation ago. We expect every member of our team to actively integrate AI tools into their daily work, not as a substitute for expertise, but as a natural extension of it. Candidates who bring genuine curiosity about AI, and a demonstrated habit of using it to work smarter, will find themselves at home here. 

The IAM Automation Engineer is responsible for designing and delivering automation solutions that streamline identity lifecycle management, strengthen IAM governance, and support compliance across on-premises and cloud environments.

• Design and automate IAM processes including onboarding, offboarding, access requests, provisioning, deprovisioning, access reviews, and privileged access management.
• Implement automated Joiner-Mover-Leaver (JML) workflows to streamline identity lifecycle management and access provisioning.
• Develop and implement Joiner, Mover, Leaver (JML) processes and workflows.
• Develop integrations between Microsoft Entra ID, HR systems, ITSM platforms, and business applications.
• Oversee the development of automated IAM governance across both on-premises and cloud environments and implement solutions across workforce IAM, PAM, and customer IAM ecosystems.
• Identify and implement AI-assisted use cases such as ticket summarization, access review support, audit evidence collection, and process documentation.
• Establish governance processes for AI agents, service principals, managed identities, and other non-human identities.
• Create dashboards, metrics, runbooks, and documentation to improve operational visibility and efficiency.
• Support compliance initiatives, audits, and continuous process improvement efforts.

Required Qualifications

• 8+ years of experience in Identity and Access Management, cybersecurity, cloud identity, or security automation.
• Hands-on experience with Microsoft Entra ID and identity lifecycle management processes.
• Hands-on experience with SailPoint IdentityIQ, Identity Security Cloud (ISC), or comparable Identity Governance and Administration (IGA) platforms.
• Experience designing and supporting identity lifecycle management, access certifications, role management, and automated provisioning workflows using SailPoint.

• Demonstrated comfort using AI-assisted tools in a professional context; approaches AI as a standard part of modern workflow rather than a specialized or optional capability

• Strong scripting and automation skills using PowerShell, Python, REST APIs, JSON, and Microsoft Graph API.
• Experience with IAM, IGA, and PAM platforms such as SailPoint IdentityIQ/Identity Security Cloud (ISC), Saviynt, Okta/Auth0, CyberArk, or BeyondTrust.
• Solid understanding of authentication, authorization, RBAC, least privilege, identity governance, and access certification principles.
• Proven ability to troubleshoot complex issues and collaborate with cross-functional technical and business teams.

Preferred Qualifications

• Experience with Entra ID Governance, Entitlement Management, Access Reviews, and Privileged Identity Management (PIM).
• Knowledge of Azure Automation, Logic Apps, Functions, DevOps practices, and ServiceNow.
• Familiarity with Microsoft Copilot, AI-enabled tools, and governance of AI agents and non-human identities.
• Experience with reporting, analytics, Power BI, or security dashboards.

Education

• Bachelor’s degree in Information Technology, Cybersecurity, Computer Science, Engineering, or a related field. Equivalent professional experience and industry certifications may be considered in place of a degree.
• Preferred certifications include CISSP, Microsoft Certified: Identity and Access Administrator Associate, Microsoft Certified: Azure Security Engineer Associate, or similar IAM, cybersecurity, and cloud security certifications.