H-1B Visa Identity And Access Management Engineer Jobs
Identity and Access Management Engineer roles qualify as H-1B visa specialty occupations under USCIS guidelines, requiring at least a bachelor's degree in computer science, information security, or a related field. Employers in financial services, healthcare IT, and enterprise tech file LCAs regularly for this role, making active H-1B visa sponsorship common across industries.
Find H-1B Visa Identity And Access Management Engineer JobsOverview
Showing 5 of 105+ Identity And Access Management Engineer jobs
See all 105+ Identity And Access Management Engineer Jobs
Sign up for free to unlock all listings, filter by visa type, and get alerts for new Identity And Access Management Engineer roles.
Get Access To All JobsINTRODUCTION
Identity is the control plane of Davidson's technology environment. Every login, every SSO handshake, every automated account action, and, increasingly, every agent acting on institutional systems passes through infrastructure this role owns. The Identity & Access Management Engineer is accountable for that infrastructure end to end: the identity provider and single sign-on integrations, the hybrid directory (Active Directory and Entra ID), account management in RapidIdentity Cloud, multi-factor authentication (Duo), certificate and trust infrastructure (InCommon), and the provisioning and deprovisioning workflows that keep access aligned with each person's actual role at the college.
The role works in close partnership with Platform Engineering, which builds and operates the scripted account-lifecycle integrations against architecture and requirements this role defines; with Information Security, which sets policy this role enforces and monitors (including identity threat detection and response); and with campus data owners (HR, Registrar) whose systems feed identity. As Davidson extends its agentic campus, this role extends identity standards to non-human actors, including service accounts, API access, and agents, so that automation grows without eroding accountability. As a member of T&I, the incumbent upholds the department's mission to remove barriers between people and Davidson's primary purpose through authentic partnerships and purposeful technology.
ROLE AND RESPONSIBILITIES
Identity and Access Management Engineering (45%)
- Administer and evolve the identity provider and single sign-on environment (SAML, OIDC, OAuth), including service-provider integrations for campus and cloud applications.
- Own identity lifecycle requirements and design: provisioning, role and affiliation changes, and deprovisioning. Validate the automated account-lifecycle integrations, troubleshoot and fix existing RapidIdentity action sets and directory synchronization connectors, and partner with Platform Engineering, which does new development.
- Administer RapidIdentity Cloud as the college's account management platform, including account creation, updates, and removal, along with related identity platforms; manage role- and group-based access models across systems.
- Administer Duo for multi-factor authentication, and implement and maintain conditional access and privileged access controls alongside it.
- Maintain certificate and trust infrastructure, including InCommon certificate services, application and SAML signing certificates, and internal PKI touchpoints. Automate renewals and expiration alerting so recurring certificate work does not depend on manual tracking.
- Resolve escalated identity requests, including access, MFA, and lifecycle exceptions, and use the patterns in those requests to remove manual steps through automation and self-service.
- Design and run periodic access reviews and support audit and compliance requests (for example, FERPA and GLBA driven access controls).
Directory and Authentication Services (25%)
- Administer the hybrid directory environment: Active Directory, Entra ID, directory synchronization, and group policy relevant to identity and access.
- Manage authentication health: monitoring, alert response (including identity threat intelligence tooling), and incident participation with Information Security.
- Maintain integration points between the directory and downstream systems (email, storage, org-group-driven entitlements) and troubleshoot access inconsistencies.
Governance, Consultation, and Documentation (10%)
- Serve as T&I's consulted expert on identity for projects, procurements, and architecture reviews; extend identity standards to service accounts, API access, and agents on the agentic platform.
- Consult with campus offices on access needs and data-owner responsibilities.
- Maintain documentation, runbooks, and knowledge transfer so identity operations are diagnosable and never dependent on one person.
Systems Administration (20%)
- Maintain, patch, and secure the servers that run identity processes, such as the directory synchronization servers and the servers supporting the identity platform, on premises and in the cloud, using the Infrastructure team's patching and monitoring tools.
- Support backup and recovery for identity systems, including restoration testing.
- Participate in documented change management (CAB) and share in the Infrastructure on-call rotation.
- Automate operational tasks with scripting and AI-assisted development techniques.
- General server and storage administration remains with the Systems team; this role's systems work is limited to the systems that support identity.
BASIC QUALIFICATIONS
- Bachelor's degree or equivalent combination of education and relevant experience.
- 5+ years in systems administration, identity management, or a related discipline, with hands-on identity provider and SSO administration.
- Strong working knowledge of Active Directory and Entra ID, including hybrid synchronization and conditional access.
- Practical understanding of identity protocols and standards: SAML, OIDC/OAuth, LDAP, and SCIM.
- Scripting proficiency (PowerShell, Python, or similar) for identity automation.
- Security-first mindset with experience implementing MFA (Duo or a comparable platform) and least-privilege access models.
- Clear communication with technical and non-technical audiences; strong documentation habits.
PREFERRED QUALIFICATIONS
- Experience with RapidIdentity Cloud or comparable identity lifecycle and account management suites, and with administering Duo.
- Experience with InCommon, certificate management, or PKI, including automating certificate renewal.
- Experience supporting identity for AI and agentic platforms, API access management, or service-account governance.
- Higher education experience, including FERPA and GLBA aware access design.
- Relevant certifications (for example, Microsoft Identity and Access Administrator).
- Familiarity with identity threat detection and response tooling.
Information about how to submit an application can be found at https://employment.davidson.edu.
INTRODUCTION
Identity is the control plane of Davidson's technology environment. Every login, every SSO handshake, every automated account action, and, increasingly, every agent acting on institutional systems passes through infrastructure this role owns. The Identity & Access Management Engineer is accountable for that infrastructure end to end: the identity provider and single sign-on integrations, the hybrid directory (Active Directory and Entra ID), account management in RapidIdentity Cloud, multi-factor authentication (Duo), certificate and trust infrastructure (InCommon), and the provisioning and deprovisioning workflows that keep access aligned with each person's actual role at the college.
The role works in close partnership with Platform Engineering, which builds and operates the scripted account-lifecycle integrations against architecture and requirements this role defines; with Information Security, which sets policy this role enforces and monitors (including identity threat detection and response); and with campus data owners (HR, Registrar) whose systems feed identity. As Davidson extends its agentic campus, this role extends identity standards to non-human actors, including service accounts, API access, and agents, so that automation grows without eroding accountability. As a member of T&I, the incumbent upholds the department's mission to remove barriers between people and Davidson's primary purpose through authentic partnerships and purposeful technology.
ROLE AND RESPONSIBILITIES
Identity and Access Management Engineering (45%)
- Administer and evolve the identity provider and single sign-on environment (SAML, OIDC, OAuth), including service-provider integrations for campus and cloud applications.
- Own identity lifecycle requirements and design: provisioning, role and affiliation changes, and deprovisioning. Validate the automated account-lifecycle integrations, troubleshoot and fix existing RapidIdentity action sets and directory synchronization connectors, and partner with Platform Engineering, which does new development.
- Administer RapidIdentity Cloud as the college's account management platform, including account creation, updates, and removal, along with related identity platforms; manage role- and group-based access models across systems.
- Administer Duo for multi-factor authentication, and implement and maintain conditional access and privileged access controls alongside it.
- Maintain certificate and trust infrastructure, including InCommon certificate services, application and SAML signing certificates, and internal PKI touchpoints. Automate renewals and expiration alerting so recurring certificate work does not depend on manual tracking.
- Resolve escalated identity requests, including access, MFA, and lifecycle exceptions, and use the patterns in those requests to remove manual steps through automation and self-service.
- Design and run periodic access reviews and support audit and compliance requests (for example, FERPA and GLBA driven access controls).
Directory and Authentication Services (25%)
- Administer the hybrid directory environment: Active Directory, Entra ID, directory synchronization, and group policy relevant to identity and access.
- Manage authentication health: monitoring, alert response (including identity threat intelligence tooling), and incident participation with Information Security.
- Maintain integration points between the directory and downstream systems (email, storage, org-group-driven entitlements) and troubleshoot access inconsistencies.
Governance, Consultation, and Documentation (10%)
- Serve as T&I's consulted expert on identity for projects, procurements, and architecture reviews; extend identity standards to service accounts, API access, and agents on the agentic platform.
- Consult with campus offices on access needs and data-owner responsibilities.
- Maintain documentation, runbooks, and knowledge transfer so identity operations are diagnosable and never dependent on one person.
Systems Administration (20%)
- Maintain, patch, and secure the servers that run identity processes, such as the directory synchronization servers and the servers supporting the identity platform, on premises and in the cloud, using the Infrastructure team's patching and monitoring tools.
- Support backup and recovery for identity systems, including restoration testing.
- Participate in documented change management (CAB) and share in the Infrastructure on-call rotation.
- Automate operational tasks with scripting and AI-assisted development techniques.
- General server and storage administration remains with the Systems team; this role's systems work is limited to the systems that support identity.
BASIC QUALIFICATIONS
- Bachelor's degree or equivalent combination of education and relevant experience.
- 5+ years in systems administration, identity management, or a related discipline, with hands-on identity provider and SSO administration.
- Strong working knowledge of Active Directory and Entra ID, including hybrid synchronization and conditional access.
- Practical understanding of identity protocols and standards: SAML, OIDC/OAuth, LDAP, and SCIM.
- Scripting proficiency (PowerShell, Python, or similar) for identity automation.
- Security-first mindset with experience implementing MFA (Duo or a comparable platform) and least-privilege access models.
- Clear communication with technical and non-technical audiences; strong documentation habits.
PREFERRED QUALIFICATIONS
- Experience with RapidIdentity Cloud or comparable identity lifecycle and account management suites, and with administering Duo.
- Experience with InCommon, certificate management, or PKI, including automating certificate renewal.
- Experience supporting identity for AI and agentic platforms, API access management, or service-account governance.
- Higher education experience, including FERPA and GLBA aware access design.
- Relevant certifications (for example, Microsoft Identity and Access Administrator).
- Familiarity with identity threat detection and response tooling.
Information about how to submit an application can be found at https://employment.davidson.edu.
See all 105+ H-1B Visa Identity And Access Management Engineer Jobs
Sign up for free to unlock all listings, filter by visa type, and get alerts for new H-1B Visa Identity And Access Management Engineer Jobs.
Get Access To All JobsTips for Finding H-1B Visa Sponsorship as an Identity And Access Management Engineer
Align your credentials to SOC codes
IAM Engineer roles map to multiple SOC codes, which drives prevailing wage levels on your LCA. Check the O*NET profile for your target job title before applying so your resume reflects the right technical competencies for the DOL wage tier.
Filter employers by LCA filing history
Use Migrate Mate to identify employers who have filed certified LCAs specifically for IAM or related security engineering roles, not just general IT positions. Active LCA history signals a company already understands the H-1B process for this specialty.
Target E-Verify enrolled employers early
H-1B sponsoring employers are required to participate in E-Verify. Confirming enrollment before your first interview round saves time and signals the company is set up to hire foreign nationals without delays at the offer stage.
Document your identity protocol certifications now
Certifications like CISSP, CIAM, or vendor-specific credentials for Okta, Azure AD, or SailPoint directly support the specialty occupation argument in your H-1B petition. Gather official certificates and continuing education records before your employer files the I-129.
Negotiate cap-gap coverage into your start date
If you're transitioning from F-1 OPT, your cap-gap period extends work authorization through September 30 of the fiscal year your H-1B is approved. Confirm your offer letter reflects a post-October 1 start date so you're covered without a gap.
Request premium processing for security-cleared roles
IAM positions tied to federal contractors or regulated industries sometimes require background checks that run concurrently with USCIS adjudication. Premium processing, which USCIS currently targets at 15 business days, reduces scheduling conflicts between clearance timelines and your status start date.
H-1B Visa Identity And Access Management Engineer: Frequently Asked Questions
Does an Identity and Access Management Engineer role qualify as an H-1B specialty occupation?
Yes. IAM Engineer roles require at least a bachelor's degree in computer science, information security, cybersecurity, or a closely related field, which meets USCIS's specialty occupation threshold. Employers document the degree requirement in the Labor Condition Application and petition. Roles involving zero-trust architecture, privileged access management, or identity governance carry strong specialty occupation arguments given the technical depth required.
Which industries sponsor H-1B visas most actively for IAM Engineers?
Financial services, healthcare IT, federal contractors, and large enterprise technology firms file LCAs for IAM roles with high frequency, driven by regulatory requirements around access controls and audit compliance. Government contractors in particular need IAM specialists with clearance eligibility. Browse Migrate Mate to see which employers have certified LCAs specifically for identity and access management roles in your target location.
How does the prevailing wage requirement affect IAM Engineer job offers?
Your employer must pay at least the DOL prevailing wage for your SOC code and work location, verified through the OFLC Wage Search before the LCA is filed. IAM roles often map to higher wage levels due to required certifications or supervisory components. If the offered salary falls below the prevailing wage for your level, USCIS will likely issue a Request for Evidence.
Can I switch employers mid-H-1B if I'm an IAM Engineer?
Yes, through H-1B portability under AC21. Once your petition has been pending or approved for at least 180 days and you're maintaining valid status, you can start working for a new employer as soon as they file a new H-1B transfer petition. For IAM roles, ensure the new employer's LCA covers your specific job duties, not just a generic IT engineering title.
Do security clearance requirements affect H-1B sponsorship for IAM roles?
Some federal contractor IAM positions require U.S. citizenship or specific clearance levels that H-1B holders cannot obtain, which effectively excludes those roles from sponsorship. However, many private-sector and state-level contractor roles require only a background check, which H-1B holders can complete. Clarify clearance requirements directly with the employer before investing time in the application process.