Offer summary

Qualifications:

Bachelor's degree in Computer Science, Cybersecurity, or related field or equivalent experience., 5+ years of hands-on experience with Microsoft Entra ID / Azure AD, AWS IAM, and OneLogin., Strong knowledge of IAM standards such as SCIM, SAML, OIDC, OAuth2, and FIDO2/WebAuthn., Scripting and automation skills in Python, PowerShell, and Graph API..

Key responsibilities:

Design, implement, and manage identity solutions across various platforms including Microsoft Entra ID and AWS IAM.

Integrate applications using protocols like SCIM, SAML, and OAuth2.

Conduct access reviews and manage identity lifecycle processes using automation tools.

Collaborate with stakeholders to define IAM use cases and manage project dependencies.

Job description

About KBS
Kellermeyer Bergensons Services (KBS) is the largest privately held provider of facility services in North America, servicing over 2 billion square feet of space daily. We help industry leaders across a wide range of key verticals—including retail, industrial and logistics, healthcare, education, manufacturing, and more—maintain clean, efficient and welcoming spaces that support their operations. As we continue to grow, we’re looking for team members who are dedicated, reliable, and ready to contribute to a culture built on respect, opportunity, and pride in service.

Identity and Access Management (IAM) Engineer Job Description

KBS is seeking a skilled and security-minded Identity & Access Management (IAM) Engineer to join our Cybersecurity team. This role plays a critical part in enabling secure, reliable access across both our on-premises and cloud environments, focusing on modern identity governance, authentication protocols, and Zero Trust access controls. If this sounds like you, apply today!

LOCATION: 100% remote, but candidates must live in the Pacific or Central time zone

SALARY: $115-125K

The salary range for this position is based on market data and is intended to provide a general guideline for the position. Actual compensation may vary depending on factors such as experience, qualifications, skills, internal equity, and geographic location. The final offer will be determined through a comprehensive evaluation during the hiring process.

Key Responsibilities:

Design, implement, and manage identity solutions across Microsoft Entra ID / Azure AD, Active Directory, AWS IAM, and OneLogin, supporting hybrid and cloud-first architectures.
Integrate cloud and on-prem applications using SCIM, SAML, OIDC, OAuth2, and FIDO2/WebAuthn.
Manage and automate identity lifecycle processes (Joiner, Mover, Leaver), including both HR-driven and technical workflows, using tools like Python, PowerShell, Microsoft Graph API for provisioning, deprovisioning, and policy enforcement.
Enforce and fine-tune Conditional Access policies, including MFA, device trust, RBAC, and risk-based access controls using Microsoft Entra ID.
Lead troubleshooting and root-cause analysis for IAM-related issues across cloud and on-prem environments; collaborate closely with infrastructure and application teams.
Conduct periodic access reviews, audit reporting, and identity governance activities to support compliance with SOC2, NIST CSF, and internal policies.
Partner with stakeholders to capture IAM use cases, define process requirements, and manage cross-functional IAM project dependencies.
Maintain accurate documentation of IAM processes, policies, and automation workflows.
Stay current with evolving IAM technologies, threat trends, and best practices to improve security posture and support a Zero Trust strategy.
Other duties as assigned.

Required Skills & Qualifications

5+ years of hands-on experience with:
- Microsoft Entra ID / Azure AD, including Conditional Access, Governance, PIM, and Just-in-Time (JIT) access controls
- AWS IAM and Identity Center
- OneLogin or similar IAM platforms
Strong knowledge of IAM standards: SCIM, SAML, OIDC, OAuth2, FIDO2/WebAuthn
Scripting/automation skills (e.g., Python, PowerShell, Graph API, Terraform)
Experience with Zero Trust principles and identity-based security enforcement
Clear documentation and communication skills
Strong Analytical and problem-solving abilities
Ethical judgment and critical thinking
Excellent interpersonal and customer service skills
Proven time management and ability to meet deadlines

Education and Experience

Bachelor's degree in Computer Science, Cybersecurity, or related field (or equivalent experience)
Preferred certifications: SC-300, SC-100, or equivalent identity/security credentials
Minimum 5 years of experience designing, implementing, and supporting enterprise IAM solutions
Solid foundation in identity governance, RBAC models, and security best practices
Familiarity with Microsoft ecosystem tools: Defender for Identity, Intune, Purview, and Graph API
Experience contributing to enterprise-scale IAM projects, audits, or compliance initiatives (e.g., NIST, SOC2)

Corporate & EVP Full-time Benefits:
As a full-time KBS employee (30+ hours per week) you may qualify for benefits including medical, dental, vision, prescription drugs, and more!

Paid Time Off
Paid Holidays
Sick Time
Life Insurance
Short Term Disability – Employer paid
Long Term Disability
Supplemental Health Insurance (E.G., Accident)
401k plan with a match or Non-qualified Deferred Compensation Plan
Pet Insurance
PerkSpot Discount Program – discounts on travel, gyms, cell phones, restaurants, auto, apparel & electronics

KBS considers all applicants for employment without regard to race, color, religion, gender, sexual orientation, national origin, age, disability, gender identity, and expression, marital or military status, or based on an individual's status in any group or class protected by applicable federal, state, or local law. KBS also provides reasonable accommodations to qualified individuals with disabilities in accordance with the Americans with Disabilities Act and applicable state and local law.

Required profile