OPT Iam Engineer Jobs
IAM Engineer jobs are a strong fit for F-1 OPT students with backgrounds in cybersecurity, computer science, or information systems. Most roles qualify as STEM OPT extensions, giving you up to 36 months of work authorization. Employers frequently sponsor H-1B visas for this specialty occupation.
See All OPT Iam Engineer JobsOverview
Showing 5 of 14+ Iam Engineer jobs


Have you applied for this role?


Have you applied for this role?


Have you applied for this role?


Have you applied for this role?


Have you applied for this role?
See all Iam Engineer Jobs
Sign up for free to unlock all listings, filter by visa type, and get alerts for new Iam Engineer roles.
Get Access To All Jobs
INTRODUCTION
At Ensono, our Purpose is to be a relentless ally, disrupting the status quo and unleashing our clients to Do Great Things! We enable our clients to achieve key business outcomes that reshape how our world runs. As an expert technology adviser and managed service provider with cross-platform certifications, Ensono empowers our clients to keep up with continuous change and embrace innovation. We can Do Great Things because we have great Associates. The Ensono Core Values unify our diverse talents and are woven into how we do business. These five traits are the key to achieving our purpose: Honesty, Reliability, Curiosity, Collaboration, and Passion.
ABOUT THE ROLE AND WHAT YOU'LL BE DOING
The RSA IGL Specialist is responsible for the end-to-end management, operation, and optimization of the RSA Governance & Lifecycle platform. This role ensures that identity governance processes—including access requests, certifications, and user lifecycle management—are proactive, efficient, and aligned with organizational security and compliance goals.
We want all new Associates to succeed in their roles at Ensono. That's why we've outlined the job requirements below. To be considered for this role, it's important that you meet all Required Qualifications. If you do not meet all of the Preferred Qualifications, we still encourage you to apply.
KEY RESPONSIBILITIES
- Platform Administration & Operation: Manage daily administrative functions of the RSA IGL platform, including monitoring identity, account, and entitlement collection runs.
- Lifecycle Management: Configure and oversee the Joiner-Mover-Leaver (JML) processes to automate provisioning and de-provisioning across multiple platforms.
- Access Governance: Plan and execute access review campaigns and certifications to ensure only authorized users have access to sensitive resources.
- Workflow & Rule Development: Design and customize workflows in the Access Request Manager (ARM) and create business rules for Segregation of Duties (SoD) and policy enforcement.
- System Integration: Configure collectors to gather data from various systems (e.g., Active Directory, LDAP, Oracle, SQL Server) and set up Access Fulfillment Express (AFX) for automated fulfillment.
- Reporting & Analytics: Develop dashboards and advanced reports to provide visibility into access risks and track the progress of governance activities.
- Issue Remediation: Troubleshoot and resolve stalled workflow items, failed change requests, and data collection errors.
REQUIRED SKILLS & QUALIFICATIONS
- Technical Expertise: Advanced hands-on experience with RSA Governance & Lifecycle (formerly Aveksa).
- Core IGA Concepts: Strong understanding of Identity Governance and Administration (IGA), including RBAC (Role-Based Access Control) and entitlement management.
- Technical Proficiency: Proficiency in database technologies (preferably Oracle), LDAP, Active Directory, and scripting languages such as SQL, Java, PowerShell, or Python.
- Compliance Knowledge: Familiarity with regulatory frameworks such as SOX, HIPAA, GDPR, or NIST.
- Education: Bachelor’s degree in Computer Science, Information Systems, or a related field.
PREFERRED CERTIFICATIONS
- RSA Governance & Lifecycle Certified Administrator.
- RSA Governance & Lifecycle Certified Professional/Associate.
- CISSP or CISM.
WHY ENSONO?
Ensono is a place to make better happen – for our clients and for your career. You can do great things through innovation or collaboration, by learning or volunteering, or to promote diversity and inclusion. You can do great things for your own health or for a healthier planet. Whatever it means to you to do great things we want Ensono to be the place you can do it. We are a client-facing business, but we do encourage clients to allow us to work remotely most of the time so if you are not required to be on a client site, you can choose to work from home or in our Ensono offices.
Some of our benefits include:
- Unlimited Paid Days Off
- Three health plan options
- 401k with company match
- Eligibility for dental, vision, short and long-term disability, life and AD&D coverage, and flexible spending accounts
- Family Forming Benefit including fertility coverage and adoption/surrogacy reimbursement
- Paid childbearing and paternal leave
- Education Reimbursement, Student Loan Assistance or 529 College Funding
- Sabbatical leave
- Wellness program
- Flexible work schedule
As of the date of this posting, a good faith estimate of the current pay scale for this role is $[HIRING MIN] to $[HIRING MAX] annually based on a full-time schedule. Please note that placement in the range may vary based on numerous factors including but not limited to skills, experience, internal equity, and business needs. In addition to base salary, other compensation programs, depending on eligibility, include an annual bonus plan based on company and individual performance and an equity grant under our Associate Equity Appreciation Program.
Ensono is an Equal Opportunity/Affirmative Action employer. We are committed to providing equal employment to our Associates and building a diverse and inclusive workforce. All qualified applicants will be considered without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, protected veteran status, disability, or other legally protected basis, in accordance with applicable law.
Pay transparency nondiscrimination statement/posting OFCCP’s pay transparency policy can be found on OFCCP’s website. If you need accommodation at any point during the application or interview process, please let your recruiter know or email USTalentAcquisition@ensono.com.
See all OPT Iam Engineer Jobs
Sign up for free to unlock all listings, filter by visa type, and get alerts for new OPT Iam Engineer Jobs.
Get Access To All JobsTips for Finding OPT Sponsorship as an Iam Engineer
Lead with your technical stack
IAM hiring managers care about specific tools. Highlight experience with Okta, SailPoint, CyberArk, Azure AD, or AWS IAM in your resume summary. Employers who see direct tool alignment are more likely to move forward with OPT candidates.
Target STEM-designated employers first
IAM Engineer roles almost always qualify under the STEM OPT extension. Focus on employers registered with E-Verify, which is required for STEM extensions. This gives you 36 months total and significantly more time to secure H-1B sponsorship.
Frame OPT as a low-risk trial
Some hiring managers hesitate on sponsorship. Explain that your OPT period lets them evaluate you before committing to H-1B sponsorship. Framing it as a trial period reduces perceived risk and opens doors that might otherwise stay closed.
Certifications strengthen your specialty occupation case
Certifications like CISSP, CompTIA Security+, or vendor-specific IAM credentials reinforce that your role is a specialty occupation. This matters when your employer later files for H-1B. They signal professional-level expertise beyond general IT support.
Get your OPT start date right before applying
Apply to IAM roles within 90 days of your OPT start date. Employers need enough runway to evaluate and onboard you. Starting the search too late compresses your timeline and limits your ability to negotiate sponsorship after proving yourself.
Prepare a clear answer on your authorization timeline
Recruiters will ask about your work authorization status early. Know your OPT end date, STEM extension eligibility, and the H-1B cap lottery timeline. Candidates who explain this clearly signal maturity and reduce friction in the hiring process.
Iam Engineer OPT: Frequently Asked Questions
Does an IAM Engineer role qualify for the STEM OPT extension?
Yes. IAM Engineer positions typically qualify under CIP codes tied to computer science, information assurance, or cybersecurity, all of which are on the STEM Designated Degree Program list. To use the 24-month STEM extension, your employer must be E-Verify enrolled and you must file Form I-765 before your initial OPT expires.
Will IAM Engineer employers typically sponsor H-1B visas?
IAM Engineer roles qualify as specialty occupations under H-1B rules because the position normally requires at least a bachelor's degree in a specific technical field. Employers in financial services, healthcare, and large tech firms sponsor H-1B visas for this role regularly. Use Migrate Mate to filter for IAM Engineer jobs posted by verified H-1B sponsoring employers.
What degree fields are accepted for IAM Engineer OPT jobs?
Most IAM Engineer roles accept degrees in computer science, cybersecurity, information systems, or information assurance. Some employers also consider electrical engineering or software engineering backgrounds, particularly if your coursework covered network security or access control systems. The key is demonstrating a direct connection between your degree field and the IAM function.
Can I start an IAM Engineer job before my OPT EAD card arrives?
No. You cannot begin work until you have your physical EAD card in hand, even if USCIS has approved your application. Plan to apply for OPT at least 90 days before your intended start date. Some employers will hold an offer for a few weeks, but most cannot wait indefinitely, so apply as early as your DSO allows.
What happens to my OPT authorization if I'm laid off from an IAM Engineer role?
F-1 OPT students can accumulate up to 90 days of unemployment on standard OPT and up to 150 days total if you have an approved STEM extension. Losing your IAM Engineer position does not immediately end your status, but the clock starts immediately. Notify your DSO and begin searching for a new role as quickly as possible to protect your remaining authorized period.