IAM Engineer (CyberArk) Remote

Overview

Our client is seeking an experienced IAM Engineer to join their Identity & Access Management team. This individual will play a key role in supporting and administering the organization's IAM environment, with a strong focus on CyberArk Privileged Access Management (PAM). The ideal candidate has hands-on CyberArk administration experience, excels at troubleshooting access issues, and can effectively partner with end users and technical teams to ensure secure and efficient access management.

Responsibilities

• Administer and maintain the CyberArk PAM environment, including privileged accounts, Safes, permissions, and user access.
• Support ongoing initiatives to migrate CyberArk infrastructure from on-premises environments to the cloud.
• Manage user provisioning, deprovisioning, and access requests across enterprise systems.
• Investigate and resolve IAM-related tickets, access issues, and authentication challenges.
• Support Identity Governance initiatives and assist with SailPoint administration and operations.
• Configure and maintain integrations utilizing SCIM, OpenID Connect (OIDC), OAuth, APIs, and Microsoft Entra ID.
• Collaborate with business users, security teams, and IT stakeholders to troubleshoot complex access-related issues.
• Ensure adherence to security policies, least-privilege principles, and access governance standards.

Required Qualifications

• Hands-on CyberArk administration experience (REQUIRED).
• Experience administering CyberArk components such as:
  • PVWA
  • CPM
  • PSM
  • CyberArk Safes
  • Privileged Accounts
• Strong Identity & Access Management (IAM) background.
• Experience with user provisioning, access management, and role-based access controls (RBAC).
• Excellent troubleshooting and problem-solving skills.
• Strong verbal and written communication skills.
• Customer-focused mindset with the ability to understand and resolve user access challenges efficiently.

Preferred Qualifications

• CyberArk cloud migration experience.
• Experience with SailPoint Identity Governance solutions.
• Microsoft Entra ID administration.
• Experience with SCIM provisioning.
• Knowledge of OpenID Connect (OIDC) and OAuth authentication protocols.
• Experience working with REST APIs and system integrations.
• background in healthcare, higher education, academic institutions, or large enterprise environments.

Technical Keywords

CyberArk, PAM, Privileged Access Management, CyberArk Safes, PVWA, CPM, PSM, IAM, Identity & Access Management, SailPoint, Identity Governance, Entra ID, SCIM, OAuth, OIDC, OpenID Connect, RBAC, User Provisioning, Access Management.

Schedule

• Fully Remote
• Must be able to work Eastern Time hours.
• Daily start time of 9:15 AM ET.

What Makes Someone Successful in This Role

• Proven CyberArk administration experience, not simply end-user exposure.
• Ability to clearly explain CyberArk administration tasks such as managing Safes, configuring permissions, onboarding privileged accounts, and provisioning users.
• Strong IAM troubleshooting skills and a commitment to delivering an excellent user experience.
• Ability to work independently while partnering effectively with security, infrastructure, and application teams.

This is a Contract position based out of Boston, MA.

The pay range for this position is $80.00 - $120.00/hr.

Individual compensation offered for this position within this range will depend on many factors, including qualifications, skills, relevant experience, job knowledge, geographic location, internal equity, and other pertinent job-related factors.

Eligibility requirements apply to some benefits and may depend on your job classification and length of employment. Benefits are subject to change and may be subject to specific elections, plan, or program terms. If eligible, the benefits available for this temporary role may include the following: Medical, dental & vision Critical Illness, Accident, and Hospital 401(k) Retirement Plan Pre-tax and Roth post-tax contributions available Life Insurance (Voluntary Life & AD&D for the employee and dependents) Short and long-term disability Health Spending Account (HSA) Transportation benefits Employee Assistance Program Time Off/Leave (PTO, Vacation or Sick Leave)

This is a Contract position based out of Boston, MA.

This position is anticipated to close on Nov 20, 2026.

This is a fully remote position.

About Aston Carter

Aston Carter provides world-class corporate talent solutions to thousands of clients across the globe. Specialized in accounting, finance, human resources, talent acquisition, procurement, supply chain and select administrative professions, we extend the capabilities of industry-leading companies. We draw on our deep recruiting expertise and expansive network to meet the evolving needs of our clients and talent community with agility and excellence. With offices across the U.S., Canada, Asia Pacific and Europe, Aston Carter serves many of the Fortune 500. We are proud to be a ClearlyRated Best of Staffing® Platinum Award winner for both client and talent service.

The company is an equal opportunity employer and will consider all applications without regard to race, sex, age, color, religion, national origin, veteran status, disability, sexual orientation, gender identity, genetic information or any characteristic protected by law.

If you would like to request a reasonable accommodation, such as the modification or adjustment of the job application process or interviewing process due to a disability, please email astoncarteraccommodation@astoncarter.com for other accommodation options.

San Francisco Fair Chance Ordinance: Pursuant to the San Francisco Fair Chance Ordinance, for all positions located in the city and county of San Francisco, we will consider for employment qualified applicants with arrest and conviction records.

Massachusetts Lie Detector: It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability.

Use of Artificial Intelligence (AI): We may use Artificial Intelligence (AI) to support parts of our hiring process, including sourcing, screening, and evaluating candidates. AI helps assess applications and qualifications, but final decisions are made by our hiring team. By applying, you acknowledge and agree that your application may be reviewed using AI tools.