Identity Operations Engineer Access Lifecycle & Automation

Title: Identity Operations Engineer — Access Lifecycle & Automation Location: Seattle, WA Client relies on Microsoft Entra ID and SailPoint Identity Security Cloud (ISC) to manage access for employees, partners, and contractors across a hybrid, multi-cloud environment. We're hiring an Identity Operations Engineer to keep that machinery running — resolving joiner, mover, and leaver (JML) requests, access requests, and provisioning issues across our identity platforms — and to build the automation that eliminates repeat work. This is a hands-on operations role, not an architecture role. The rest is spent finding the tickets and manual steps that shouldn't exist and automating them away with PowerShell, Microsoft Graph, SailPoint ISC APIs, and workflow tooling. You'll work closely with Identity Architecture, HR, IT Service Management, application owners, and Security Operations, and you'll be the person the business relies on when access doesn't work the way it should. Identity Lifecycle Operations (Joiner / Mover / Leaver)

Fulfill and resolve joiner, mover, and leaver requests from the ITSM queue within SLA — account creation, baseline and role-based access assignment, access changes for transfers and promotions, and timely, complete deprovisioning for terminations, contractors, and leaves of absence.

Operate SailPoint ISC day to day — process access requests, investigate and remediate provisioning failures, monitor aggregations and identity refreshes, correct identity attribute and source-data issues, and manage role and access profile assignments.

Administer Microsoft Entra ID — users, groups (including dynamic membership), license assignment, enterprise application role assignments, guest accounts, and Lifecycle Workflows and Entitlement Management access package requests.

Troubleshoot HR-to-identity provisioning and hybrid sync issues — attribute mismatches, duplicate or conflicting accounts, and Entra Connect / Cloud Sync errors between Entra ID and on-premises Active Directory.

Support application access — SSO (SAML/OIDC) assignments, SCIM provisioning errors, and onboarding of applications and connectors to established patterns defined by Identity Architecture.

Perform ongoing account hygiene — orphaned, dormant, and stale accounts, guest cleanup, service account inventory, and reconciliation between Entra, SailPoint, and Active Directory.

Automation & Continuous ImprovementBuild and maintain automation for lifecycle and access tasks using PowerShell, Microsoft Graph API / Graph PowerShell SDK, Python, and SailPoint ISC APIs, workflows, and rules .

Create event-driven and scheduled workflows using tools such as Azure Automation, Logic Apps, Power Automate, or Azure Functions — including ITSM ticket integration for auto-fulfillment, status updates, and closure.

Analyze ticket volume, SLA performance, and recurring failure patterns to identify the highest-value automation opportunities, and track results (tickets eliminated, time saved, error reduction).

Treat automation as production code — source control, peer review, testing, logging, and error handling — so that scripts and workflows are repeatable, supportable, and safe to run against live identities.

Use AI tooling to speed up scripting, log and error analysis, troubleshooting, and documentation.

Serve as an escalation point for the service desk and application teams, and partner with Identity Architecture to feed operational findings back into design and standards.

Partner with HR/HRIS, IT Service Management, and Security Operations to improve source-data quality, lifecycle timing, and the identity signals available for threat detection.

You Own This If You Have Bachelor's or master's degree in Computer Science, Cybersecurity, Information Technology, or equivalent education and experience.

3+ years in identity and access management, IAM operations, or systems/security engineering, including hands-on work with joiner/mover/leaver processes.

Hands-on experience with Microsoft Entra ID — user, group, and application administration, plus working knowledge of Conditional Access, PIM, and Entra ID Governance features (Lifecycle Workflows, Entitlement Management, Access Reviews).

Hands-on experience operating an enterprise IGA platform — SailPoint ISC / IdentityNow preferred; Proven scripting and automation skills — PowerShell and Microsoft Graph API / Graph PowerShell SDK required; Python and REST API integration experience strongly valued.

Experience with hybrid identity — on-premises Active Directory , Entra Connect / Cloud Sync — and troubleshooting synchronization and attribute issues.

ServiceNow), managing queues against SLAs, and documenting work to audit standards.

Nice to Have Certifications: Microsoft SC-300 (Identity and Access Administrator) , SailPoint ISC certification, AZ-500, Security+, or CISSP.

Experience building ITSM-integrated automation (e.g., ServiceNow to SailPoint or Entra fulfillment workflows).

Experience with low-code/no-code automation (Power Automate, Logic Apps) and infrastructure-as-code or configuration-as-code (Terraform, Bicep).

Familiarity with HRIS-driven provisioning (e.g., Workday) and source-of-truth data quality issues.

Experience supporting audit and compliance requirements (SOX, PCI) for access controls and evidence collection.

At SPECTRAFORCE, we are committed to maintaining a workplace that ensures fair compensation and wage transparency in adherence with all applicable state and local laws.