Overview

The IAM Access Provisioning Specialist manages user access to lifecycles and executes provisioning and deprovisioning workflows to ensure timely, secure, and auditable access to applications, systems, and cloud resources. This role focuses on accuracy, automation, and compliance while working closely with IT, security, HR, and application teams.

 

This role can be remote anywhere in the country.  The salary range for this role is $80,000 to $100,000, plus an annual bonus. However Lakeview considers several factors when extending an offer, including but not limited to, the roles and associated responsibilities, a candidate's work experience, education/training, location and key skills. 

Responsibilities

• Manage entitlement assignments, group memberships, and role changes across on‑prem and cloud systems.
• Process access requests from catalogs and ticketing systems; follow approval workflows and SLA commitments.
• Implement and maintain delegated access request processes for application owners.
• Create and maintain automation scripts and small tooling (PowerShell, Python) to reduce manual tasks and errors.
• Monitor provisioning job health and alerting; triage and resolve provisioning failures and orphan accounts.
• Maintain runbooks, SOPs, and knowledgebase articles; provide clear handoffs to support and application teams.
• Build automation tools (workflows, scripts, connectors) to reduce manual tasks and scale solutions.
• Manage identities, groups, roles, policies, and permissions in major cloud providers (Azure AD/Entra, AWS IAM/IAM Identity Center, Google Cloud IAM).
• Prepare and maintain evidence for access-related audits; implement remediation plans for audit findings.
• Serve as a point of contact for access-related inquiries; communicate status and resolution steps to requestors.
• Develop training materials and run sessions for application owners, helpdesk staff, and certifiers on provisioning processes.
• Coordinate with security teams to enforce secure storage and rotation of credentials used by automation and service accounts.

 

Qualifications

• Undergraduate degree in computer science, information systems, cybersecurity, or related field preferred.
• 2-3+ years of experience with provisioning tools or IAM platforms (Active Directory, Cloud Entitlement Management and SailPoint).Familiarity with directory services (Active Directory, Azure AD) and common identity protocols (SCIM, SAML, OIDC).
• Basic scripting ability in PowerShell or Python.
• Experience with ticketing systems (ServiceNow, Jira) and ITSM processes.
• Strong problem-solving and analytical skills with attention to detail.
• Ability to work independently and collaboratively in a fast-paced environment.
• Self-starter with strong interpersonal, written and verbal communication skills and the ability to interact with technical and non-technical stakeholders.

Certifications, Licenses, and/or Registration

• SailPoint and Microsoft Certifications are preferred but not required

Location & Compensation

• The annual salary for this role is $80 - 100K depending on the individual’s experience
• Role can be 100% fully remote depending on geographic location

Physical Demands and Work Environment

While performing the duties of this job, the employee is regularly required to sit and use hands to handle, touch or feel objects, tools, or controls.  The employee frequently is required to talk and hear.  The noise level in the work environment is usually moderate.  The employee is occasionally required to stand; walk; reach with hands and arms.  The employee is rarely required to stoop, kneel, crouch, or crawl.  The employee must regularly lift and/or move up to 10 pounds.  Specific vision abilities required by this job include close vision, color vision, and the ability to adjust focus.

EEOC

Lakeview is an Equal Employment Opportunity employer.  All aspects of consideration for employment and employment with the Company are governed on the basis of merit, competence and qualifications without regard to race, color, religion, sex, national origin, age, disability, veteran status, sexual orientation, or any other category protected by federal, state, or local law.