Overview:
As an Identity Operations Engineer at Kalles Group, you will support enterprise clients by managing workforce, partner, and contractor access across Entra ID and SailPoint, migrating from legacy identity providers. You’ll handle JML, provisioning, and routine identity hygiene while automating repeat tasks with PowerShell, Graph, SailPoint APIs, and cloud workflows. You’ll escalate and resolve issues with Identity Architecture, HR, ITSM, and SecOps, ensuring secure, compliant access. This hybrid Seattle role offers balance, learning, and impact at scale. Compensation / Benefits Medical, Dental, Vision plans 401K with matching PTO for salaried employees Work/life balance Hybrid work model Equal-opportunity employer
Responsibilities:
Identity lifecycle operations (Joiner/Mover/Leaver) within SLA: account creation, access provisioning, deprovisioning Operate SailPoint ISC for access requests, provisioning, aggregations, and identity refreshes Administer Entra ID users, groups, licensing, and lifecycle workflows Troubleshoot HR-to-identity provisioning and hybrid sync issues Manage privileged/elevated access with approvals and audit trails Support app access (SSO, SCIM errors) and onboarding apps Conduct access certification and provide audit evidence (SOX, PCI) Maintain account hygiene (orphaned/dormant accounts, reconciliation) Automation & continuous improvement: build workflows with PowerShell, Graph API, Python; use Logic Apps, Power Automate, Azure Automation/Functions Treat automation as production code with CI/CD practices and AI-assisted scripting Write runbooks, SOPs, and KBs; escalate to service desk and app teams Partner with HR/HRIS, ITSM, SecOps on data quality and identity signals Participate in identity incident response including after-hours support Hybrid onsite role in Seattle with after-hours support as needed
Key requirements:
Bachelor's/Master's in CS, Cybersecurity, IT, or equivalent experience 3+ years in IAM, IAM operations, or systems/security engineering with JML experience Hands-on Entra ID admin and knowledge of CA, PIM, and Entra ID Governance (Lifecycle Workflows, Entitlement Management, Access Reviews) Hands-on SailPoint ISC/IdentityNow or equivalent IGA operations: access requests, provisioning, connectors PowerShell and Microsoft Graph API; Python and REST API integration Knowledge of SAML, OAuth 2.0, OIDC, SCIM for SSO/provisioning Hybrid identity experience with on-prem AD and Entra Connect/Cloud Sync ITSM ticketing (ServiceNow), SLA management, and audit documentation Strong troubleshooting, attention to detail, and clear communication with technical and non-technical partners Strong communication Attention to detail Ownership PowerShell Microsoft Graph API / Graph PowerShell SDK Python