Information Security IAM Engineer

Typical responsibilities include:

- Engineer, implement, and maintain IAM capabilities across Okta, Microsoft Entra ID, Active Directory, and integrated applications.

- Lead IAM solution design and integration efforts, including SSO, MFA, passwordless authentication, federation, provisioning, and deprovisioning.

- Manage identity lifecycle processes for onboarding, role changes, offboarding, and access requests in partnership with People Services, IT, and business owners.

- Diagnose and resolve complex authentication, authorization, federation, and identity lifecycle issues.

- Improve IAM processes through automation, standardization, and secure self-service capabilities using PowerShell or similar scripting tools.

- Apply least privilege, role-based access control (RBAC), separation of duties, Conditional Access, Privileged Access Management (PAM), and Zero Trust principles to reduce access risk.

- Perform access reviews, support identity governance and privileged access initiatives, and participate in audits, compliance reviews, and remediation activities.

- Develop and maintain technical documentation, standards, operational procedures, and runbooks for IAM solutions.

- Proactively identify security, reliability, efficiency, and user-experience improvements and carry them through design and implementation.

- Serve as a trusted IAM advisor by translating technical security requirements into clear, business-focused recommendations.

- Maintain current knowledge of IAM technologies, cybersecurity threats, industry practices, and emerging identity standards.

- Maintain a safe working environment.

Education:

- Bachelor's degree in cybersecurity, computer science, information technology, or a related field, or equivalent practical experience.

- Five or more years of IAM or closely related identity security experience, including hands-on engineering, implementation, and integration work.

Skills/Experience

- Experience administering and engineering solutions in Okta Identity Cloud and Microsoft Entra ID is required. Comparable enterprise IAM platform experience may be considered.

- Experience implementing and supporting SSO, MFA, passwordless authentication, identity lifecycle management, and access governance is required.

- Working knowledge of SAML, OAuth 2.0, OIDC, and SCIM is required.

- Experience integrating SaaS applications with identity providers and troubleshooting complex access-related issues is required.

- Okta, Microsoft identity, CIMP, or similar IAM/security certification is required.