Job Title: Principle IAM Engineer
Location: Sandy Springs, GA
Duration: 8 Months + Extension
Bill Rate: $72/hour (C2C)
Job Type: W-2, 1099, C2C
Client: To Be Discussed Later
Work Authorization: US Citizen, Green Card, OPT-EAD, CPT, H-1B, H4-EAD, Other

Job Summary:
We are seeking a Principal IAM Engineer to serve as the senior hands-on technical authority for identity engineering during an active consolidation and modernization effort. This role is focused on building and operating solutions-not solely on policy or advisory architecture.
You will personally design and implement integrations, connectors, and migrations; establish engineering standards; resolve complex technical challenges; and help expand the capabilities of the engineering team.

Key Responsibilities:

• Design, implement, and operate identity integrations, connectors, and migrations across the full identity lifecycle.
• Build and enhance joiner-mover-leaver automation, authoritative-source integrations, access request and approval workflows, role models, and certification campaigns.
• Engineer and administer identity governance platforms, including:
• Custom connector development
• Scripting and automation
• Provisioning and deprovisioning logic
• Role mining
• Lead or execute migrations between major identity governance platforms, including target-state design, data and configuration migration, and governance rebuilding.
• Support directory and tenant consolidation efforts, including:
• Forest and trust configuration
• Schema and group policy work
• Hybrid synchronization troubleshooting
• Object migration activities
•  Design integrations across identity governance, privileged access management, and single sign-on or federation environments.
• Review the work of specialist engineers and provide technical direction across identity access domains.
• Establish engineering standards, review designs and code, mentor engineers, and document repeatable technical patterns.
• Communicate technical decisions and tradeoffs clearly with security leadership, application owners, and audit stakeholders.
• Contribute to service account and non-human identity lifecycle management, including naming standards, reconciliation, and automated credential rotation.
• Apply awareness of workload identity and AI-agent authorization patterns, including federated identity and just-in-time credentialing.

Required Qualifications:

• Principal-level, hands-on identity engineering experience across the full lifecycle.
• Demonstrated experience personally building and operating identity solutions in production, with the ability to explain the code, configuration, and results.
• Deep identity governance platform engineering experience.
• Experience developing custom connectors and scripts using one or more of the following:
• Java
• JavaScript
• Ruby
• PowerShell
• Experience with provisioning and deprovisioning logic, role modeling, role mining, access workflows, and certification processes.
• Experience leading or executing a live migration between major identity governance platforms, including target-state design, data and configuration migration, and governance rebuilding.
• Hands-on experience with enterprise directory services and cloud identity directories.
• Experience with forest and trust configuration, schema and group policy work, hybrid synchronization troubleshooting, and object migration tooling.
• Experience supporting a real directory or tenant consolidation.
• Working experience with privileged access management platforms.
• Experience with single sign-on and federation technologies, including SAML, OIDC, and conditional access.
• Ability to design integrations across identity governance, privileged access management, and access management domains.
• Demonstrated technical leadership through engineering standards, design and code reviews, mentorship, and documentation.
• Strong communication skills, including the ability to explain technical tradeoffs to security leadership, application owners, and audit stakeholders.

Preferred Qualifications:

• Experience with service account and non-human identity lifecycle management.
• Familiarity with naming standards, reconciliation, and automated credential rotation.
• Awareness of workload identity and AI-agent authorization patterns, including federated identity and just-in-time credentialing.
• Experience working with directory owners while maintaining responsibility for identity engineering rather than directory ownership.
• Experience supporting consolidation efforts following organizational mergers.