Engineer, IAM & Endpoint Platform

Summary The Carlyle Group is seeking an Experienced Engineer focused on Identity & Access Management (IAM) & Endpoint Platforms to join our Enterprise Productivity Solutions (EPS) team within Global Technology & Solutions (GTS). EPS is responsible for the platforms Carlyle's workforce relies on every day which includes Identity & Access Management, endpoint management (physical and virtual), Windows and macOS, Microsoft 365 and Purview, enterprise AI solutions, and other end-user technology services. This role's primary focus is IAM and endpoint management, with the expectation that the engineer also contributes across other EPS workstreams as priorities evolve as we value versatile engineers who stay engaged across the full end-user platform portfolio. The Engineer will own the implementation, maintenance, and continuous improvement of IAM platforms (SailPoint, Okta, CyberArk, Entra ID) and endpoint management systems (Intune, Jamf) across Windows, macOS, and iOS, and contribute over time to broader EPS initiatives. You will lead several digital workplace transformation initiatives, drive process and automation improvements, resolve complex technical issues, and collaborate across tech and business teams to shape strategy and solution direction in a global, fast-paced environment. Carlyle is an AI-forward firm. We equip our employees with leading AI solutions and expect our engineers to apply them every day to work smarter, automate the routine, and focus their time on higher-value problems. In this role, you will be encouraged to experiment with AI to streamline IAM and endpoint operations, accelerate automation, and help shape how the EPS team integrates AI into the end-user technology experience.

IAM & Endpoint Management Serve as a subject matter expert across IGA, PAM, SSO, MFA, and endpoint security; design, automate, and maintain IAM solutions across SailPoint IdentityNow, Okta, Active Directory, Entra ID, and Workday that govern access for internal and external users Administer Okta (SSO, MFA, adaptive authentication, Lifecycle Management, Workflows) and enforce Zero Trust controls across IAM and endpoints, including device-compliance-based Conditional Access in Entra ID Design and maintain Joiner-Mover-Leaver (JML) workflows and Role-Based Access Control (RBAC) frameworks in SailPoint IdentityNow, including role mining, entitlement mapping, provisioning, access certifications, and automated deprovisioning, to enforce least-privilege access and meet regulatory requirements Run day-to-day IAM operations: SSO onboarding, MFA administration, access reviews, entitlement cleanup, HR-driven lifecycle events, and platform upgrades Contribute to modernization of identity, endpoint, and access management platforms, driving initiatives that deliver measurable security, efficiency, and compliance value Support identity and access workstreams related to mergers, acquisitions, and divestitures AI & Automation Apply AI to streamline IAM and endpoint operations within financial-services compliance guardrails, and govern identities for agentic AI and non-human identities (NHIs), including OAuth grant reviews, least-privilege scoping, and extending JML to machine identities Operations & Support Serve as an escalation point for executive-level technical issues; interface effectively with senior stakeholders and their administrative teams to diagnose and resolve complex problems Own technical solutions end-to-end, from design and implementation through steady-state operations, and build automation (PowerShell, Python) to streamline configuration management and reduce manual effort Resolve complex technical incidents, perform root-cause analysis on high-impact disruptions, meet SLOs, and serve as escalation point for the Service Desk on IAM and endpoint issues; maintain runbooks and technical documentation to support operational continuity Compliance & Governance Support IAM and endpoint compliance