IAM Federation Engineer

IAM Federation Engineer - 100% Remote - Contract to Hire

We've been asked to identify an IAM pro to join our client's team that is modernizing and expanding their enterprise and customer authentication platforms. They have several critical projects in play, and need someone truly passionate about designing and building secure, scalable authentication solutions. The team is smart, nimble, highly capable, and led by a director with technical chops and a great sense of humor – you’ll have fun and autonomy. Oh…there’s also a pension.

Your Mission

• Design, develop, and support enterprise SSO and federation solutions
• Build repeatable integration patterns using SAML, OIDC, OAuth
• Engineer and maintain authentication platforms, including Okta, Entra ID, and IBM ISAM / ForgeRock
• Lead federation integrations for internal teams and external customers
• Improve reliability through runbooks, documentation, and continuous enhancements

You

• 4-6+ years working with federation technologies
• Entra ID and ForgeRock expertise - Required
• Strong understanding of identity protocols
• Experience supporting complex authentication and SSO environments
• Ability to design solutions, troubleshoot integrations, and collaborate with engineering teams
• Bonus: Java development experience, CIAM experience, or DevOps/CI-CD exposure

This is a contract-to-hire role with the first 3-6 months working as a contract employee of Sierra ITS, paid an hourly rate, working 37,5 hours per week. At conversion to permanent employee status with our client, you’ll earn a salary in the 130-150k range, plus bonus (10%) and a pension (yes, you read correctly…you’ll be part of the less than 10% of US workers with a true pension).

NOTE: You must currently reside in one of the following states: IL, IN, IA, KS, MO, MT, NM, NC, OK, PA, TN, TX, WI. No subcontractors please.