TN Visa Iam Engineer Jobs
IAM Engineer roles qualify for TN visa sponsorship under the USMCA's Computer Systems Analyst category, making them accessible to Canadian and Mexican professionals without a lottery or multi-year wait. Employers file or support the TN application directly, and Canadian citizens can often receive approval at the border the same day.
See All Iam Engineer JobsOverview
Showing 5 of 41+ Iam Engineer jobs


Have you applied for this role?


Have you applied for this role?


Have you applied for this role?


Have you applied for this role?


Have you applied for this role?
See all 41+ Iam Engineer jobs
Sign up for free to unlock all listings, filter by visa type, and get alerts for new Iam Engineer roles.
Get Access To All Jobs
Responsibilities
Kforce has a client in Allen, TX that is seeking an experienced IAM Engineer - Identity Governance to support and enhance enterprise Identity & Access Management platforms. This is a 100% remote, contract-to-hire opportunity. Candidates must be based in the United States. Note: Candidates on the East Coast must be willing to work Central or Mountain Time hours. In this role, you will lead efforts related to identity lifecycle management, access governance, and authorization models while contributing to ongoing platform optimization and cloud integrations. You will work closely with stakeholders to ensure secure, scalable, and compliant access across cloud and on-prem environments. This role focuses on designing, implementing, and supporting identity governance solutions with an emphasis on SailPoint. The ideal candidate brings deep IAM engineering experience, strong automation skills, and the ability to partner across security, infrastructure, and application teams.
Requirements
- 5+ years of hands-on Identity & Access Management (IAM) experience
- 3+ years of SailPoint engineering and/or architecture experience
- Experience with SailPoint IdentityNow / Identity Security Cloud
- Strong knowledge of IAM platforms (SailPoint, Saviynt, Okta)
- Experience building automation and scripts to support IAM processes
- Working knowledge of APIs (REST, JSON) and cloud infrastructure
- Experience managing identity lifecycle events (provisioning, deprovisioning, access changes)
Nice-to-Have
- Bachelor's degree in Computer Science, IT, or Cybersecurity
- Advanced understanding of RBAC, ABAC, PBAC, and separation of duties (SOD)
- Cloud experience with AWS, Azure, and/or GCP
- PowerShell, SQL, RPA, or Power Automate experience
- Experience with access certifications and compliance reporting
- Familiarity with Privileged Access Management tools (e.g., Delinea Secret Server)
The pay range is the lowest to highest compensation we reasonably in good faith believe we would pay at posting for this role. We may ultimately pay more or less than this range. Employee pay is based on factors like relevant education, qualifications, certifications, experience, skills, seniority, location, performance, union contract and business needs. This range may be modified in the future.
We offer comprehensive benefits including medical/dental/vision insurance, HSA, FSA, 401(k), and life, disability & ADD insurance to eligible employees. Salaried personnel receive paid time off. Hourly employees are not eligible for paid time off unless required by law. Hourly employees on a Service Contract Act project are eligible for paid sick leave. Note: Pay is not considered compensation until it is earned, vested and determinable. The amount and availability of any compensation remains in Kforce's sole discretion unless and until paid and may be modified in its discretion consistent with the law. This job is not eligible for bonuses, incentives or commissions.
Kforce is an Equal Opportunity/Affirmative Action Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, pregnancy, sexual orientation, gender identity, national origin, age, protected veteran status, or disability status.
By clicking “Apply Today” you agree to receive calls, AI-generated calls, text messages or emails from Kforce and its affiliates, and service providers. Note that if you choose to communicate with Kforce via text messaging the frequency may vary, and message and data rates may apply. Carriers are not liable for delayed or undelivered messages. You will always have the right to cease communicating via text by using key words such as STOP.

Responsibilities
Kforce has a client in Allen, TX that is seeking an experienced IAM Engineer - Identity Governance to support and enhance enterprise Identity & Access Management platforms. This is a 100% remote, contract-to-hire opportunity. Candidates must be based in the United States. Note: Candidates on the East Coast must be willing to work Central or Mountain Time hours. In this role, you will lead efforts related to identity lifecycle management, access governance, and authorization models while contributing to ongoing platform optimization and cloud integrations. You will work closely with stakeholders to ensure secure, scalable, and compliant access across cloud and on-prem environments. This role focuses on designing, implementing, and supporting identity governance solutions with an emphasis on SailPoint. The ideal candidate brings deep IAM engineering experience, strong automation skills, and the ability to partner across security, infrastructure, and application teams.
Requirements
- 5+ years of hands-on Identity & Access Management (IAM) experience
- 3+ years of SailPoint engineering and/or architecture experience
- Experience with SailPoint IdentityNow / Identity Security Cloud
- Strong knowledge of IAM platforms (SailPoint, Saviynt, Okta)
- Experience building automation and scripts to support IAM processes
- Working knowledge of APIs (REST, JSON) and cloud infrastructure
- Experience managing identity lifecycle events (provisioning, deprovisioning, access changes)
Nice-to-Have
- Bachelor's degree in Computer Science, IT, or Cybersecurity
- Advanced understanding of RBAC, ABAC, PBAC, and separation of duties (SOD)
- Cloud experience with AWS, Azure, and/or GCP
- PowerShell, SQL, RPA, or Power Automate experience
- Experience with access certifications and compliance reporting
- Familiarity with Privileged Access Management tools (e.g., Delinea Secret Server)
The pay range is the lowest to highest compensation we reasonably in good faith believe we would pay at posting for this role. We may ultimately pay more or less than this range. Employee pay is based on factors like relevant education, qualifications, certifications, experience, skills, seniority, location, performance, union contract and business needs. This range may be modified in the future.
We offer comprehensive benefits including medical/dental/vision insurance, HSA, FSA, 401(k), and life, disability & ADD insurance to eligible employees. Salaried personnel receive paid time off. Hourly employees are not eligible for paid time off unless required by law. Hourly employees on a Service Contract Act project are eligible for paid sick leave. Note: Pay is not considered compensation until it is earned, vested and determinable. The amount and availability of any compensation remains in Kforce's sole discretion unless and until paid and may be modified in its discretion consistent with the law. This job is not eligible for bonuses, incentives or commissions.
Kforce is an Equal Opportunity/Affirmative Action Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, pregnancy, sexual orientation, gender identity, national origin, age, protected veteran status, or disability status.
By clicking “Apply Today” you agree to receive calls, AI-generated calls, text messages or emails from Kforce and its affiliates, and service providers. Note that if you choose to communicate with Kforce via text messaging the frequency may vary, and message and data rates may apply. Carriers are not liable for delayed or undelivered messages. You will always have the right to cease communicating via text by using key words such as STOP.
See all 41+ Iam Engineer jobs
Sign up for free to unlock all listings, filter by visa type, and get alerts for new Iam Engineer roles.
Get Access To All JobsTips for Finding TN Visa Sponsorship as an Iam Engineer
Map your credentials to Computer Systems Analyst
TN visa approval for IAM Engineers depends on fitting the Computer Systems Analyst category. Your degree must be in computer science, information systems, or a directly related field. A cybersecurity or IT management degree typically satisfies this, but a business degree alone often doesn't.
Target employers experienced with visa sponsorship
Large tech firms, financial institutions, and federal contractors regularly sponsor TN visas for IAM roles because identity and access management sits at the core of their compliance obligations. Prioritize organizations with recent visa filings and sponsorship experience over companies without an established track record of supporting work visa candidates.
Request a detailed support letter from your employer
Your TN approval lives or dies on the employer support letter. It must name your specific IAM duties, confirm the role requires a bachelor's degree in a qualifying field, and state your start date and compensation. Vague letters citing only a job title are a common reason CBP denies entry.
Clarify your vendor certifications before the border interview
CBP officers aren't always familiar with IAM-specific credentials like CyberArk, Okta, or SailPoint certifications. Bring documentation showing these are advanced technical qualifications, not substitutes for a degree, to avoid confusion about whether your background meets specialty occupation standards.
Use Migrate Mate to find sponsorship-ready IAM roles
Finding employers willing to sponsor TN visas for IAM Engineers is faster when you search by sponsorship history. Migrate Mate filters roles specifically for TN-eligible Canadian and Mexican professionals, so you're not cold-applying to companies unfamiliar with the process.
Negotiate TN filing timeline into your offer terms
Canadian citizens can activate TN status at the border with same-day processing, but Mexican citizens require a U.S. consulate appointment. Confirm which route applies before accepting an offer, and build in buffer time for consulate scheduling if you hold a Mexican passport.
Iam Engineer jobs are hiring across the US. Find yours.
Find Iam Engineer JobsIam Engineer TN Visa: Frequently Asked Questions
Does an IAM Engineer role qualify for TN visa sponsorship?
Yes, IAM Engineer positions typically qualify under the Computer Systems Analyst TN category, provided your duties center on designing, implementing, or managing identity and access systems rather than general IT support. Your employer's support letter must explicitly describe these technical responsibilities and confirm the role requires a qualifying bachelor's degree.
How does TN visa sponsorship compare to H-1B for IAM Engineers?
TN visa sponsorship for IAM Engineers is significantly more predictable than H-1B. There's no annual lottery, no cap for Canadian citizens, and Canadian applicants can receive approval at the border the same day they present their documents. H-1B requires a lottery registration each spring with roughly a one-in-four selection chance, followed by months of USCIS processing before you can start work.
Can I search for IAM Engineer jobs with TN sponsorship in one place?
Migrate Mate is built specifically for Canadian and Mexican professionals seeking U.S. roles with TN visa sponsorship, including IAM Engineer positions. Rather than filtering through generic job boards where sponsorship status is unclear, Migrate Mate shows you roles from employers already familiar with the TN visa process.
What happens if my IAM Engineer offer falls through after TN approval?
TN status is employer-specific, so if your offer is rescinded or employment ends, your status becomes invalid. Canadian citizens can return to Canada and apply for a new TN at the border once they have a new offer. Mexican citizens will need to schedule a new consulate appointment. Neither nationality has an automatic grace period written into TN status the way H-1B holders have 60 days.
Does my IAM specialization affect my TN eligibility?
Your specific IAM focus matters less than how your overall role is described. Whether you specialize in privileged access management, identity governance, or single sign-on infrastructure, the TN application succeeds when your duties clearly align with systems analysis and your degree matches. Roles that drift into general project management or security policy without a strong technical systems component face higher CBP scrutiny.
See which Iam Engineer employers are hiring and sponsoring visas right now.
Search Iam Engineer Jobs