Jobs › Companies › Kalles Group › Identity Operations Engineer Consultant - Access Lifecycle & Automation

Über diese Identity Operations Engineer Consultant - Access Lifecycle & Automation Stelle bei Kalles Group

Kalles Group · Hybrid · Seattle, WA

ABOUT KALLES GROUP:

Everyone deserves to be secure. Our mission at Kalles Group is to help secure the future for companies of all shapes and sizes.

While our expertise spans multiple disciplines, our method remains consistent: building trust and relationship with people -- whether you are a client, a consultant, or--in this case--a candidate.

No matter what role you come from--whether you're an executive or just starting your career-you can expect our highest level of attention and respect. We want to find the right fit for each role, but we also want you to find the right fit for your career.

We believe the best way to show you what our team is like is to treat you like you're already a part of it. We hope you'll consider joining our team of experienced professionals who are building their careers at Kalles Group—and having fun while doing it.

WHAT YOU WILL DO: 

As an Identity Operations Engineer with Kalles Group, you’ll be on assignment with one of our enterprise clients, supporting workforce, partner and contractor access across Microsoft Entra ID and SailPoint Identity Security Cloud while the client moves application authentication from a legacy identity provider to Entra. This is a hands-on operations role. Most of your time will go to working the identity ticket queue: joiner/mover/leaver events, access requests, provisioning and hybrid sync failures, privileged access, access certifications, and audit evidence for SOX and PCI. The rest of your time you’ll spend automating repeat work with PowerShell, Microsoft Graph, SailPoint ISC APIs and workflow tools such as Logic Apps, Power Automate and Azure Automation/Functions, all integrated with the ITSM platform. When access breaks, you’ll be the go-to escalation point, working closely with Identity Architecture, HR, ITSM, application owners and Security Operations to resolve issues quickly and prevent repeats. This is a hybrid role in Seattle, with after-hours support as needed.

KEY RESPONSIBILITIES: 

 

IDENTITY LIFECYCLE OPERATIONS (Joiner / Mover / Leaver)
• Fulfill JML requests from the ITSM queue within SLA – account creation, baseline/role-based access, transfers & promotions, timely deprovisioning (terms, contractors, leaves).
• Operate SailPoint ISC day to day – access requests, provisioning failures, aggregations & identity refreshes, attribute/source-data fixes, role & access profile assignments.
• Administer Entra ID – users, groups (incl. dynamic), licensing, enterprise app role assignments, guests, Lifecycle Workflows and Entitlement Management requests.
• Troubleshoot HR-to-identity provisioning and hybrid sync (Entra Connect / Cloud Sync) – attribute mismatches, duplicate/conflicting accounts.
• Handle privileged/elevated access (PIM eligible assignments, role-assignable groups) with approvals and audit trail.
• Support app access – SSO (SAML/OIDC) assignments, SCIM errors, onboarding apps/connectors to established patterns.
• Run access certification / review campaigns operationally and produce audit evidence (SOX, PCI).
• Ongoing account hygiene – orphaned/dormant/stale accounts, guest cleanup, service account inventory, Entra/SailPoint/AD reconciliation.
 
AUTOMATION & CONTINUOUS IMPROVEMENT
• Build lifecycle/access automation with PowerShell, Graph API / Graph PowerShell SDK, Python, SailPoint ISC APIs, workflows and rules.
• Event-driven/scheduled workflows (Azure Automation, Logic Apps, Power Automate, Azure Functions) with ITSM ticket auto-fulfillment and closure.
• Analyze ticket volume, SLAs and failure patterns to target automation; track tickets eliminated, time saved, error reduction.
• Treat automation as production code – source control, peer review, testing, logging, error handling. Use AI tooling to speed scripting and troubleshooting.
 
ACROSS THE ROLE
• Write runbooks, SOPs and KB articles; serve as escalation point for service desk and app teams.
• Partner with HR/HRIS, ITSM and SecOps on data quality, lifecycle timing and identity signals.
• Participate in identity incident response, including after-hours support as needed.

 

ABOUT YOU:

Your values:

    • Integrity: You believe in doing the right thing, even when it's uncomfortable, seemingly inefficient, or costly.
    • Purposefulness: You have a desire to serve others with your skillset and an openness to continuous learning and growth.
    • Ownership: You stick to your commitments, follow up with action, and seek clarity in communication & expectations.

YOUR EXPERIENCE:

Required Qualifications

• Bachelor's/master's in CS, Cybersecurity, IT, or equivalent experience.
• 3+ years in IAM, IAM operations, or systems/security engineering, including hands-on JML processes.
• Hands-on Entra ID user/group/app admin; working knowledge of Conditional Access, PIM, and Entra ID Governance (Lifecycle Workflows, Entitlement Management, Access Reviews).
• Hands-on enterprise IGA operations – SailPoint ISC/IdentityNow preferred (comparable IGA considered): access requests, provisioning, source connectors, troubleshooting.
• PowerShell and Microsoft Graph API / Graph PowerShell SDK required; Python and REST API integration strongly valued.
• Working knowledge of SAML, OAuth 2.0, OIDC, SCIM sufficient to troubleshoot SSO/provisioning.
• Hybrid identity – on-prem AD, Entra Connect / Cloud Sync; sync and attribute troubleshooting.
• ITSM ticketing (e.g., ServiceNow), managing queues against SLAs, documenting to audit standards.
• Strong troubleshooting, attention to detail, clear communication with technical and non-technical partners.

 

Preferred Qualifications

• Certifications: SC-300, SailPoint ISC, AZ-500, Security+, or CISSP.
• ITSM-integrated automation (e.g., ServiceNow → SailPoint or Entra fulfillment).
• Low-code automation (Power Automate, Logic Apps) and IaC/config-as-code (Terraform, Bicep).
• HRIS-driven provisioning (e.g., Workday) and source-of-truth data quality.
• PAM familiarity (e.g., BeyondTrust) and PAM/PIM interplay.
• Audit/compliance support (SOX, PCI) for access controls and evidence.
• ITDR exposure; identity signals into SIEM/SOAR.
• Large-scale retail, ecommerce, or high-transaction enterprise experience.

WHAT WE OFFER:

  • The annual salary range for this role is $120,000-$140,000.  
  • We offer Medical, Dental, Vision plans, 401K with matching, and PTO for salaried employees.
  • Work/life balance – we know there’s more to life than work! We encourage our team to pursue other passions, get outside, and spend time with family. We work with clients and consultants to set expectations for a manageable workload.

LOCATION:

This role is hybrid with onsite requirements at our client's location in Seattle, WA.  Therefore, we are currently only considering candidates that are already living in the Seattle area.

HOW TO APPLY:

Please fill out the form below (including uploading your most recent resume) and we'll be in touch! We know imposter syndrome can be a barrier to many great applicants. We hope you'll still consider applying. That's why we've made the application process as short and simple as possible.

Even if you're not a fit for the role, you can expect to hear back from us! We want you to have the best experience as a candidate, so please feel free to share feedback at any stage of the process to [email protected].

Kalles Group is an equal-opportunity employer and does not discriminate on the basis of creed, nationality, race, ethnicity, disability, gender, or other protected class.

Bereit, sich bei Kalles Group zu bewerben?
Bei Kalles Group bewerben

Wie sich dieses Gehalt für Consultant vergleicht

Diese Stelle zahlt $130,000/yr — im Einklang mit der üblichen Spanne für Consultant Stellen.

$67,500 dem Median $139,500 $202,000

Übliche Spanne $121,341–$165,500/yr, aus 100 vergleichbaren Consultant Anzeigen auf JobsRadar (Vergütung auf USD hochgerechnet). Gehaltseinblicke für Consultant ansehen →

Über Kalles Group

Security is for all.
We believe that everyone deserves to be secure. This is the foundation of everything we do for our customers, our consultants, and our communities.

Our consulting services span cybersecurity, cyber risk, engineering, project leadership and learning services. Our team of industry veterans helps our partners with complex security and technology problems in a human way.

Our values of integrity, ownership and purposefulness ensure our team provides the best possible outcomes time and time again, while helping us build and maintain long-term healthy relationships with our customers.

Alle Jobs bei Kalles Group ansehen →

Ähnliche Jobs

Kalles Group
Entra ID Engineer Consultant - Access Management & Identity Governance
Kalles Group
⚡ Früh bewerben Seattle, WA Hybrid $135,000–$155,000
● Neu 👁 Gesehen ✓ Beworben vor 6 Std.
Jensen Hughes
Senior Fire Protection Consultant/Engineer
Jensen Hughes
⚡ Früh bewerben Seattle, Washington, United St... Vor Ort $140,000–$180,000
● Neu 👁 Gesehen ✓ Beworben vor 14 Std.
Brex
Implementation Consultant, Commercial
Brex
⚡ Früh bewerben Vancouver, British Columbia, C... Hybrid $105,600–$132,000
● Neu 👁 Gesehen ✓ Beworben vor 14 Std.
Brex
Implementation Consultant, Commercial
Brex
⚡ Früh bewerben Salt Lake City, Utah, United S... Hybrid $105,600–$132,000
● Neu 👁 Gesehen ✓ Beworben vor 14 Std.
Brex
Implementation Consultant, Commercial
Brex
⚡ Früh bewerben Seattle, Washington, United St... Hybrid $119,328–$149,160
● Neu 👁 Gesehen ✓ Beworben vor 14 Std.
Socure
Senior Platform Solution Consultant, Pre-Sales
Socure
⚡ Früh bewerben Hybrid - San Francisco, CA Hybrid $155,000–$185,000
● Neu 👁 Gesehen ✓ Beworben vor 3 Tg.
Socure
Senior Solution Consultant – Post-Sales, Platform
Socure
⚡ Früh bewerben Hybrid - San Francisco, CA Hybrid $155,000–$180,000
● Neu 👁 Gesehen ✓ Beworben vor 3 Tg.
PwC
Healthcare Provider Finance, Supply Chain, HCM Consultant - Senior Manager
PwC
⚡ Früh bewerben IL-Chicago Vor Ort $124,000–$280,000
● Neu 👁 Gesehen ✓ Beworben vor 4 Tg.
PwC
Life, Annuity & Group Benefits Operations Consultant - Director
PwC
⚡ Früh bewerben NY-New York Vor Ort $155,000–$410,000
● Neu 👁 Gesehen ✓ Beworben vor 1 Wo.

Registrieren für Vorschläge, die auf die von Ihnen geöffneten Jobs und gespeicherten Suchen zugeschnitten sind.

Mehr Jobs bei Kalles Group

Alle Jobs bei Kalles Group ansehen →

Jetzt bewerben
🤖

Moment — langsam

JobsRadar wurde für echte Menschen gebaut, die eine schwere Zeit bei der Jobsuche haben — nicht für automatisierte Anfragen. Sie klicken viel zu schnell und sind jetzt vorübergehend blockiert.

Kommen Sie später wieder. Wenn Sie wirklich auf Jobsuche sind, stehen wir hinter Ihnen — verhalten Sie sich einfach wie ein Mensch.

Catch your next role the second it’s posted.

Create a free account and we’ll watch the boards for you — the instant a job matches your search, it lands in your inbox or Telegram. No digging, no refreshing.

Create free account

Free forever · takes 30 seconds · already have one?

Verschaffe dir einen Vorsprung bei der Jobsuche.

Tritt unserem Telegram-Kanal bei für das, was dir hilft, die Stelle zu bekommen — Gehaltsbenchmarks, den wöchentlichen Marktpuls und neue Feature-Drops. Kein Spam, nur Signal.

Dem Kanal beitreten — kostenlos