Identity Access Management Opportunity in Financial Services
IAM Engineer II
Location(s):
Atlanta: 2300 Windy Ridge Pkwy SE, Suite750, Atlanta, GA 30339
La Vista:12325 Port Grace Blvd, La Vista, NE 68128
Oakdale: 7755 3rd St. N, Oakdale, MN 55128
Scottsdale: 18700 N Hayden Rd, Suite 255, Scottsdale, AZ 85255
St. Petersburg: 877 Executive Center Dr. W, Suite 300, St. Petersburg, FL 33702
Osaic has returned to the office on a hybrid schedule requiring a minimum of 4 days weekly in the office. Applicants should be located at one of our hubs listed above and must be willing to work this schedule.
Role Type: Full-time, Non-Exempt
Salary: $120,000 - $156,000 per year + annual performance-based bonus
Actual compensation offered will be determined individually, based on a number of job-related factors, including location, skills, licensure, experience, and education.
Our competitive compensation is just one component of Osaic’s total compensation package. Additional benefits include health, vision, dental insurance, 401k, paid time away, volunteer days and much more. To view more details of what you can look forward to, visit our careers page: Osaic Benefits.
Summary:
The IAM Engineer II is responsible for executing daily identity and access management operations across the identity management platforms. This role supports user onboarding/offboarding, Single Sign On (SSO) integrations, access requests, entitlement administration, and basic privileged access functions. The IAM Engineer II ensures that identity controls are applied consistently and securely, enabling reliable access for users while reducing risk to the organization. This position will report to the Head of IAM and Network Security Eng & Ops.
Education Requirements:
Bachelor’s degree preferred, high school diploma (or equivalent) in combination with significant experience will be considered in lieu of degree. Minimum of high school diploma or equivalent is required.
Responsibilities:
- Automate Joiner/Mover/Leaver (JML) processes, including provisioning, de-provisioning, access requests, and access reviews.
- Ensure group based and role-based access is assigned accurately and timely.
- Troubleshoot identity issues such as failed provisioning tasks, directory sync, and entitlement assignments.
- Process access requests and approvals; maintain entitlement catalogs and birthright access definitions.
- Assist in quarterly and ad hoc access certification campaigns.
- Onboard applications to identity platforms using REST APIs and JSON field mapping.
- Onboard applications for SSO using standard SAML/OIDC templates.
- Ensure adherence to least privilege and separation of duties (SoD) requirements.
- Collect and maintain evidence for audits and identity reviews.
- Follow established change management, documentation, and incident management processes.
- Use PowerShell or basic REST API calls for simple identity queries or repeatable tasks.
- Maintain runbooks, knowledge base articles, and user facing guides.
- Participate in identity related incident handling and troubleshooting.
- All other duties as assigned.
Basic Requirements:
- 1–3 years of experience in IT, security operations, or identity administration.
- Hands-on experience with user and group management.
- Familiarity with SAML, OIDC, and basic authentication/authorization principles.
- Understanding of IAM concepts such as MFA, RBAC, provisioning, and JML workflows.
- Basic scripting experience (PowerShell, Python, or similar).
- Strong analytical and troubleshooting skills; attention to detail.
- Ability to follow documented procedures and maintain accurate records.
Preferred Requirements:
- Experience with an IAM platform (provisioning, access requests, access reviews, connectors).
- Experience with onboarding applications for SSO.
- Exposure to PAM (Privileged Access Management) tools and workflows.
- Understanding of security frameworks and controls (least privilege, SoD, zero trust).
- Ability to read logs and debug authentication or provisioning errors.
- CompTIA Security +, Microsoft SC-900, Microsoft SC-300, (ISC)² CC or SSCP
Skills Required
- 1-3 years of experience in IT, security operations, or identity administration.
- High school diploma or equivalent (Bachelor's degree preferred).
- Hands-on experience with user and group management.
- Familiarity with SAML, OIDC, and basic authentication/authorization principles.
- Understanding of IAM concepts such as MFA, RBAC, provisioning, and JML workflows.
- Basic scripting experience (PowerShell, Python, or similar).
- Strong analytical and troubleshooting skills; attention to detail.
- Ability to follow documented procedures and maintain accurate records.
- Willingness and ability to work a hybrid schedule (minimum 4 days per week) at one of the listed hub locations.
- Experience with an IAM platform (provisioning, access requests, access reviews, connectors).
- Experience onboarding applications for SSO.
- Exposure to PAM (Privileged Access Management) tools and workflows.
- Understanding of security frameworks and controls (least privilege, SoD, zero trust).
- Ability to read logs and debug authentication or provisioning errors.
- Certifications such as CompTIA Security+, Microsoft SC-900, Microsoft SC-300, (ISC)² CC or SSCP.
Osaic Compensation & Benefits Highlights
The following summarizes recurring compensation and benefits themes identified from responses generated by popular LLMs to common candidate questions about Osaic and has not been reviewed or approved by Osaic.
-
Leave & Time Off Breadth — Paid time away includes PTO, sick time, holidays, and volunteer days available from the start. The breadth supports work–life balance with a Monday–Friday schedule.
-
Healthcare Strength — Health coverage spans medical, dental, vision, life, and disability with HSA/FSA options and day-one eligibility. The package also includes wellness initiatives and adoption assistance.
-
Retirement Support — A 401(k) with company match and immediate vesting is offered. This supports long-term savings starting on the first day.
Osaic Insights
What We Do
Osaic provides the support, resources, and community designed for the future of wealth management. Securities and investment advisory services are offered through the firms: Osaic Wealth, Inc., Osaic Institutions, Inc., Osaic FA, Inc., Osaic FS, Inc., and Triad Advisors, LLC, broker-dealers, registered investment advisers, and members of FINRA and SIPC. Securities are offered through Securities America, Inc., American Portfolios Financial Services, Inc., Osaic Services Inc., and Ladenburg Thalmann & Co., broker-dealers and member of FINRA and SIPC. Advisory services are offered through Arbor Point Advisors, LLC, American Portfolios Advisors, Inc., Ladenburg Thalmann Asset Management, Inc., Osaic Advisory Services, LLC, and Securities America Advisors, Inc., registered investment advisers. Advisory programs offered by Osaic Wealth, Inc., Securities America Advisors, Inc., and Triad Advisors, LLC., are sponsored by VISION2020 Wealth Management Corp., an affiliated registered investment adviser.
