Identity and Access Management Engineer

Overview

Position : Identity and Access Management Engineer

Location : REMOTE OK - (Hybrid schedule if living within 31 miles of Tustin, CA or Austin, TX)

Position Summary :

The Identity and Access Management (IAM) Engineer is a key professional responsible for designing, implementing, and maintaining secure and efficient IAM solutions within an organization.

The role involves overrseeing access controls, identity lifecycle management, single sign-on (SSO), authentication mechanisms, and ensuring compliance with security standards.

The IAM Engineer collaborates with cross-functional teams, integrates IAM systems with various applications, and responds to security incidents, implementing corrective actions.

The qualifications include a degree in Computer Science or a related field, extensive experience in IAM roles, proficiency in IAM technologies, relevant certifications, and strong communication skills.

The role requires expertise in API integration, knowledge of industry standards, and a focus on enhancing security posture through continuous improvement.

Salary range $110k to $140k depending on experience + full time benefits.

Responsibilities

Responsibilities :

• Author and manage execution of IAM enterprise roadmap and program to continually improve upon capabilities.
• Proactively collaborate with leadership and other teams to optimize and align identity and access management primarily focusing on employee / contractor IAM including but not limited to access management, privileged access management, and role / entitlement management.
• Automate Identity workflows including Provisioning, De-Provisioning, Lifecycle Management and Access Controls through API Integrations
• Manage Identity Threat Detection and Response (ITDR) and adjust and optimize our security controls to better detect and block any potential threats.
• Serve as subject matter expert for employee / customer / partner Identity systems.
• Analyze, design, implement, administer and support Ping Identity integrations for business applications.
• Seek opportunities to research, design, and advocate new technologies, architectures, and vendors for continuous improvement of Identity services capabilities.
• Collaborate with technical teams, business stakeholders, and third-party partners to optimize and expand Identity services to support business needs.
• Ensure adherence to ITIL v4 Service Value System for Identity Systems
• Create and maintain standard operating procedures, policies, SLAs, communications and knowledge base.
• Self-motivated with the ability to exercise independent judgment with minimal direction from supervisor.
• Strong leadership and organizational skills with the ability to adapt quickly to changing priorities and assignments.
• Excellent verbal, written, and presentation skills; in particular, demonstrated ability to effectively communicate technical and business issues and solutions to technology peers and business partners.
• Good understanding of process orientation, understanding of project management methodologies and best practices
• Stay up to date and informed on developing regulatory concerns and changing IT and information security trends.
• Ability to be part of a rotating on-call 24x7x365 schedule.

Qualifications

Qualifications :

• Demonstrated experience with leading IAM vendors, preferably Ping Identity
• Demonstrated experience with leading IGA vendors; Sailpoint, Saviynt, etc.
• Experience working on API Endpoints to build and automate Identity tasks.
• Knowledge with ITDR solutions is a plus; Ping Protect, Valence, Crowdstrike etc.
• Extensive knowledge in implementing OAuth, SAML, FIDO, multi-factor, passwordless and single sign-on authentication, Authorization, etc.
• Knowledge of Azure / AWS IAM roles, groups, and policy creation
• Knowledge of authentication protocols, services, and traffic flows
• Knowledge of Active Directory including users, security groups and group policies
• Proven management of staff, projects and vendors
• Ability to drive initiatives and lead meetings in subject matter expertise areas.
• Ability to stay current on technology trends and quickly learn new technologies.
• Ability to meet deadlines, prioritize appropriately, cope well with change and maintain composure under high pressure situations.
• Excellent interpersonal, written, and verbal communication skills
• Ability to communicate with staff and management of any level.
• Knowledge of common security / privacy frameworks; CIS, NYCRR 500, CSF, PCI, NIST, CCPA / CPRA, etc.

Education, Experience and Certification :

• Bachelor’s Degree in Cybersecurity, Computer Science, Information Technology, business or equivalent experience
• 5+ year of experience in cybersecurity, information technology or combined experience
• 3+ years of experience with industry leading IAM / CIAM vendors; Ping, Okta, etc.
• 3+ years of experience with industry leading IGA vendors; Sailpoint, Saviynt, etc.
• 3+ years in a management role with more than 5 direct
• Relevant certifications a plus : CIAM, CIMP, CAMS, CIGE, CISSP, CISM
• Experience in Mortgage or Finance industry preferred.

Work Authorization : Must be able to verify identity and employment eligibility to work in the .

Other Duties : This job profile is not intended to be an all-inclusive list of job duties and responsibilities, as one may perform additional related duties as assigned to meet the needs of the organization.

Physical Demands : The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job.

Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions. Must be able to lift up to ten pounds.

• Primary functions require sufficient physical ability and mobility to work in an office setting; to stand or sit for prolonged periods of time;
• to occasionally stoop, bend, kneel, crouch, reach, and twist; to lift, carry, push, and / or pull light to moderate amounts of weight;

to operate office equipment requiring repetitive hand movement and fine coordination including use of a keyboard; and to verbally communicate to exchange information.

VISION : See in the normal visual range with or without correction. HEARING : Hear in the normal audio range with or without correction.

EOE / M / F / D / V. Drug-free workplace.

LI-JD2

LI-REMOTE

Need help finding the right job?