IAM Engineer

Kokosing (www.kokosing.biz) is one of America's 50 largest General Contractors and services a broad spectrum of clients in both the private and public business sectors. Kokosing's services include heavy civil/industrial construction such as highways, bridges, underground utilities, water/wastewater facilities, and marine construction. For over 75 years, Kokosing has successfully attracted the most qualified technical personnel in the construction industry by offering visible challenges, superior quality, and attractive rewards. With over $2.8 billion in annual sales and a commitment to its workforce, Kokosing is the winning team. Job Description: We are seeking an Identity and Access Management (IAM) Engineer to help modernize and evolve our identity platform into a strategic trust, governance, and authorization architecture supporting employees, applications, machine identities, cloud services, data platforms, and emerging AI technologies. This role will contribute to the design, implementation, and continuous improvement of identity governance, privileged access management, Zero Trust initiatives, modern authorization models, and data-centric access controls across hybrid enterprise environments. The ideal candidate combines strong technical expertise with a governance-first mindset and understands that identity is more than account management. Identity serves as the foundation for securing enterprise resources, governing access to critical data, enabling automation, and supporting trusted human and non-human interactions across the organization. This position plays a key role in the organization's transition from traditional identity administration toward a modern identity security and governance model capable of supporting future business, cloud, and AI-driven initiatives. Key Responsibilities Identity Architecture & Modernization - Participate in the development and execution of the IAM modernization roadmap. - Contribute to enterprise identity architecture and governance standards. - Assist in the transition from legacy access management approaches to modern identity-centric security models. - Evaluate emerging IAM technologies, industry trends, and best practices. - Identify opportunities to simplify authorization models, improve governance, and reduce security risk. - Support enterprise adoption of Zero Trust architecture principles. - Collaborate with cybersecurity, infrastructure, application, and data teams to improve enterprise-wide identity capabilities. Identity Governance & Modern Authorization - Support implementation and continuous improvement of Identity Governance and Administration (IGA) capabilities. - Participate in role engineering and entitlement management initiatives. - Assist with access certification campaigns and entitlement lifecycle governance. - Support Segregation of Duties (SoD) and least-privilege initiatives. - Assist in implementing policy-based authorization and Attribute-Based Access Control (ABAC) models. - Participate in data-centric access governance initiatives. - Support implementation of Just-In-Time (JIT) and Just-Enough-Access (JEA) access models. - Assist in governance of privileged, service, machine, and workload identities. - Support development of access governance processes that improve accountability, traceability, and compliance. Emerging Technology, Automation & AI Governance Support governance and lifecycle management of machine, application, service, automation, and AI-related identities. Assist in securing access to AI-enabled applications, cloud services, and business processes. Participate in reviews of AI data access and authorization requirements. Support auditing and mon