Job description

Identity & Access Management Engineer job description

This IAM Engineer job description is the spec our practice leads vet against: 6 responsibilities, 6 requirements, 4 nice-to-haves. Copy it, or hire a vetted specialist.

Job description

Read time
1 min
Sections
5
Issued by
Remote Pro Ai · Cybersecurity
  1. Role summary
  2. Responsibilities
  3. Requirements
  4. Nice-to-have
  5. What this role costs, by market

Role summary

We are hiring an Identity & Access Management Engineer to run identity as our security perimeter for employees, customers, workloads and AI agents. You will deliver SSO, MFA and passwordless access, identity governance, privileged access and national ID integration. Success means faster, safer access for every user, fewer standing privileges and identity controls that pass audit first time.

Responsibilities

  1. Implement SSO, MFA, conditional access and passwordless journeys.
  2. Deploy IGA (joiner-mover-leaver, certification, SoD) and PAM.
  3. Secure machine and non-human identities, secrets and service accounts.
  4. Integrate national ID such as Nafath and UAE Pass, plus B2B federation.
  5. Automate provisioning with SCIM and workflows.
  6. Produce identity metrics and audit evidence for security and compliance teams.

Requirements

  1. 4+ years in IAM engineering across access management and governance.
  2. Hands-on with Entra ID, Okta, Ping or Keycloak.
  3. Experience with SailPoint, Saviynt or another IGA platform.
  4. PAM deployment experience, ideally with CyberArk.
  5. Strong grasp of SAML, OIDC, OAuth 2.0 and SCIM.
  6. Automation scripting in PowerShell or Python.

Experience bands offered by Remote Pro Ai (years) Mid 4–⁠6 · Senior 6–⁠9 · Lead 9+

Nice-to-have

  1. Microsoft SC-300, Okta Certified or CyberArk Defender certification.
  2. Nafath or UAE Pass integration experience.
  3. Workload identity federation across cloud platforms.
  4. Banking or government identity programmes.

What this role costs, by market

In-house figures are indicative annual gross salaries for a Senior-level direct hire, before employer costs such as social insurance, medical cover, visas, recruitment fees and equipment. Remote Pro Ai seats are monthly and all-inclusive. Remote Pro Ai’s base monthly rates for vetted Mid, Senior and Lead engineers are at least 30% below the median published by comparable vetted-talent vendors serving the GCC, and 37–⁠47% below the European and US medians (Remote Pro Ai price benchmark, October 2026). Design, marketing, business-development and sales seats are priced at the base band.

Senior level
MarketCur.Seatfrom, per monthSeat × 12from, per year
Saudi ArabiaSAR25,200302,400
United Arab EmiratesAED24,700296,400
QatarUSD6,73080,760
United StatesUSD6,73080,760
GermanyEUR6,01072,120
United KingdomGBP5,09061,080

We do not yet publish in-house salary benchmarks for this role. Our Salary & Rate Guide covers 13 engineering, security, game and design roles.

GCC & Egypt Tech Talent Salary & Rate Guide 2026, Remote Pro Ai Research estimates: the midpoint of the Senior monthly gross range × 12. Benchmarks are updated every October. Updated: October 2026.

Skip the hiring cycle

Book a vetted specialist for this role, shortlisted in 48 hours and working in 4 working days.

Frequently asked questions

Yes. The text is free to copy and adapt for your own vacancy, and the DOCX download keeps the formatting. It reflects the specification our practice leads use when they vet specialists for this role, so it doubles as a scope document when you brief stakeholders, recruiters or procurement.

Each responsibility and requirement maps to something we test. Candidates complete a live technical assessment scored by a practice lead, then a client-fit interview and reference checks. 3.4% of applicants pass 5 gates, and only those specialists appear on the shortlists we send.

Pay for the same role varies widely between Riyadh, Dubai and London, and employer costs differ again. Each figure is the annualised midpoint of the Senior range in our Salary & Rate Guide, so you can compare an in-house hire with an all-inclusive Remote Pro Ai seat on equal terms. Your exact Remote Pro Ai price comes from a quotation valid for 30 days.

Often, once employer costs and time-to-hire are counted: there is no placement fee, and the specialist starts within 4 working days instead of after a months-long search for a permanent hire. Remote Pro Ai’s base monthly rates for vetted Mid, Senior and Lead engineers are at least 30% below the median published by comparable vetted-talent vendors serving the GCC, and 37–⁠47% below the European and US medians (Remote Pro Ai price benchmark, October 2026).

Match the level to the scope. Mid specialists deliver well-defined work inside your architecture, Senior specialists own a component end to end, and Leads set direction and run the squad. This role is offered at Mid, Senior and Lead level, and the level line under Requirements shows the bands Remote Pro Ai can staff.