STEM OPT Iam Engineer Jobs
IAM Engineer roles in identity governance, access provisioning, and zero-trust architecture sit squarely within STEM OPT eligibility. Your STEM degree qualifies you for a 24-month extension beyond your initial 12-month OPT period, giving you up to 36 months total, as long as your employer is enrolled in E-Verify.
See All Iam Engineer JobsOverview
Showing 5 of 12+ Iam Engineer jobs
Have you applied for this role?
Have you applied for this role?
Have you applied for this role?
Have you applied for this role?
Have you applied for this role?
See all Iam Engineer jobs
Sign up for free to unlock all listings, filter by visa type, and get alerts for new Iam Engineer roles.
Get Access To All JobsINTRODUCTION
At Ensono, our Purpose is to be a relentless ally, disrupting the status quo and unleashing our clients to Do Great Things! We enable our clients to achieve key business outcomes that reshape how our world runs. As an expert technology adviser and managed service provider with cross-platform certifications, Ensono empowers our clients to keep up with continuous change and embrace innovation. We can Do Great Things because we have great Associates. The Ensono Core Values unify our diverse talents and are woven into how we do business. These five traits are the key to achieving our purpose: Honesty, Reliability, Curiosity, Collaboration, and Passion.
ABOUT THE ROLE AND WHAT YOU'LL BE DOING
The RSA IGL Specialist is responsible for the end-to-end management, operation, and optimization of the RSA Governance & Lifecycle platform. This role ensures that identity governance processes—including access requests, certifications, and user lifecycle management—are proactive, efficient, and aligned with organizational security and compliance goals.
We want all new Associates to succeed in their roles at Ensono. That's why we've outlined the job requirements below. To be considered for this role, it's important that you meet all Required Qualifications. If you do not meet all of the Preferred Qualifications, we still encourage you to apply.
KEY RESPONSIBILITIES
- Platform Administration & Operation: Manage daily administrative functions of the RSA IGL platform, including monitoring identity, account, and entitlement collection runs.
- Lifecycle Management: Configure and oversee the Joiner-Mover-Leaver (JML) processes to automate provisioning and de-provisioning across multiple platforms.
- Access Governance: Plan and execute access review campaigns and certifications to ensure only authorized users have access to sensitive resources.
- Workflow & Rule Development: Design and customize workflows in the Access Request Manager (ARM) and create business rules for Segregation of Duties (SoD) and policy enforcement.
- System Integration: Configure collectors to gather data from various systems (e.g., Active Directory, LDAP, Oracle, SQL Server) and set up Access Fulfillment Express (AFX) for automated fulfillment.
- Reporting & Analytics: Develop dashboards and advanced reports to provide visibility into access risks and track the progress of governance activities.
- Issue Remediation: Troubleshoot and resolve stalled workflow items, failed change requests, and data collection errors.
REQUIRED SKILLS & QUALIFICATIONS
- Technical Expertise: Advanced hands-on experience with RSA Governance & Lifecycle (formerly Aveksa).
- Core IGA Concepts: Strong understanding of Identity Governance and Administration (IGA), including RBAC (Role-Based Access Control) and entitlement management.
- Technical Proficiency: Proficiency in database technologies (preferably Oracle), LDAP, Active Directory, and scripting languages such as SQL, Java, PowerShell, or Python.
- Compliance Knowledge: Familiarity with regulatory frameworks such as SOX, HIPAA, GDPR, or NIST.
- Education: Bachelor’s degree in Computer Science, Information Systems, or a related field.
PREFERRED CERTIFICATIONS
- RSA Governance & Lifecycle Certified Administrator.
- RSA Governance & Lifecycle Certified Professional/Associate.
- CISSP or CISM.
WHY ENSONO?
Ensono is a place to make better happen – for our clients and for your career. You can do great things through innovation or collaboration, by learning or volunteering, or to promote diversity and inclusion. You can do great things for your own health or for a healthier planet. Whatever it means to you to do great things we want Ensono to be the place you can do it. We are a client-facing business, but we do encourage clients to allow us to work remotely most of the time so if you are not required to be on a client site, you can choose to work from home or in our Ensono offices.
Some of our benefits include:
- Unlimited Paid Days Off
- Three health plan options
- 401k with company match
- Eligibility for dental, vision, short and long-term disability, life and AD&D coverage, and flexible spending accounts
- Family Forming Benefit including fertility coverage and adoption/surrogacy reimbursement
- Paid childbearing and paternal leave
- Education Reimbursement, Student Loan Assistance or 529 College Funding
- Sabbatical leave
- Wellness program
- Flexible work schedule
As of the date of this posting, a good faith estimate of the current pay scale for this role is $[HIRING MIN] to $[HIRING MAX] annually based on a full-time schedule. Please note that placement in the range may vary based on numerous factors including but not limited to skills, experience, internal equity, and business needs. In addition to base salary, other compensation programs, depending on eligibility, include an annual bonus plan based on company and individual performance and an equity grant under our Associate Equity Appreciation Program.
Ensono is an Equal Opportunity/Affirmative Action employer. We are committed to providing equal employment to our Associates and building a diverse and inclusive workforce. All qualified applicants will be considered without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, protected veteran status, disability, or other legally protected basis, in accordance with applicable law.
Pay transparency nondiscrimination statement/posting OFCCP’s pay transparency policy can be found on OFCCP’s website. If you need accommodation at any point during the application or interview process, please let your recruiter know or email USTalentAcquisition@ensono.com.
INTRODUCTION
At Ensono, our Purpose is to be a relentless ally, disrupting the status quo and unleashing our clients to Do Great Things! We enable our clients to achieve key business outcomes that reshape how our world runs. As an expert technology adviser and managed service provider with cross-platform certifications, Ensono empowers our clients to keep up with continuous change and embrace innovation. We can Do Great Things because we have great Associates. The Ensono Core Values unify our diverse talents and are woven into how we do business. These five traits are the key to achieving our purpose: Honesty, Reliability, Curiosity, Collaboration, and Passion.
ABOUT THE ROLE AND WHAT YOU'LL BE DOING
The RSA IGL Specialist is responsible for the end-to-end management, operation, and optimization of the RSA Governance & Lifecycle platform. This role ensures that identity governance processes—including access requests, certifications, and user lifecycle management—are proactive, efficient, and aligned with organizational security and compliance goals.
We want all new Associates to succeed in their roles at Ensono. That's why we've outlined the job requirements below. To be considered for this role, it's important that you meet all Required Qualifications. If you do not meet all of the Preferred Qualifications, we still encourage you to apply.
KEY RESPONSIBILITIES
- Platform Administration & Operation: Manage daily administrative functions of the RSA IGL platform, including monitoring identity, account, and entitlement collection runs.
- Lifecycle Management: Configure and oversee the Joiner-Mover-Leaver (JML) processes to automate provisioning and de-provisioning across multiple platforms.
- Access Governance: Plan and execute access review campaigns and certifications to ensure only authorized users have access to sensitive resources.
- Workflow & Rule Development: Design and customize workflows in the Access Request Manager (ARM) and create business rules for Segregation of Duties (SoD) and policy enforcement.
- System Integration: Configure collectors to gather data from various systems (e.g., Active Directory, LDAP, Oracle, SQL Server) and set up Access Fulfillment Express (AFX) for automated fulfillment.
- Reporting & Analytics: Develop dashboards and advanced reports to provide visibility into access risks and track the progress of governance activities.
- Issue Remediation: Troubleshoot and resolve stalled workflow items, failed change requests, and data collection errors.
REQUIRED SKILLS & QUALIFICATIONS
- Technical Expertise: Advanced hands-on experience with RSA Governance & Lifecycle (formerly Aveksa).
- Core IGA Concepts: Strong understanding of Identity Governance and Administration (IGA), including RBAC (Role-Based Access Control) and entitlement management.
- Technical Proficiency: Proficiency in database technologies (preferably Oracle), LDAP, Active Directory, and scripting languages such as SQL, Java, PowerShell, or Python.
- Compliance Knowledge: Familiarity with regulatory frameworks such as SOX, HIPAA, GDPR, or NIST.
- Education: Bachelor’s degree in Computer Science, Information Systems, or a related field.
PREFERRED CERTIFICATIONS
- RSA Governance & Lifecycle Certified Administrator.
- RSA Governance & Lifecycle Certified Professional/Associate.
- CISSP or CISM.
WHY ENSONO?
Ensono is a place to make better happen – for our clients and for your career. You can do great things through innovation or collaboration, by learning or volunteering, or to promote diversity and inclusion. You can do great things for your own health or for a healthier planet. Whatever it means to you to do great things we want Ensono to be the place you can do it. We are a client-facing business, but we do encourage clients to allow us to work remotely most of the time so if you are not required to be on a client site, you can choose to work from home or in our Ensono offices.
Some of our benefits include:
- Unlimited Paid Days Off
- Three health plan options
- 401k with company match
- Eligibility for dental, vision, short and long-term disability, life and AD&D coverage, and flexible spending accounts
- Family Forming Benefit including fertility coverage and adoption/surrogacy reimbursement
- Paid childbearing and paternal leave
- Education Reimbursement, Student Loan Assistance or 529 College Funding
- Sabbatical leave
- Wellness program
- Flexible work schedule
As of the date of this posting, a good faith estimate of the current pay scale for this role is $[HIRING MIN] to $[HIRING MAX] annually based on a full-time schedule. Please note that placement in the range may vary based on numerous factors including but not limited to skills, experience, internal equity, and business needs. In addition to base salary, other compensation programs, depending on eligibility, include an annual bonus plan based on company and individual performance and an equity grant under our Associate Equity Appreciation Program.
Ensono is an Equal Opportunity/Affirmative Action employer. We are committed to providing equal employment to our Associates and building a diverse and inclusive workforce. All qualified applicants will be considered without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, protected veteran status, disability, or other legally protected basis, in accordance with applicable law.
Pay transparency nondiscrimination statement/posting OFCCP’s pay transparency policy can be found on OFCCP’s website. If you need accommodation at any point during the application or interview process, please let your recruiter know or email USTalentAcquisition@ensono.com.
See all Iam Engineer jobs
Sign up for free to unlock all listings, filter by visa type, and get alerts for new Iam Engineer roles.
Get Access To All JobsTips for Finding STEM OPT Authorization as an Iam Engineer
Verify your CIP code before applying
IAM Engineering draws from Computer Science, Information Security, and Systems Engineering CIP codes. Confirm your degree's CIP code with your DSO before applying, because a mismatch delays your I-983 approval and can shorten your authorized work period.
Check E-Verify enrollment before accepting offers
An employer who isn't enrolled in E-Verify cannot legally employ you on STEM OPT extension. Search the E-Verify employer search tool by company name before your final interview to avoid accepting an offer you can't use.
Tailor your I-983 to IAM engineering deliverables
Generic training plans get rejected. List specific learning objectives tied to IAM tools you'll use, such as identity lifecycle management, RBAC policy design, or SCIM integration, so the plan demonstrates a direct connection to your STEM degree field.
Target employers with active identity security teams
Use Migrate Mate to filter for employers who have hired STEM OPT candidates in technology and information security roles, giving you a verified starting point instead of applying blind to companies with no track record of supporting OPT extensions.
Use OFLC Wage Search to benchmark your offer
STEM OPT employers must pay you the same wage as similarly situated U.S. workers. Pull the prevailing wage for your specific IAM role and location using OFLC Wage Search before negotiating, so you can flag any offer that falls below the required threshold.
File your extension application 90 days early
USCIS requires your STEM OPT extension application to be filed at least 90 days before your initial OPT expires. Missing that window means a gap in work authorization, and IAM contract roles often can't absorb even a short break in employment eligibility.
Iam Engineer jobs are hiring across the US. Find yours.
Find Iam Engineer JobsFrequently Asked Questions
Does an IAM Engineer role qualify for the STEM OPT extension?
Yes, provided your underlying degree falls under an eligible STEM CIP code such as Computer Science, Information Technology, or Electrical Engineering, and the IAM Engineer role you're hired into is directly related to that field. Your DSO confirms the CIP code match when endorsing your I-20 for the extension. Roles focused on identity governance, access management, or security architecture consistently satisfy the relatedness requirement.
What does the E-Verify requirement mean for IAM Engineer job seekers?
Every employer who hires you on a STEM OPT extension must be actively enrolled in E-Verify, the federal electronic employment eligibility system. This applies regardless of company size or whether the role is remote. Before accepting any IAM Engineer offer, confirm enrollment through the E-Verify employer search. If the company isn't enrolled, they must join E-Verify before your extension start date or you can't legally begin work.
What goes into an I-983 training plan for an IAM Engineer?
The I-983 must map your IAM Engineer duties to specific learning outcomes tied to your STEM degree. Include concrete objectives such as designing role-based access control policies, integrating identity providers using SAML or OIDC, or auditing privileged access workflows. Generic descriptions like 'gain industry experience' are routinely rejected. Your employer's supervisor signs off, and your DSO reviews it before endorsing your I-20 for the extension.
How does cap-gap protection apply if I'm transitioning from STEM OPT to H-1B?
If your employer files an H-1B petition on your behalf before your STEM OPT expires and you're selected in the lottery, cap-gap automatically extends your work authorization through September 30 of that year, or until USCIS adjudicates the petition. You can continue working as an IAM Engineer throughout that period without interruption, as long as your employer remains E-Verify enrolled and your I-983 training plan stays current.
Where can I find IAM Engineer roles where employers already support STEM OPT?
Migrate Mate filters IAM Engineer listings by employers who have a documented history of hiring international students on work authorization, so you're not starting from scratch trying to educate hiring managers about E-Verify or STEM OPT rules. Search by role, location, and authorization type to surface employers prepared to move quickly through the I-983 and E-Verify steps without delays from unfamiliarity.
See which Iam Engineer employers are hiring and sponsoring visas right now.
Search Iam Engineer Jobs