OPT Iam Engineer Jobs
IAM Engineer jobs are a strong fit for F-1 OPT students with backgrounds in cybersecurity, computer science, or information systems. Most roles qualify as STEM OPT extensions, giving you up to 36 months of work authorization. Employers frequently sponsor H-1B visas for this specialty occupation.
Find OPT Iam Engineer JobsOverview
Showing 5 of 14+ Iam Engineer jobs
See all Iam Engineer Jobs
Sign up for free to unlock all listings, filter by visa type, and get alerts for new Iam Engineer roles.
Get Access To All JobsINTRODUCTION
This position will be fully remote and can be hired anywhere in the continental U.S.
Optiv is seeking a Sr. IAM Engineer to join Optiv Security’s 24x7x365 Security Operations Center as a member of the Advanced Fusion Center (AFC) team. The Optiv AFC line of business consists of providing security operations expertise to a robust and growing client base. Our team is comprised of highly technical individuals capable of delivering managed services to clients in all industry verticals. The Optiv AFC specializes in custom-tailored security solutions delivered primarily through three practice teams: Client Engagement, Engineering Operations, and Detection and Response Operations. These teams work in tandem to assist our clients in reaching their security maturity goals.
The Sr. IAM Engineer will be responsible for following Optiv AFC processes & procedures, as well as managing and maintaining security systems across internal and client environments. The Sr. IAM Engineer will work closely with Management, Solution Architects, Principal Security Engineers from other internal teams and clients to complete high profile, critical services to existing AFC clients. They will serve as a primary responder for AFC customer systems, taking ownership of client configuration issues, and tracking through resolution.
HOW YOU'LL MAKE AN IMPACT
- The Identity and Access Management (IAM) Engineer will be responsible for designing, implementing, and managing robust identity and access management solutions to safeguard sensitive information and ensure compliance with regulatory standards within our client environments.
- You will collaborate with cross-functional teams, lead IAM initiatives, and contribute to the development and execution of the client's overall security strategy.
- Review and provide feedback on established strategies and multi-year plans incorporating all parts of IGA: access requests, lifecycle events, provisioning functions, role-based access, separation of duties, access certifications.
- Architect, design, develop and troubleshoot IGA solutions with the ability to provide technical and architectural design documentation, recommendations, specifications, use cases, requirements and test cases.
- Create solutions that drive full automation, self-service, and resiliency.
- Implement customizations to address customer business requirements.
- Participate in security and application troubleshooting and incident problem resolutions with other infrastructure teams, including storage, messaging, server, and network.
- The right candidate will collaborate with various stakeholders, including IT teams, security teams, and business units, to implement effective and efficient identity and access management solutions. The difficulty of the work increases with the complexity of the client's IT environment and the evolving landscape of cybersecurity threats.
- Provide engineering support for complex and recurring incidents related to IAM platforms and perform root causes analysis in accordance with customer policies and standards.
- Responsible for the standards, design, and operation of Sailpoint, BeyondTrust, CyberArk and related environments.
- Provides expertise in all aspects of the following technologies: Azure Entra ID, Microsoft technologies Active Directory (AD), Active Directory Lightweight Directory Services (ADLDS), Active Directory Federated Services (ADFS), Sailpoint, CyberArk, BeyondTrust and Public Key Infrastructure (PKI) are included as key technologies.
WHAT WE'RE LOOKING FOR
- Bachelor’s degree in Engineering, Information Technology, Computer Science, or related discipline preferred.
- 2-4 years Professional experience in the Information Security field, typically gained in 3+ years Required.
- 3-5 years of experience as a senior level IDAM engineer preferred.
- Experience with AWS/GCP cloud environments a bonus.
- Microsoft Certified IT Professional (Enterprise Administrator) preferred.
- CISSP certification is a plus. Microsoft technical certifications are preferred.
- Knowledge and experience with Identity Management technologies like SSO, SCIM, OAuth, SAML, Encryption, PKI.
- Knowledge of Microsoft technology such as Server, AD, DNS, Group Policy, and Office 365/Exchange, Azure, Azure Entra ID.
- Excellent communication skills, both verbal and written are required.
- Solid understanding of how Role Based Access Control (RBAC) works in large, distributed environments.
- Solid understanding of cybersecurity principles and best practices.
- Excellent problem-solving and analytical skills.
- Experience working with PAM systems.
- Experience with MFA protocols and techniques.
WHAT YOU CAN EXPECT FROM OPTIV
- A company committed to our inclusive value through our Employee Resource Groups.
- Work/life balance.
- Professional training resources.
- Creative problem-solving and the ability to tackle unique, complex projects.
- Volunteer Opportunities. “Optiv Chips In” encourages employees to volunteer and engage with their teams and communities.
- The ability and technology necessary to productively work remotely/from home (where applicable).
EEO Statement
Optiv is an equal opportunity employer. All qualified applicants for employment will be considered without regard to race, color, religion, sex, gender identity or expression, sexual orientation, pregnancy, age 40 and over, marital status, genetic information, national origin, status as an individual with a disability, military or veteran status, or any other basis protected by federal, state, or local law.
Optiv respects your privacy. By providing your information through this page or applying for a job at Optiv, you acknowledge that Optiv will collect, use, and process your information, which may include personal information and sensitive personal information, in connection with Optiv’s selection and recruitment activities. For additional details on how Optiv uses and protects your personal information in the application process, click here to view our Applicant Privacy Notice. If you sign up to receive notifications of job postings, you may unsubscribe at any time.
INTRODUCTION
This position will be fully remote and can be hired anywhere in the continental U.S.
Optiv is seeking a Sr. IAM Engineer to join Optiv Security’s 24x7x365 Security Operations Center as a member of the Advanced Fusion Center (AFC) team. The Optiv AFC line of business consists of providing security operations expertise to a robust and growing client base. Our team is comprised of highly technical individuals capable of delivering managed services to clients in all industry verticals. The Optiv AFC specializes in custom-tailored security solutions delivered primarily through three practice teams: Client Engagement, Engineering Operations, and Detection and Response Operations. These teams work in tandem to assist our clients in reaching their security maturity goals.
The Sr. IAM Engineer will be responsible for following Optiv AFC processes & procedures, as well as managing and maintaining security systems across internal and client environments. The Sr. IAM Engineer will work closely with Management, Solution Architects, Principal Security Engineers from other internal teams and clients to complete high profile, critical services to existing AFC clients. They will serve as a primary responder for AFC customer systems, taking ownership of client configuration issues, and tracking through resolution.
HOW YOU'LL MAKE AN IMPACT
- The Identity and Access Management (IAM) Engineer will be responsible for designing, implementing, and managing robust identity and access management solutions to safeguard sensitive information and ensure compliance with regulatory standards within our client environments.
- You will collaborate with cross-functional teams, lead IAM initiatives, and contribute to the development and execution of the client's overall security strategy.
- Review and provide feedback on established strategies and multi-year plans incorporating all parts of IGA: access requests, lifecycle events, provisioning functions, role-based access, separation of duties, access certifications.
- Architect, design, develop and troubleshoot IGA solutions with the ability to provide technical and architectural design documentation, recommendations, specifications, use cases, requirements and test cases.
- Create solutions that drive full automation, self-service, and resiliency.
- Implement customizations to address customer business requirements.
- Participate in security and application troubleshooting and incident problem resolutions with other infrastructure teams, including storage, messaging, server, and network.
- The right candidate will collaborate with various stakeholders, including IT teams, security teams, and business units, to implement effective and efficient identity and access management solutions. The difficulty of the work increases with the complexity of the client's IT environment and the evolving landscape of cybersecurity threats.
- Provide engineering support for complex and recurring incidents related to IAM platforms and perform root causes analysis in accordance with customer policies and standards.
- Responsible for the standards, design, and operation of Sailpoint, BeyondTrust, CyberArk and related environments.
- Provides expertise in all aspects of the following technologies: Azure Entra ID, Microsoft technologies Active Directory (AD), Active Directory Lightweight Directory Services (ADLDS), Active Directory Federated Services (ADFS), Sailpoint, CyberArk, BeyondTrust and Public Key Infrastructure (PKI) are included as key technologies.
WHAT WE'RE LOOKING FOR
- Bachelor’s degree in Engineering, Information Technology, Computer Science, or related discipline preferred.
- 2-4 years Professional experience in the Information Security field, typically gained in 3+ years Required.
- 3-5 years of experience as a senior level IDAM engineer preferred.
- Experience with AWS/GCP cloud environments a bonus.
- Microsoft Certified IT Professional (Enterprise Administrator) preferred.
- CISSP certification is a plus. Microsoft technical certifications are preferred.
- Knowledge and experience with Identity Management technologies like SSO, SCIM, OAuth, SAML, Encryption, PKI.
- Knowledge of Microsoft technology such as Server, AD, DNS, Group Policy, and Office 365/Exchange, Azure, Azure Entra ID.
- Excellent communication skills, both verbal and written are required.
- Solid understanding of how Role Based Access Control (RBAC) works in large, distributed environments.
- Solid understanding of cybersecurity principles and best practices.
- Excellent problem-solving and analytical skills.
- Experience working with PAM systems.
- Experience with MFA protocols and techniques.
WHAT YOU CAN EXPECT FROM OPTIV
- A company committed to our inclusive value through our Employee Resource Groups.
- Work/life balance.
- Professional training resources.
- Creative problem-solving and the ability to tackle unique, complex projects.
- Volunteer Opportunities. “Optiv Chips In” encourages employees to volunteer and engage with their teams and communities.
- The ability and technology necessary to productively work remotely/from home (where applicable).
EEO Statement
Optiv is an equal opportunity employer. All qualified applicants for employment will be considered without regard to race, color, religion, sex, gender identity or expression, sexual orientation, pregnancy, age 40 and over, marital status, genetic information, national origin, status as an individual with a disability, military or veteran status, or any other basis protected by federal, state, or local law.
Optiv respects your privacy. By providing your information through this page or applying for a job at Optiv, you acknowledge that Optiv will collect, use, and process your information, which may include personal information and sensitive personal information, in connection with Optiv’s selection and recruitment activities. For additional details on how Optiv uses and protects your personal information in the application process, click here to view our Applicant Privacy Notice. If you sign up to receive notifications of job postings, you may unsubscribe at any time.
See all OPT Iam Engineer Jobs
Sign up for free to unlock all listings, filter by visa type, and get alerts for new OPT Iam Engineer Jobs.
Get Access To All JobsTips for Finding OPT Sponsorship as an Iam Engineer
Lead with your technical stack
IAM hiring managers care about specific tools. Highlight experience with Okta, SailPoint, CyberArk, Azure AD, or AWS IAM in your resume summary. Employers who see direct tool alignment are more likely to move forward with OPT candidates.
Target STEM-designated employers first
IAM Engineer roles almost always qualify under the STEM OPT extension. Focus on employers registered with E-Verify, which is required for STEM extensions. This gives you 36 months total and significantly more time to secure H-1B sponsorship.
Frame OPT as a low-risk trial
Some hiring managers hesitate on sponsorship. Explain that your OPT period lets them evaluate you before committing to H-1B sponsorship. Framing it as a trial period reduces perceived risk and opens doors that might otherwise stay closed.
Certifications strengthen your specialty occupation case
Certifications like CISSP, CompTIA Security+, or vendor-specific IAM credentials reinforce that your role is a specialty occupation. This matters when your employer later files for H-1B. They signal professional-level expertise beyond general IT support.
Get your OPT start date right before applying
Apply to IAM roles within 90 days of your OPT start date. Employers need enough runway to evaluate and onboard you. Starting the search too late compresses your timeline and limits your ability to negotiate sponsorship after proving yourself.
Prepare a clear answer on your authorization timeline
Recruiters will ask about your work authorization status early. Know your OPT end date, STEM extension eligibility, and the H-1B cap lottery timeline. Candidates who explain this clearly signal maturity and reduce friction in the hiring process.
Iam Engineer OPT: Frequently Asked Questions
Does an IAM Engineer role qualify for the STEM OPT extension?
Yes. IAM Engineer positions typically qualify under CIP codes tied to computer science, information assurance, or cybersecurity, all of which are on the STEM Designated Degree Program list. To use the 24-month STEM extension, your employer must be E-Verify enrolled and you must file Form I-765 before your initial OPT expires.
Will IAM Engineer employers typically sponsor H-1B visas?
IAM Engineer roles qualify as specialty occupations under H-1B rules because the position normally requires at least a bachelor's degree in a specific technical field. Employers in financial services, healthcare, and large tech firms sponsor H-1B visas for this role regularly. Use Migrate Mate to filter for IAM Engineer jobs posted by verified H-1B sponsoring employers.
What degree fields are accepted for IAM Engineer OPT jobs?
Most IAM Engineer roles accept degrees in computer science, cybersecurity, information systems, or information assurance. Some employers also consider electrical engineering or software engineering backgrounds, particularly if your coursework covered network security or access control systems. The key is demonstrating a direct connection between your degree field and the IAM function.
Can I start an IAM Engineer job before my OPT EAD card arrives?
No. You cannot begin work until you have your physical EAD card in hand, even if USCIS has approved your application. Plan to apply for OPT at least 90 days before your intended start date. Some employers will hold an offer for a few weeks, but most cannot wait indefinitely, so apply as early as your DSO allows.
What happens to my OPT authorization if I'm laid off from an IAM Engineer role?
F-1 OPT students can accumulate up to 90 days of unemployment on standard OPT and up to 150 days total if you have an approved STEM extension. Losing your IAM Engineer position does not immediately end your status, but the clock starts immediately. Notify your DSO and begin searching for a new role as quickly as possible to protect your remaining authorized period.