Title: Senior IAM Engineer Identity Governance Location: United States Remote JobID 17146 Position Level Individual Contributor Team Technology Solutions & Svcs Working Time Full-Time Position Type Regular Travel Requirements 5% Workplace Type Remote Job Description: Requirements Press space or enter keys to toggle section visibility At Jack Henry, we deliver technology solutions that are digitally transforming and empowering community banks and credit unions to provide enhanced and streamlined user experiences to their customers and members. Our best-in-class products are just the start as we lay the groundwork for the future of digital banking and payments. We hope you'll join us. We can't do it without you. The Identity & Access Management (IAM) Senior Engineer will independently lead the development and enhancement of IAM products like SailPoint, Saviynt, and Okta, and influences stakeholders on future improvements. Implements role management, lifecycle management, and access certifications, while solving business problems and coaching peers. Stays updated on industry trends, solves technical issues, supports IAM applications, and trains users. Manages identity lifecycle with Active Directory, troubleshoots with SIEM tools, implements IAM policies, integrates with cloud platforms, automates processes, and enhances security initiatives. This position may be worked remotely within the United States, with the exception of California. East coast applicants must be willing to work central or mountain time zone hours. All positions, regardless of location, may require an onsite interview or in-person onboarding requirements to verify your identity. This position is ineligible for immigration sponsorship and support. Please do not apply if at any time you will need immigration support now or in the future (i.e., H-1B, PERM). What you’ll be responsible for: - Plans, designs, develops, redesigns, and implements various technology IAM products, such as Sailpoint, Saviynt, Okta and recommendations to influence key stakeholders on additional/future enhancements. - Performs the analyzing and implementation of authorization methods such as, RBAC/ABAC/PBAC role management, Lifecycle Management, Separation of Duties (SOD), Access Certifications, etc. - Develops the configuring, integrating, and tailoring of existing IAM products to solve identified business problems or to suit a client's requirements. - Reviews IAM technical white papers and provides guidance to team on future offerings to help people better understand the technology behind them. - Manages Identity Lifecycle Management with Microsoft Active Directory which includes developing and managing the Access Certifications lifecycle accounts (assign permissions, delete accounts, and complete appropriate modifications for role changes). - Performs integrations with directories (both in the cloud and on-prem) and cloud platforms (ex. AWS, GCP, and Azure). - Integrates the business needs with technology and standards related to identity creation, deletions, vaulting and password management. - Creates and updates metrics, including automating data collection and aggregation. - Builds automation through integrations using Powershell scripts, RPA, SQL, and other automation tools and Power Automate. - Participates in information gathering meetings with clients to determine the client’s needs, business goals, and desired outcomes. - Performs other duties as assigned. What you’ll need to have: - Minimum of 6 years’ experience with Identity and Access Management. - Minimum of 4 years’ experience with SailPoint engineering and/or architecting. - Experience with SailPoint IdentityNow (IDN) or SailPoint Identity Security Cloud (ISC). Advanced understanding of IAM platforms (SailPoint, Saviynt, Okta) to develop and scale with the organization. - Experience with creating and updating scripts and code. - Experience with API’s (REST, JSON) and cloud infrastructure. What would be nice for you to have: - Bachelor’s degree in Computer Science, Information Technology, Cybersecurity preferred. - Expert knowledge of access management frameworks (RBAC/ABAC/PBAC). - Deep understanding of Microsoft Active Directory and cloud platforms (AWS, GCP, Azure). - Comprehensive understanding of security and access certification processes. - Proficiency in automation tools (PowerShell, RPA, SQL, Power Automate). - Experience with cloud and on-premises directory integrations. - Expertise in access certification and SOD implementation. - Strong leadership capabilities in technical project implementation. - Strong analytical and problem-solving skills. - Ability to translate complex technical concepts for various audiences. - Ability to generate and interpret metrics and reports. - Experience with Privileged Access Management tools (eg. Delinea Secret Server). If you got this far, we hope you're feeling excited about this opportunity. Even if you don't feel you meet every single requirement on this posting, we still encourage you to apply. We're eager to meet motivated people who align with Jack Henry's mission and can contribute to our company in a variety of ways.

• Build and ship features end to end across React Native (mobile), React (web dashboards), and a serverless TypeScript backend • Implement product flows from UI and data entry through API logic, persistence, and status/error handling • Write and consume clean API contracts, with shared validation schemas across mobile, web, and backend • Own integrations with financial and payment-rails partners, wiring third-party APIs and webhooks (payment processors, settlement rails, KYC, banking) into our services with idempotent, faulttolerant handling • Work in a serverless AWS stack (Lambda, DynamoDB) with TypeScript infrastructure-as-code • Collaborate with the frontend and backend leads, absorbing work on either side as priorities shift • Keep an eye on quality where it matters: typed interfaces, sensible tests, and correct handling of edge cases in a financial product • Help maintain a clean, shared monorepo where types and components are reused, not duplicated • Use AI-assisted development as your default workflow, and help keep our shared context docs current so teammates and agents stay informed

• Design, implement, test, and release features end-to-end with limited guidance. • Independently identify edge cases and potential failure modes within assigned work. • Write clean, maintainable code and provide constructive, specific feedback during code reviews. • Proactively communicate blockers or ambiguities to the team. • Apply practical knowledge of federated identity standards including OAuth 2.0, OIDC, SAML 2.0, and JWT. • Understand and reason about authorization frameworks, policy enforcement, and integration into upstream and downstream services. • Reason clearly about token lifecycle, session management, and the security implications of identity design choices. • Understand the mechanics of connecting distributed services in a multi-product platform environment. • Build and maintain integrations that are observable, fault-tolerant, and respectful of downstream consumers. • Write and work with API contracts (REST, event-driven patterns) with attention to versioning and backwards compatibility. • Actively use AI-assisted development tools (e.g., Claude Code, Codex) to accelerate design, implementation, and validation. • Participate in building and improving AI-assisted workflows and evaluation harnesses. • Stay current on evolving AI tooling and introduce new approaches to the team. • Write tests with sufficient coverage to catch regressions without over-engineering. • Contribute to operational health by monitoring shipped features, responding to issues, and following incidents to resolution. • Document systems and processes to reduce reliance on tribal knowledge. • Build and extend platform services for federated identity, authentication, and authorization. • Implement integrations with the centralized identity platform, including token handling and session management. • Support product teams with integration processes, debugging, and navigating edge cases. • Develop tooling, documentation, and examples for self-service integrations. • Design and implement backend service integrations using Python and common patterns. • Build with multi-product and multi-tenant scenarios in mind. • Participate in API design reviews. • Use AI development tools as an active part of the delivery workflow. • Contribute to AI harness development to improve team velocity. • Share effective AI-assisted engineering patterns with the team. • Write unit, integration, and acceptance tests. • Instrument services for observability (logging, metrics, alerting). • Participate in on-call rotations and incident response. • Participate in design discussions and code reviews, giving and receiving feedback constructively. • Provide mentorship and review support to junior engineers. • Contribute to internal documentation, runbooks, and onboarding materials.

Role Description You will take ownership of the search infrastructure for Ask Seeking Alpha — a financial intelligence platform powered by LLMs. Your main goal is to ensure our AI agents can find the exact financial data they need (articles, transcripts, news) in milliseconds. You will work on the Retrieval layer of our RAG architecture, combining traditional text search with modern vector search techniques. Tech Stack: - Elasticsearch (v8+) - Python (FastAPI, Asyncio) - OpenAI Embeddings - LangChain - LangSmith The Senior Search Engineer will be engaged with the company as a contractor (Private Entrepreneur). What You'll Do - Search Engine Development: Design and implement Hybrid Search strategies. You will figure out how to best combine "keyword matching" (finding specific tickers like 'AAPL') with "semantic search" (finding concepts like 'revenue growth'). - Relevance Tuning: You are responsible for the quality of search results. You will build systems to measure and improve how well the search engine answers user queries (using tools like LangSmith). - Vector Search & RAG: Manage the integration of OpenAI embeddings into Elasticsearch. You will solve challenges related to indexing long documents (e.g., earnings transcripts) so the AI retrieves only the most relevant parts. - Performance Optimization: Optimize Elasticsearch queries and index settings to ensure low latency, even for complex queries with many filters. - Python Backend: Develop and maintain the Python services that build queries and process results. We use FastAPI and Asyncio heavily. Qualifications - 5+ years of experience working with Search Engines in production. - Understanding of how indices, analyzers, and mappings work "under the hood." - Understanding the difference between Lexical Search (keywords) and Vector Search (meaning), and know when to use which. - Strong experience with Python 3.10+. - Comfortable writing asynchronous code (async/await) and building APIs. - Experience designing data schemas for search (how to structure JSON documents for efficient retrieval). Requirements - Experience building RAG (Retrieval-Augmented Generation) pipelines. - Familiarity with LangChain or similar LLM frameworks. - Experience with Evaluation tools (like LangSmith) to test search quality automatically. - Background in Finance (understanding tickers, earnings calls, etc.).