Identity Operations Engineer Consultant - Access Lifecycle & Automation

The posting, as Kalles Group wrote it

ABOUT KALLES GROUP

Everyone deserves to be secure. Our mission at Kalles Group is to help secure the future for companies of all shapes and sizes.

While our expertise spans multiple disciplines, our method remains consistent: building trust and relationship with people -- whether you are a client, a consultant, or--in this case--a candidate.

No matter what role you come from--whether you're an executive or just starting your career-you can expect our highest level of attention and respect. We want to find the right fit for each role, but we also want you to find the right fit for your career.

We believe the best way to show you what our team is like is to treat you like you're already a part of it . We hope you'll consider joining our team of experienced professionals who are building their careers at Kalles Group—and having fun while doing it.

WHAT YOU WILL DO

As an Identity Operations Engineer with Kalles Group, you’ll be on assignment with one of our enterprise clients, supporting workforce, partner and contractor access across Microsoft Entra ID and SailPoint Identity Security Cloud while the client moves application authentication from a legacy identity provider to Entra. This is a hands-on operations role. Most of your time will go to working the identity ticket queue: joiner/mover/leaver events, access requests, provisioning and hybrid sync failures, privileged access, access certifications, and audit evidence for SOX and PCI. The rest of your time you’ll spend automating repeat work with PowerShell, Microsoft Graph, SailPoint ISC APIs and workflow tools such as Logic Apps, Power Automate and Azure Automation/Functions, all integrated with the ITSM platform. When access breaks, you’ll be the go-to escalation point, working closely with Identity Architecture, HR, ITSM, application owners and Security Operations to resolve issues quickly and prevent repeats. This is a hybrid role in Seattle, with after-hours support as needed.

KEY RESPONSIBILITIES

IDENTITY LIFECYCLE OPERATIONS (Joiner / Mover / Leaver)

• Fulfill JML requests from the ITSM queue within SLA – account creation, baseline/role-based access, transfers & promotions, timely deprovisioning (terms, contractors, leaves).
• Operate SailPoint ISC day to day – access requests, provisioning failures, aggregations & identity refreshes, attribute/source-data fixes, role & access profile assignments.
• Administer Entra ID – users, groups (incl. dynamic), licensing, enterprise app role assignments, guests, Lifecycle Workflows and Entitlement Management requests.
• Troubleshoot HR-to-identity provisioning and hybrid sync (Entra Connect / Cloud Sync) – attribute mismatches, duplicate/conflicting accounts.
• Handle privileged/elevated access (PIM eligible assignments, role-assignable groups) with approvals and audit trail.
• Support app access – SSO (SAML/OIDC) assignments, SCIM errors, onboarding apps/connectors to established patterns.
• Run access certification / review

[…]
o detail, clear communication with technical and non-technical partners.

Preferred Qualifications

• Certifications: SC-300, SailPoint ISC, AZ-500, Security+, or CISSP.
• ITSM-integrated automation (e.g., ServiceNow → SailPoint or Entra fulfillment).
• Low-code automation (Power Automate, Logic Apps) and IaC/config-as-code (Terraform, Bicep).
• HRIS-driven provisioning (e.g., Workday) and source-of-truth data quality.
• PAM familiarity (e.g., BeyondTrust) and PAM/PIM interplay.
• Audit/compliance support (SOX, PCI) for access controls and evidence.
• ITDR exposure; identity signals into SIEM/SOAR.
• Large-scale retail, ecommerce, or high-transaction enterprise experience.

WHAT WE OFFER

• The annual salary range for this role is $120,000-$135,000.
• We offer Medical, Dental, Vision plans, 401K with matching, and PTO for salaried employees.
• Work/life balance – we know there’s more to life than work! We encourage our team to pursue other passions, get outside, and spend time with family. We work with clients and consultants to set expectations for a manageable workload.

LOCATION

This role is hybrid with onsite requirements at our client's location in Seattle, WA. Therefore, we are currently only considering candidates that are already living in the Seattle area.

HOW TO APPLY

Please fill out the form below (including uploading your most recent resume) and we'll be in touch! We know imposter syndrome can be a barrier to many great applicants. We hope you'll still consider applying. That's why we've made the application process as short and simple as possible.

Even if you're not a fit for the role, you can expect to hear back from us! We want you to have the best experience as a candidate, so please feel free to share feedback at any stage of the process to talent@kallesgroup.com .

Kalles Group is an equal-opportunity employer and does not discriminate on the basis of creed, nationality, race, ethnicity, disability, gender, or other protected class.