Identity & Access Management Engineer I

The responsibility of this position includes supporting, enhancing, and leading the design, implementation, and ongoing operation of the Identity Governance and Administration (IGA) program, with responsibilities aligned to experience level. This role supports application onboarding, workflow configuration, identity lifecycle management, and the reliability of IGA systems to ensure effective access governance. The position contributes to protecting the confidentiality, integrity, and availability of organizational data by implementing and maintaining controls for access provisioning, deprovisioning, certification, and access reviews. As proficiency increases, the Identity and Access Management (IAM) Engineer assumes greater accountability for solution architecture, technical leadership, and strategic advancement of the IAM program.

Support SailPoint Identity Security through configuration, maintenance and application onboarding, including connector configuration and testing.
• Assist in implementing identity lifecycle processes, including joiner, mover, and leaver events.
• Support RBAC models, access certifications, and separation-of-duties configurations to ensure effective access governance.
• Execute access provisioning, deprovisioning, and role changes according to defined standards.
• Perform integrations with on-prem and cloud directories and supported cloud platforms.
• Assist with reporting, metrics, and audit evidence collection for access reviews and compliance activities.
• Contribute to IAM automation efforts using PowerShell, Python, SQL, RPA, or Power Automate.
• Troubleshoot access and integration issues with support from senior engineers.
• Develop foundational knowledge of IAM architecture, standards, and compliance requirements.
• Configure, integrate, and tailor IAM solutions to align business needs with identity creation, deletion, vaulting, and password management standards.
• Associates are expected to perform all additional duties as assigned.

• Bachelor's Degree or equivalent combination of education and experience
• 2 years Supporting IAM or IGA solutions with SailPoint
• Working knowledge of SailPoint Identify Security, including application onboarding and configuration
• Understanding of identity lifecycle management and access governance concepts
• Ability to build workflows, RBAC models, and support user access lifecycle management
• Exposure to Java, REST APIs, and scripting or automation tools
• Familiarity with Active Directory and Entra ID
• Experience integrating systems via APIs, including building custom integrations
• Debug complex issues, analyze logs, and resolve production incidents efficiently
• Strong communication skills with the ability to explain technical concepts clearly
• Experience connecting "disconnected" or legacy applications to identity platforms using JSON, CSV parsing, or automated UI interaction techniques
• Ability to communicate technical concepts clearly and work effectively in a team environment
• Strong analytical and problem-solving skills with the ability to exercise sound judgment in high-pressure situations, while managing competing priorities and deadlines
• Relevant certifications such as SailPoint Certified Identity Security Engineer, CIMP (Certified Identity Management Professional) preferred

Physical Requirements & Working Conditions:

Must be able to sit for long periods of time and use computer keyboard and/or mouse requiring hand and wrist manipulation, while viewing computer screens.

Disclaimer:

Management retains the right to add, delete or modify the responsibilities and qualifications of the position at any time.

Trustmark Bank does not accept unsolicited resumes from agencies and/or search firms for any job postings on this site. Resumes submitted to any Trustmark Bank employee by a third-party agency and/or search firm without a valid, written search agreement signed by Trustmark, will become the sole property of Trustmark Bank. No fee will be paid if a candidate is hired for a position as a result of an unsolicited agency or search firm referral.