TM
Engineer Sr
Tailored Management
- 🇺🇸 United States
- Hybrid
- Senior
- 5 hours ago
- $77.46 – $88.02 / hour
- SailPoint
- Active Directory
- Entra
- Identity Management
- SOX
- PowerShell
- Microsoft Graph
- Python
- Azure
- Logic Apps
- Power Automate
- Incident Response
- IAM
- Conditional Access
- SAML
- OpenID Connect
- OIDC
- SCIM
- ServiceNow
- REST API
- CISSP
- Terraform
- Bicep
- HRIS
- SIEM
5 hours ago
Location: Seattle, WA 98101 - Hybrid (4 days onsite, 1 day remote)
Duration: 06-month contract (with possible extension)
Work Schedule: 40 hours per week, Monday–Friday, 9:00 AM–5:00 PM Pacific Time
Start Date: Targeting Nov 2026
Pay Rate: $77.46/hr - $88.02/hr on W2
Benefits: Medical, Dental, Vision.
Job Description:
- Nordstrom is seeking an experiencedIdentity Operations Engineer to support identity and access management across a hybrid, multi-cloud environment using Microsoft Entra ID and SailPoint Identity Security Cloud (ISC).
- This is a hands-on operations role focused on managing joiner, mover, and leaver (JML) processes, fulfilling access requests, troubleshooting provisioning and synchronization failures, and automating repetitive identity operations. The engineer will collaborate with Identity Architecture, HR, ITSM, application owners, and Security Operations teams to improve operational efficiency, security, and compliance.
Identity Lifecycle Operations
- Process joiner, mover, and leaver (JML) requests through ITSM queues within established SLAs, including account creation, access changes, role assignments, and deprovisioning.
- Operate SailPoint ISC, including access requests, provisioning failure remediation, aggregation monitoring, identity refreshes, and identity attribute troubleshooting.
- Administer Microsoft Entra ID, including users, groups, licenses, application role assignments, guest accounts, Lifecycle Workflows, and Entitlement Management.
- Troubleshoot HR-to-identity provisioning and synchronization issues between Entra ID and on-premises Active Directory using Entra Connect or Cloud Sync.
- Handle Privileged Identity Management (PIM) and privileged access requests with appropriate approvals and audit trails.
- Conduct access reviews, identify orphaned and dormant accounts, and prepare audit evidence for SOX, PCI, and other compliance requirements.
- Develop automation using PowerShell, Microsoft Graph, Python, SailPoint ISC APIs, and workflows.
- Build event-driven workflows using Azure Automation, Logic Apps, and Power Automate, integrating with ITSM systems for automated fulfillment and ticket closure.
- Analyze ticket trends to identify automation opportunities and measure operational time savings.
- Maintain production-quality automation through source control, peer reviews, testing, and logging.
- Develop runbooks and knowledge articles and provide escalation support to the service desk.
- Participate in incident response and escalation coverage, including after-hours support as needed.
- Bachelor's degree in Computer Science, Cybersecurity, Information Technology, or equivalent practical experience.
- 5+ years of experience in IAM operations or systems/security engineering, including hands-on JML lifecycle management.
- Hands-on experience administering Microsoft Entra ID, including Conditional Access, PIM, and Entra ID Governance.
- Experience operating an enterprise Identity Governance and Administration (IGA) platform, preferably SailPoint ISC or IdentityNow, including troubleshooting failed provisioning.
- Strong PowerShell and Microsoft Graph scripting skills.
- Working knowledge of SAML, OAuth 2.0, OpenID Connect (OIDC), and SCIM.
- Experience with hybrid identity environments, including Active Directory and Entra Connect or Cloud Sync.
- Experience working in an ITSM environment, such as ServiceNow, and managing requests against defined SLAs.
- Python scripting and REST API integration experience.
- Certifications such as SC-300, SailPoint ISC, AZ-500, Security+, or CISSP.
- Experience with ITSM-integrated automation, low-code tools, Terraform, or Bicep.
- Experience with HRIS-driven provisioning, such as Workday, and audit/compliance processes.
- Familiarity with Privileged Access Management (PAM) tools such as BeyondTrust, ITDR, or SIEM/SOAR integrations.
- Retail or e-commerce industry experience.
- Hybrid schedule: 4 days onsite and 1 day remote per week in Seattle, WA.
- Full-time contract assignment with a possibility of extension and conversion.
- MacBook Pro provided.
- Overtime is not required.
One panel interview round, preferably onsite.
--
At Tailored Management, we help people get jobs and take pride in their work, so we better take pride in ours too. Not every company has the opportunity to meaningfully and directly impact individuals in a way that makes their lives tangibly better. To better support our employees, we offer a wide variety of benefit options to support you. We offer:
- Medical Coverage – HDHP, PPO, and Surest plan options
- Minimum Essential Coverage (MEC)
- Dental Insurance
- Vision Insurance
- Short-Term Disability (STD)
- Long-Term Disability (LTD)
- Life & AD&D Insurance
- Critical Illness Insurance
- Accident Insurance
- Employee Assistance Program (EAP)
#TMCA
Engineer Sr · Tailored Management