Identity Engineer II

Required Skills & Experience

• 5+ years of relevant IAM, identity administration, or identity security experience
• Hands-on experience with Microsoft Entra ID and Okta
• Strong Privileged Access Management (PAM) experience
• Experience configuring IAM/PAM software, policies, profiles, permissions, and access controls - Delinea (Formerly Thycotic), or Cyberark, or BeyondTrust
• Experience managing identities, privileged accounts, credentials, keys, and administrative access
• Understanding of authentication technologies including MFA, SSO, and federation
• Experience separating privileged/admin permissions from standard day-to-day user access
• Ability to determine appropriate policy groups and ensure teams have sufficient access without excessive permissions
• Strong troubleshooting skills across identity, access, authentication, and directory services Experience working cross-functionally with application, infrastructure, security, and vendor teams

Nice to Have Skills & Experience

• 1Password experience
• Microsoft PIM experience
• Active Directory administration experience
• PKI / Public Key Infrastructure experience, including cryptography and digital certificates
• Access governance or identity lifecycle management experience Microsoft Copilot exposure

Job Description

Insight Global is seeking an Identity Engineer II Contractor for a top enterprise client. This candidate will support and enhance enterprise Identity and Access Management operations, with a particular focus on identity administration and Privileged Access Management. The engineer will work across Microsoft Entra ID, Okta, Active Directory, and PAM technologies to manage identities, privileged accounts, credentials, access policies, authentication controls, and identity workflows. This person will also help design and configure PAM functionality, define appropriate privileged-access profiles, strengthen administrative-account protections, troubleshoot complex identity and authentication issues, and ensure users have the right level of access without introducing unnecessary security risk. The ideal candidate brings 5+ years of IAM experience and can operate hands-on within a complex hybrid identity environment.