<p><strong>ABOUT KALLES GROUP:</strong></p> <p>Everyone deserves to be secure. Our mission at Kalles Group is to help secure the future for companies of all shapes and sizes.</p> <p>While our expertise spans multiple disciplines, our method remains consistent: building trust and relationship with people -- whether you are a client, a consultant, or--in this case--a candidate.</p> <p>No matter what role you come from--whether you're an executive or just starting your career-you can expect our highest level of attention and respect. We want to find the right fit for each role, but we also want you to find the right fit for your career.</p> <p><strong>We believe the best way to show you what our team is like is to treat you like you're already a part of it</strong>. We hope you'll consider joining our team of experienced professionals who are building their careers at Kalles Group—and having fun while doing it.</p> <p><strong><span data-contrast="auto">WHAT YOU WILL DO:</span></strong><span data-ccp-props="{"201341983":0,"335559739":160,"335559740":278}"> </span></p> <div> <div> <div> <div> <div> <div> <div> <div> <div> <div> <div> <div> <p>As an Identity Operations Engineer with Kalles Group, you’ll be on assignment with one of our enterprise clients, supporting workforce, partner and contractor access across Microsoft Entra ID and SailPoint Identity Security Cloud while the client moves application authentication from a legacy identity provider to Entra. This is a hands-on operations role. Most of your time will go to working the identity ticket queue: joiner/mover/leaver events, access requests, provisioning and hybrid sync failures, privileged access, access certifications, and audit evidence for SOX and PCI. The rest of your time you’ll spend automating repeat work with PowerShell, Microsoft Graph, SailPoint ISC APIs and workflow tools such as Logic Apps, Power Automate and Azure Automation/Functions, all integrated with the ITSM platform. When access breaks, you’ll be the go-to escalation point, working closely with Identity Architecture, HR, ITSM, application owners and Security Operations to resolve issues quickly and prevent repeats. This is a hybrid role in Seattle, with after-hours support as needed.</p> </div> </div> </div> </div> </div> </div> </div> </div> </div> </div> </div> </div> <p><span data-ccp-props="{"201341983":0,"335559739":160,"335559740":278}"><strong>KEY RESPONSIBILITIES:</strong> </span></p> <p> </p> <div class="ewa-rteLine">IDENTITY LIFECYCLE OPERATIONS (Joiner / Mover / Leaver)</div> <div class="ewa-rteLine">• Fulfill JML requests from the ITSM queue within SLA – account creation, baseline/role-based access, transfers & promotions, timely deprovisioning (terms, contractors, leaves).</div> <div class="ewa-rteLine">• Operate SailPoint ISC day to day – access requests, provisioning failures, aggregations & identity refreshes, attribute/source-data fixes, role & access profile assignments.</div> <div class="ewa-rteLine">• Administer Entra ID – users, groups (incl. dynamic), licensing, enterprise app role assignments, guests, Lifecycle Workflows and Entitlement Management requests.</div> <div class="ewa-rteLine">• Troubleshoot HR-to-identity provisioning and hybrid sync (Entra Connect / Cloud Sync) – attribute mismatches, duplicate/conflicting accounts.</div> <div class="ewa-rteLine">• Handle privileged/elevated access (PIM eligible assignments, role-assignable groups) with approvals and audit trail.</div> <div class="ewa-rteLine">• Support app access – SSO (SAML/OIDC) assignments, SCIM errors, onboarding apps/connectors to established patterns.</div> <div class="ewa-rteLine">• Run access certification / review campaigns operationally and produce audit evidence (SOX, PCI).</div> <div class="ewa-rteLine">• Ongoing account hygiene – orphaned/dormant/stale accounts, guest cleanup, service account inventory, Entra/SailPoint/AD reconciliation.</div> <div class="ewa-rteLine"> </div> <div class="ewa-rteLine">AUTOMATION & CONTINUOUS IMPROVEMENT</div> <div class="ewa-rteLine">• Build lifecycle/access automation with PowerShell, Graph API / Graph PowerShell SDK, Python, SailPoint ISC APIs, workflows and rules.</div> <div class="ewa-rteLine">• Event-driven/scheduled workflows (Azure Automation, Logic Apps, Power Automate, Azure Functions) with ITSM ticket auto-fulfillment and closure.</div> <div class="ewa-rteLine">• Analyze ticket volume, SLAs and failure patterns to target automation; track tickets eliminated, time saved, error reduction.</div> <div class="ewa-rteLine">• Treat automation as production code – source control, peer review, testing, logging, error handling. Use AI tooling to speed scripting and troubleshooting.</div> <div class="ewa-rteLine"> </div> <div class="ewa-rteLine">ACROSS THE ROLE</div> <div class="ewa-rteLine">• Write runbooks, SOPs and KB articles; serve as escalation point for service desk and app teams.</div> <div class="ewa-rteLine">• Partner with HR/HRIS, ITSM and SecOps on data quality, lifecycle timing and identity signals.</div> <div class="ewa-rteLine">• Participate in identity incident response, including after-hours support as needed.</div> <p> </p> <p><strong><span data-ccp-props="{"201341983":0,"335559739":160,"335559740":278}">ABOUT YOU:</span></strong></p> <p><strong>