Identity & Access Management Engineer

At SpartanNash, we deliver the ingredients for a better life through customer-focused innovation. We do this for our supply chain customers and U.S. military commissaries, retail store guests and, most importantly, our Associates. In fact, we see a day when each will say,
"I can't live without them."
Our SpartanNash family of Associates is 20,000 strong, ranging from bakery managers to order selectors; from IT developers to vice presidents of finance; from HR Business Partners to export specialists. Each of them plays an integral role in SpartanNash's
People First
culture, Operational Excellence and Insights that Drive Solutions. Ready to contribute to the success of our food solutions company? Apply now

Location:
850 76th Street S.W. - Byron Center, Michigan 49315

Job Description
Position Summary:
The IAM engineer is responsible for designing, implementing, and managing SpartanNash's IAM solutions. As a key player on the IAM team, the IAM engineer will help the organization centralize IAM, document and optimize processes, automate provisioning and deprovisioning, and migrate to a Role Based Access Control framework.

Here's What You'll Do

• Contributes to the development and implementation of a strong Identity and Access Management program at SpartanNash.
• Work with stakeholders to define system requirements and deliver solutions.
• Onboard applications to SailPoint IdentityNow through OOTB or custom connectors
• Develop custom connectors, workflows, rules, and forms in SailPoint Identity Now
• Develop automation and self service solutions for access requests
• Design, create, and maintain access roles for RBAC and birthright provisioning
• Develop and maintain technical documentation related to IAM areas of responsibility
• Maintain IAM applications and servers for patching, antivirus and compliance

Here's What You'll Need

• Bachelor's degree in Computer Science or related field
• 5+ years experience
• Deep understanding of SailPoint IdentityNow and integrating a variety of business applications and identity stores including but not limited to AD, EntraID, HR systems, LDAP directories
• Experience with integrating enterprise SaaS applications for Single-Sign On a plus
• Strong technical ability in BeanShell, Java, XML, SQL, REST.
• Privileged Access Management (PAM) experience a plus

Physical Requirements
The physical demands described here are representative of those that must be met by an associate to successfully perform the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

May be required to lift and/or move 20 pounds. The associate is frequently required to sit/stand/walk. While performing the duties of this position, the associate is subject to a typical office environment and is rarely exposed to outside weather conditions. Temperatures may vary for those subject to any of the following areas: computer/server room, print shop, production area). The noise level in the work environment is usually low to moderate but may be high in distribution settings. Travel requirements vary by assignment.

As part of our
People First
culture, SpartanNash is proud to offer a robust and competitive Total Rewards benefits package.

SpartanNash is an Equal Opportunity Employer that invests in Associate development, recognizes and celebrates success, fosters two-way communication, and promotes a sense of belonging. We are committed to providing equal employment opportunities to all individuals, including those with disabilities and Veterans.

We are not able to sponsor work visas for this position.