Iam Engineer Jobs in USA with Visa Sponsorship
IAM Engineer roles attract strong H-1B visa sponsorship because the work requires specialized credentials in identity governance, access control, and security architecture, qualifications that typically map cleanly to specialty occupation standards. Most openings come from financial services, healthcare, and enterprise tech. For detailed occupation requirements, see the O*NET profile.
See All Iam Engineer JobsOverview
Showing 5 of 91+ Iam Engineer jobs
Have you applied for this role?
Have you applied for this role?
Have you applied for this role?
Have you applied for this role?
Have you applied for this role?
See all 91+ Iam Engineer jobs
Sign up for free to unlock all listings, filter by visa type, and get alerts for new Iam Engineer roles.
Get Access To All JobsRequisition ID
93876
Department
Tech Data AI Ventures
Job Function
Tech Data AI Ventures
Location
Remote, New York, United States
Role Location Designation
Hybrid - 3 days per quarter Location Designation: Hybrid - 3 days per quarter
As part of Technology, you'll have the opportunity to contribute to groundbreaking initiatives that shape New York Life's digital landscape. Leverage cutting-edge technologies like Generative AI to increase productivity, streamline processes, and create seamless experiences for clients, agents, and employees. Your expertise fuels innovation, agility, and growth driving the company's success.
The IAM Engineer will play a key role in designing, engineering, and maintaining NYL’s Identity & Access Management solutions across all IAM domains: Identity Governance & Administration (IGA), Privileged Access Management (PAM), Directory Services, and Web Access Management (WAM). This role blends hands-on engineering with solution architecture, ensuring that IAM capabilities are robust, scalable, secure, and aligned with enterprise standards. The IAM Engineer will support both on-premises and cloud environments, working with a mix of commercial, SaaS, and custom platforms.
Experience in SailPoint, CyberArk, Ping, Entra and Active Directory is strongly preferred. The ideal candidate will bring technical depth, a strong learning mindset, and genuine enthusiasm for advancing their craft. We are building the identity foundation for a more connected, AI-enabled, and technology-driven future so curiosity, adaptability, and readiness to embrace new capabilities will be essential.
What You’ll Do:
- Engineer, configure, and maintain IAM solutions across IGA, PAM, Directory, and WAM domains.
- Collaborate with architecture teams to design IAM solutions that integrate securely with on-premises and cloud applications (AWS, SaaS, hybrid models).
- Develop and maintain workflows, connectors, policies, and scripts to automate identity lifecycle and access management processes.
- Integrate IAM solutions with enterprise authentication and authorization frameworks, including MFA, passwordless authentication, and emerging NHI standards (e.g., SPIFFE, DCR, PKCE).
- Partner with Information Security, Application, and Infrastructure teams to ensure IAM solutions meet security, compliance, and audit requirements.
- Troubleshoot and resolve complex IAM-related incidents, performance issues, and integration challenges.
- Support roadmap delivery for IAM initiatives, including cloud adoption, Zero Trust enablement, and modernization of legacy IAM services.
- Contribute to solution design reviews, platform upgrades, and security hardening initiatives.
- Explore and implement AI/ML-based anomaly detection for identity risk scoring and adaptive authentication.
- Build automation scripts (Python, PowerShell, Java) to enhance IAM workflows.
- Collaborate on introducing AI-driven decision-making for access governance, identity-based threat detection, and identity intelligence.
- Stay engaged with emerging identity, cloud, and AI-related technologies; bring forward ideas to evolve IAM for the future.
What You’ll Bring:
- Bachelor’s degree in Computer Science, Information Systems, or equivalent experience.
- 10+ years of hands-on engineering experience across multiple IAM domains.
- Strong knowledge of and experience with SailPoint, CyberArk, PingOne, PingFederate, Ping Directory, Entra and Active Directory.
- Proven experience integrating IAM solutions in hybrid (cloud + on-premises) environments.
- Familiarity with identity protocols such as SAML, OAuth 2.0, OIDC, SCIM, LDAP, SPIFFE, DCR, and PKCE.
- Strong scripting skills (e.g., PowerShell, Python, Java) for automation and integration.
- Understanding of IAM-related compliance and regulatory requirements (e.g., NYS DFS, NIST).
- Ability to work effectively in a team-oriented, collaborative environment, with strong problem-solving skills.
Preferred Qualifications
- Experience with cloud identity platforms (e.g., Azure AD, AWS IAM).
- Exposure to Zero Trust architectures, modern authentication strategies, and AI-enabled security capabilities.
- Prior experience in a large enterprise or financial services environment.
- IAM vendor certifications (e.g., SailPoint IdentityNow Engineer, CyberArk Trustee/Defender, Ping Identity Certified Professional).
Pay Transparency
Salary Range: $124,000-$177,000
Overtime eligible: Exempt
Discretionary bonus eligible: Yes
Sales bonus eligible: No
Actual base salary will be determined based on several factors but not limited to individual’s experience, skills, qualifications, and job location. Additionally, employees are eligible for an annual discretionary bonus. In addition to base salary, employees may also be eligible to participate in an incentive program.
Company Overview
At New York Life, our 180-year legacy of purpose and integrity fuels our future. As we evolve into a more technology-, data-, and AI-enabled organization, we remain grounded in the values that drive lasting impact.
Our diverse business portfolio creates opportunities to make a difference across industries and communities—inviting bold thinking, collaborative problem-solving, and purpose-driven innovation. Here, you’ll find the rare balance of long-standing stability and forward momentum, supported by an inclusive team that honors tradition while embracing progress.
As a Fortune 100 mutual company, we offer a place to grow your skills, contribute to meaningful work, and deliver solutions that matter. Your ideas drive what’s next, and your growth powers it.
Our Benefits
We provide a full package of benefits for employees – and have unique offerings for a modern workforce, including leave programs, adoption assistance, and student loan repayment programs. Based on feedback from our employees, we continue to refine and add benefits to our offering, so that you can flourish both inside and outside of work.
Our Commitment to Inclusion
At New York Life, fostering an inclusive workplace is fundamental to who we are and how we serve our communities. We have a longstanding commitment to creating an environment where individuals can contribute their best and succeed together. This foundation is rooted in our core values of humanity and integrity, ensuring that every employee feels valued and supported. By embracing a broad range of perspectives and experiences, we achieve greater success and fulfill our promise of providing financial security and peace of mind to families across all communities.
Recognized as one of Fortune’s World’s Most Admired Companies, New York Life is committed to improving local communities through a culture of employee giving and volunteerism, supported by the Foundation. We're proud that due to our mutuality, we operate in the best interests of our policy owners.
Job Requisition ID: 93876
Requisition ID
93876
Department
Tech Data AI Ventures
Job Function
Tech Data AI Ventures
Location
Remote, New York, United States
Role Location Designation
Hybrid - 3 days per quarter Location Designation: Hybrid - 3 days per quarter
As part of Technology, you'll have the opportunity to contribute to groundbreaking initiatives that shape New York Life's digital landscape. Leverage cutting-edge technologies like Generative AI to increase productivity, streamline processes, and create seamless experiences for clients, agents, and employees. Your expertise fuels innovation, agility, and growth driving the company's success.
The IAM Engineer will play a key role in designing, engineering, and maintaining NYL’s Identity & Access Management solutions across all IAM domains: Identity Governance & Administration (IGA), Privileged Access Management (PAM), Directory Services, and Web Access Management (WAM). This role blends hands-on engineering with solution architecture, ensuring that IAM capabilities are robust, scalable, secure, and aligned with enterprise standards. The IAM Engineer will support both on-premises and cloud environments, working with a mix of commercial, SaaS, and custom platforms.
Experience in SailPoint, CyberArk, Ping, Entra and Active Directory is strongly preferred. The ideal candidate will bring technical depth, a strong learning mindset, and genuine enthusiasm for advancing their craft. We are building the identity foundation for a more connected, AI-enabled, and technology-driven future so curiosity, adaptability, and readiness to embrace new capabilities will be essential.
What You’ll Do:
- Engineer, configure, and maintain IAM solutions across IGA, PAM, Directory, and WAM domains.
- Collaborate with architecture teams to design IAM solutions that integrate securely with on-premises and cloud applications (AWS, SaaS, hybrid models).
- Develop and maintain workflows, connectors, policies, and scripts to automate identity lifecycle and access management processes.
- Integrate IAM solutions with enterprise authentication and authorization frameworks, including MFA, passwordless authentication, and emerging NHI standards (e.g., SPIFFE, DCR, PKCE).
- Partner with Information Security, Application, and Infrastructure teams to ensure IAM solutions meet security, compliance, and audit requirements.
- Troubleshoot and resolve complex IAM-related incidents, performance issues, and integration challenges.
- Support roadmap delivery for IAM initiatives, including cloud adoption, Zero Trust enablement, and modernization of legacy IAM services.
- Contribute to solution design reviews, platform upgrades, and security hardening initiatives.
- Explore and implement AI/ML-based anomaly detection for identity risk scoring and adaptive authentication.
- Build automation scripts (Python, PowerShell, Java) to enhance IAM workflows.
- Collaborate on introducing AI-driven decision-making for access governance, identity-based threat detection, and identity intelligence.
- Stay engaged with emerging identity, cloud, and AI-related technologies; bring forward ideas to evolve IAM for the future.
What You’ll Bring:
- Bachelor’s degree in Computer Science, Information Systems, or equivalent experience.
- 10+ years of hands-on engineering experience across multiple IAM domains.
- Strong knowledge of and experience with SailPoint, CyberArk, PingOne, PingFederate, Ping Directory, Entra and Active Directory.
- Proven experience integrating IAM solutions in hybrid (cloud + on-premises) environments.
- Familiarity with identity protocols such as SAML, OAuth 2.0, OIDC, SCIM, LDAP, SPIFFE, DCR, and PKCE.
- Strong scripting skills (e.g., PowerShell, Python, Java) for automation and integration.
- Understanding of IAM-related compliance and regulatory requirements (e.g., NYS DFS, NIST).
- Ability to work effectively in a team-oriented, collaborative environment, with strong problem-solving skills.
Preferred Qualifications
- Experience with cloud identity platforms (e.g., Azure AD, AWS IAM).
- Exposure to Zero Trust architectures, modern authentication strategies, and AI-enabled security capabilities.
- Prior experience in a large enterprise or financial services environment.
- IAM vendor certifications (e.g., SailPoint IdentityNow Engineer, CyberArk Trustee/Defender, Ping Identity Certified Professional).
Pay Transparency
Salary Range: $124,000-$177,000
Overtime eligible: Exempt
Discretionary bonus eligible: Yes
Sales bonus eligible: No
Actual base salary will be determined based on several factors but not limited to individual’s experience, skills, qualifications, and job location. Additionally, employees are eligible for an annual discretionary bonus. In addition to base salary, employees may also be eligible to participate in an incentive program.
Company Overview
At New York Life, our 180-year legacy of purpose and integrity fuels our future. As we evolve into a more technology-, data-, and AI-enabled organization, we remain grounded in the values that drive lasting impact.
Our diverse business portfolio creates opportunities to make a difference across industries and communities—inviting bold thinking, collaborative problem-solving, and purpose-driven innovation. Here, you’ll find the rare balance of long-standing stability and forward momentum, supported by an inclusive team that honors tradition while embracing progress.
As a Fortune 100 mutual company, we offer a place to grow your skills, contribute to meaningful work, and deliver solutions that matter. Your ideas drive what’s next, and your growth powers it.
Our Benefits
We provide a full package of benefits for employees – and have unique offerings for a modern workforce, including leave programs, adoption assistance, and student loan repayment programs. Based on feedback from our employees, we continue to refine and add benefits to our offering, so that you can flourish both inside and outside of work.
Our Commitment to Inclusion
At New York Life, fostering an inclusive workplace is fundamental to who we are and how we serve our communities. We have a longstanding commitment to creating an environment where individuals can contribute their best and succeed together. This foundation is rooted in our core values of humanity and integrity, ensuring that every employee feels valued and supported. By embracing a broad range of perspectives and experiences, we achieve greater success and fulfill our promise of providing financial security and peace of mind to families across all communities.
Recognized as one of Fortune’s World’s Most Admired Companies, New York Life is committed to improving local communities through a culture of employee giving and volunteerism, supported by the Foundation. We're proud that due to our mutuality, we operate in the best interests of our policy owners.
Job Requisition ID: 93876
See all 91+ Iam Engineer jobs
Sign up for free to unlock all listings, filter by visa type, and get alerts for new Iam Engineer roles.
Get Access To All JobsTips for Finding Visa Sponsorship as an Iam Engineer
Lead with your IAM tool stack
Employers filing H-1B petitions for IAM roles need to demonstrate specialty occupation. Listing Okta, SailPoint, CyberArk, or Azure AD prominently in your resume ties your skills directly to the technical requirements USCIS evaluates.
Target regulated industries first
Financial services, healthcare, and government contractors face strict identity compliance mandates. These employers sponsor IAM Engineers far more consistently than general tech companies because the role isn't discretionary, it's required for regulatory compliance.
Clarify your degree field upfront
IAM roles typically require computer science, information security, or a closely related field. If your degree is in a different discipline, gather evidence of relevant coursework or certifications early, USCIS scrutinizes degree-to-role alignment in security engineering petitions.
Certifications strengthen your petition
Credentials like CISSP, CIAM, or vendor-specific certifications from Okta or SailPoint signal specialized expertise. Employers can reference these in H-1B support letters to reinforce why the role demands more than a generalist IT background.
Ask about cap-exempt employer options
Universities, nonprofit research institutions, and certain government affiliates are exempt from the H-1B lottery. IAM roles exist at these organizations. If you've missed the lottery, pursuing cap-exempt employers can get you H-1B status without waiting for the next cycle.
Engage employers before the March registration window
H-1B lottery registration opens in March for October start dates. Starting your job search in the fourth quarter of the prior year gives employers enough runway to commit to sponsorship and complete the Labor Condition Application before the deadline.
Iam Engineer jobs are hiring across the US. Find yours.
Find Iam Engineer JobsFrequently Asked Questions
Do IAM Engineer roles qualify for H-1B sponsorship?
Yes. IAM Engineer positions consistently qualify as H-1B specialty occupations because they require at minimum a bachelor's degree in computer science, information security, or a related technical field. USCIS has approved H-1B petitions for identity and access management roles across financial services, healthcare, and enterprise software companies. Roles with clearly defined technical requirements and tool-specific expertise, such as Okta administration or SailPoint implementation, hold up well under scrutiny.
What degree do I need to get an H-1B as an IAM Engineer?
A bachelor's degree in computer science, information systems, cybersecurity, or a closely related technical discipline is the standard requirement. Degrees in unrelated fields can complicate the petition, though employers sometimes supplement them with certifications and documented work history to establish equivalent qualifications. USCIS evaluates whether the specific degree field is normally the minimum for entry into that occupation, so alignment matters more than credential level alone.
Which types of employers sponsor IAM Engineers most reliably?
Financial institutions, health systems, defense contractors, and large enterprise software companies sponsor IAM Engineers most consistently. These employers face regulatory mandates around identity governance, SOX, HIPAA, FedRAMP, that make IAM roles non-negotiable rather than optional. That compliance pressure translates into willingness to sponsor. You can browse IAM Engineer roles from verified sponsoring employers directly on Migrate Mate.
Can I work as an IAM Engineer on an OPT EAD while my employer files an H-1B?
Yes. If you're on F-1 OPT, you can begin working while your employer prepares an H-1B petition. If your OPT expires before October 1, the H-1B start date, you may need a 24-month STEM OPT extension to bridge the gap. Information security and computer science degrees typically qualify for STEM OPT. Confirm your degree's CIP code with your DSO as early as possible to avoid a work authorization gap.
Are IAM Engineer H-1B petitions at higher risk of denial or RFEs?
Not inherently, but petitions can attract Requests for Evidence when the job description is vague or the degree field doesn't align closely with identity and access management. USCIS has historically scrutinized IT consulting and staffing arrangements more than direct-hire positions. To reduce RFE risk, the employer's support letter should detail specific IAM technologies used, explain why a specialized degree is required, and document the technical complexity of the role.
What is the prevailing wage requirement for sponsored Iam Engineer jobs?
U.S. employers sponsoring a visa must pay at least the prevailing wage, which is what workers in the same role, area, and experience level typically earn. The Department of Labor sets this rate to make sure companies aren't hiring foreign workers simply because they'd accept lower pay than a U.S. worker. It varies by job title, location, and experience. You can look up current prevailing wage rates for any occupation and location using the OFLC Wage Search page.
See which Iam Engineer employers are hiring and sponsoring visas right now.
Search Iam Engineer Jobs