IAM Engineer - PAM

This position offers a base salary range of $95,351 - $158,922 per year, depending on experience and qualifications, plus bonus based on company performance.

One of the MANY work perkz at Sheetz is quarterly employee bonuses based on company performance! And there’s more – A LOT more… like competitive salaries, PTO and parental leave, 401k match and employee stock ownership, limitless professional development and growth opportunities, tuition reimbursement, full medical, vision and dental coverage, and snack discounts!

We are seeking an IAM Engineer II to lead the engineering, administration, and continuous improvement of enterprise Privileged Access Management (PAM) and Privileged Identity Management (PIM) capabilities.

This role is responsible for designing and supporting secure privileged access solutions, credential vaulting, privileged session management, just-in-time elevation, service and non-human account governance, and administrative access controls across enterprise systems.

The ideal candidate will work closely with IT and Cyber teams as well as business stakeholders to deliver secure, scalable, and compliant privileged access controls aligned to Zero Trust and least privilege principles.

Candidate should possess strong experience with PAM/PIM platforms, privileged account lifecycle management, authentication and federation concepts, directory services, automation, and security operations in complex enterprise environments. Experience integrating privileged access solutions with IGA, SIEM, MFA, cloud platforms, and DevOps tooling is highly desirable.

Experience with Delinea and HashiCorp is considered a plus.

This role qualifies for a remote work arrangement within our 7 state footprint (PA, OH, MI, WV, VA, MD, NC).

OVERVIEW

Responsible for advanced design, administration, operation, and support of Identity and Access Management systems, integrations, and processes. Serve as a subject matter expert for Identity and Access Management practices while providing an escalation point and technical mentorship for junior team members.

Lead technical projects, building scalable and complex automations, and integrations, between multiple systems and applications at the enterprise level. Design and implement custom IAM integrations, enhancements, and ensure adherence to governance, compliance, and business requirements.

Lead engagement and collaboration with IAM teams and cross-functional stakeholders to deliver technical solutions that meet business and security requirements. Lead policy and standard refinement while managing lifecycles, access controls, and advanced configurations with area leadership.

RESPONSIBILITIES (other duties may be assigned)

1. Lead the implementation of large-scale complex IAM projects, including new system rollouts, migrations, and upgrades to provide high-quality technical expertise in Identity and Access Management solutions that enhance security and operational efficiency by designing mitigations for compliance gaps and identity threats.

2. Act as the senior technical resource and escalation point for IAM-related issues and challenges, complex or high-priority identity issues, and mentor junior team members to develop skills and capabilities.

3. Drive innovation through the development of new integrations and workflows.

4. Collaborate with senior members and leadership to ensure IAM systems support the organization’s long-term security and IAM strategy, in measuring and monitoring essential KPIs and metrics.

5. Design and enhance workflows while coordinating with IAM teams, IT, and other business units to ensure seamless Identity and Access Management processes and experiences.

6. Lead the development, documentation, and refinement of IAM technical records such as standard operating procedures (SOPs), workflows, diagrams, end-user training materials, and job aids for identity and access tasks ensuring alignment with security, compliance, and governance standards.

7. Participate in IAM Implementation / Deployment / Documentation projects, providing technical input and executing assigned deliverables as required.

8. Ensure solutions and completion of Identity and Access Management tasks comply with organizational security policies, regulatory requirements, and audit standards.

9. Monitor identity systems, processes, and trends reporting potential issues or remediations to the appropriate teams.

10. Participate in on-call rotation, provide evening and weekend support as needed. Sheetz is open 24/7/365 and as such, our internal and external customers may require support at any time.

QUALIFICATIONS

(Equivalent combinations of education, licenses, certifications and/or experience may be considered. Two years of experience is equivalent to one year of college/trade school)

Education

• Bachelor’s degree in Computer Science, Management Information Systems, Computer Engineering, or related field is required.

Experience

• Minimum 5 years’ experience in Identity and Access Management or related field, with demonstrated expertise in IAM platforms and technologies, core IAM principals (least privilege, PAM, lifecycle management), directory services, authentication and authorization, RBAC, compliance initiatives, and IAM architecture, ports, and protocols required.
• May utilize SailPoint, BeyondTrust, Saviynt, Delinea, ForgeRock, Ping Identity, Okta, CyberArk, Duo, Entra, Active Directory, etc
• Minimum 1 year experience in a role leading IAM engineering and integration initiatives, including proven experience with Windows, Linux, and appliance network and server administration with minimal supervision and guidance required.

Licenses/Certifications

• IAM, cybersecurity, or similar certification is preferred.

Tools & Equipment

• General Office Equipment

ACCOMMODATIONS

Sheetz is committed to the full inclusion of all qualified individuals. Sheetz is committed to considering all applicants regardless of disability who can perform all essential job duties with or without accommodations.