IAM Engineer

Paylocity is an award-winning provider of cloud-based HR and payroll software solutions, offering the most complete platform for the modern workforce. The company has become one of the fastest-growing HCM software providers worldwide by offering an intuitive, easy-to-use product suite that helps businesses automate and streamline HR and payroll processes, attract and retain talent, and build a strong workplace culture. 

While traditional HR and payroll providers automate basic HR processes such as payroll and benefits administration, Paylocity goes further by developing tools that HR and businesses need to compete for talent and deliver against the expectations of the modern workforce.

We give our employees what they need to succeed, including great benefits and perks! We offer medical, dental, vision, life, disability, and a 401(k) match, as well as perks that support you, your family, and your finances. And if it’s career development you desire, we provide that, too! At Paylocity, people matter most and have always been at the heart of our business.

Help Paylocity enhance communication and enable employees to connect, collaborate, and create from anywhere with a position in Product & Technology!

Want to develop the strategies and principles needed to deliver compelling software? Join our team and help us enhance our all-in-one software platform, elevate our one-of-a-kind technology, and improve the employee experience. 

Take your career to the next level at one of G2's Top 100 Software Companies. Explore our Product & Technology positions to see where you fit!

This is a fully remote position, allowing you to work from home or location of record within the U.S. with no in-office requirements.  You must be available five days per week during designated work hours.  The work arrangement for this role is subject to change based on business needs and individual performance. This may include adjustments to on-site requirements or schedule expectations, as necessary.  

Role Overview

Join a dynamic, collaborative, and forward-thinking Identity and Access Management (IAM) team as an IAM Engineer and shape the future of secure access across the organization. We are looking for a Senior IAM Engineer who thrives in a culture built on collaboration, curiosity, and continuous improvement. In this role, you will help drive initiatives tethered to advanced identity solutions like SailPoint, key identity business processes, and overall IAM and organizational strategy. You will have the freedom to innovate, the support of a tight-knit team, and the opportunity to influence how our organization approaches secure access at scale. 

Key Responsibilities

• Support the technical design, implementation, and maintenance of Identity Governance and Administration (IGA) solution on-premise and in the cloud.
• Conduct unit testing to ensure the functionality and reliability of the IGA solution.
• Support access reviews, audits, and compliance initiatives (SOX, SOC 2, ISO 27001, etc.).
• Create and customize workflows to meet business requirements and optimize performance.
• Design, configure, and support role-based and attribute-based access controls.
• Support the onboarding of new applications into the IGA ecosystem, ensuring smooth integration and functionality.
• Support the team that handles ticket resolution and identify opportunities for streamlining to reduce operational overhead. 
• Develop comprehensive documentation for IAM processes, configurations, workflows, and customizations (e.g. – business requirements, design and architecture, workflow diagrams, testing, and deployment documentation).
• Collaborate effectively with key stakeholders (e.g. – HR, application owners, corporate infrastructure, helpdesk) to support business processes, application onboarding, and key integrations with corporate tools.
• Identify and automate process improvements to current and future business processes. 
• Identify avenues to accelerate the integration of applications with Identity to automate lifecycle processes and reduce operational overhead on application teams.
• Ability to effectively navigate IAM tools from UI and through backend development, depending on requirements.

Required Experience

• Bachelor’s degree in Computer Science, Information Technology, or a related field.
• 5+ years of experience in Identity & Access Management or a closely related security role.
• Hands-on experience with managing IGA solutions like SailPoint, and leading integration efforts with major infrastructure systems like Active Directory, Entra ID, etc.
• Experience integrating IGA solution with key non-IAM applications like ServiceNow, Security Information and Event Management (SIEM) tool, and other SaaS and internal applications.
• Experience with other IAM tools and technologies, such as Active Directory, Single Sign-on (SSO), Privileged Identity Management (PIM), and Multi-factor Authentication (MFA).
• Familiarity with cloud environments (Amazon Web Services, Azure, or Google Cloud Platform).
• Working knowledge of least privilege and zero trust principles.
• Experience supporting audits (basic understanding of SOX, SOC 2, ISO 27001), and access reviews. 
• Proficiency in scripting languages such as PowerShell, Python, JavaScript, JavaBeans, and experience with automation tools
• Proficiency in handling SQL databases
• Excellent verbal and written communication skills.
• Strong problem-solving and analytical skills.
• Ability to collaborate effectively and lead technical, cross-functional discussions. with non-IAM stakeholders.
• Working knowledge of basic identity lifecycle processes (e.g. – joiner, mover, leaver, access reviews, non-human account management).
• Working knowledge of Generative AI and agentic technologies, with the ability to leverage AI enabled tools as part of modern IAM engineering workflows-enabled tools as part of modern IAM engineering workflows.

Preferred Qualifications

• Experience with CI/CD or infrastructure-as-code in IAM contexts 
• Familiarity with PAM and Authentication and Authorization concepts or tools 
• Security certifications (e.g., CIAM, CISSP, ISC CAP (auth professional))

Paylocity is an equal-opportunity employer. Paylocity is committed to the full inclusion of all individuals. We recruit, train, compensate, and promote regardless of race, religion, color, national origin, sex, disability, age, veteran status, and other protected status as required by applicable law. At Paylocity, we believe diversity makes us better. 

We embrace and encourage our employees’ differences in age, culture, ethnicity, family or marital status, gender identity or expression, language, national origin, physical and mental ability, political affiliation, race, religion or spiritual belief, sexual orientation, socio-economic status, veteran status, and other characteristics that make our employees unique. We actively cultivate these differences through our employee resource groups (ERGs), employee experiences, perspectives, talents, and approaches to drive innovation in the software and services we provide our customers. 

We comply with federal and state disability laws and make reasonable accommodations for applicants and employees with disabilities. To request reasonable accommodation in the job application or interview process, please contact accessibility@paylocity.com. This email address is exclusively designated for such requests, aligning with federal and state disability laws. Please do not send resumes to this email address, as they will be removed.

The base pay range for this position is $98k - $125k/yr; however, base pay offered may vary depending on job-related knowledge, skills, and experience. This position is eligible for an annual bonus and restricted stock unit grant based on individual performance in addition to a full range of benefits outlined here. This information is provided per the relevant state and local pay transparency laws for the location in which this position will be performed. Base pay information is based on market location. Applicants should apply via www.paylocity.com/careers.