Senior Identity and Access Management (IAM) Engineer

Verisign helps enable the security, stability, and resiliency of the internet. We are a trusted provider of internet infrastructure services for the networked world and deliver unmatched performance in domain name system (DNS) services. We are a mission focused, values driven company where each individual can contribute to building a stronger, more secure internet.  We offer a dynamic and flexible work environment with competitive benefits and the ability to grow your career.The Senior Identity and Access Management (IAM) Engineer is essential in managing and optimizing Verisign’s identity and access management systems. This role is centered on the operational aspects of IAM, focusing on maintaining comprehensive and resilient security, reliability, and efficiency of these systems. The Senior Engineer will collaborate with various teams, providing strategic and operational expertise, and support the continuous improvement of IAM practices.Responsibilities:Provide hands-on technical administration of critical IAM systems and applications, ensuring optimal performance, integration, security, and delivering senior operational supportDesign, implement, and manage Single Sign-On (SSO) solutions using Ping IdentityDevelop and execute the MFA strategy, integrating MFA solutions into the existing IAM frameworkImplement IGA projects using SailPoint, including Application Onboarding, Access Certification, Identity and Account lifecycle events (Joiner/Mover/Leaver), as well as role and entitlement analysisOversee the deployment and ongoing management of Privileged Access Management (PAM) solutions to secure critical systems and monitor privileged access, ensuring alignment with security policies and adapting to evolving security needsParticipate in strategic planning for IAM, aligning the IAM architecture with Verisign’s security objective and  compliance with security frameworks like NIST and CISWork collaboratively with cross-functional teams to enhance IAM solutions. Manage relationships with vendors, assessing new technologies and contributing to procurement decisionsMentor junior engineers and lead technical teams. Communicate IAM strategies and security principles effectively across the organizationCreate and maintain operational documentation with collaboration tools like Confluence Wiki for systems configurations, operational procedures, and best practicesQualifications and Preferred Expertise:Bachelor’s degree in computer science, technology, or a related disciplineRelevant certifications such as CIAM, CISSP, or equivalent IAM vendor-specific certifications10+ years of related experience in an IT role, with specific focus on IAM security architecture and platform administrationStrong problem-solving communication skillsIn-depth knowledge of authentication and authorization mechanisms, including SSO, MFA, and PAM, across on-premises, distributed, and SaaS environmentsExpertise in designing and implementing IAM solutions: SSO, MFA, IGA, PAM, integrations with various Identity Providers (IdPs), and IAM security protocols like SAML, OAuth, and OIDCDirect experience with IAM vendor solutions like Ping Identity and SailPoint, and other IAM technologiesProficiency in programming and scripting languages such as Python, PowerShell, Bash, and AnsibleExperience with cloud based IAM solutions including AWS, Azure, or equivalent platforms, with a solid understanding of cloud environment IAM roles, policies, and best practicesSkilled in designing and configuring IAM across complex global infrastructures for high availability, with an understanding of cyberattacks and proactive IAM defensesThis position is based in our Reston, VA office and offers a flexible, hybrid work schedule.The pay range is $164,300- $222,300. The anticipated annual base salary range for this position is noted above, however, base pay offered may vary depending on job-related knowledge, skills, experience. Verisign offers a discretionary bonus which is based on individual and company performance, and certain roles may be eligible for discretionary stock awards.Verisign is an equal opportunity employer. That means we recruit, hire, compensate, train, promote, transfer, and administer all terms and conditions of employment without regard to their race, color, religion, national origin, sex, sexual orientation, gender identity, age, protected veteran status, disability, or other protected categories under applicable law.Additional Information:Our Careers PageOur Benefits SummaryVerisign in the CommunityOur EEO StatementOur Privacy Notice for Job Applicants/CandidatesReasonable AccommodationsStaffing agency policy: No fees will be paid for unsolicited resumes submitted to Verisign or our employees by third parties.