Senior Identity and Access Management; IAM Engineer

PENNYMAC

Pennymac (NYSE: PFSI) is a specialty financial services firm with a comprehensive mortgage platform and integrated business focused on the production and servicing of U.S. mortgage loans and the management of investments related to the U.S. mortgage market.

At Pennymac, our people are the foundation of our success and at the heart of our dynamic work culture. Together, we work towards a unified goal of helping millions of Americans achieve aspirations of home ownership through the complete mortgage journey.

The Identity & Access Management (IAM) Lead is responsible for the strategic design, implementation, and management of systems pertaining to identity management, identity security, and directory/federation services. This role ensures that access to Pennymac’s systems and data is secure, efficient, and compliant with internal policies and external regulations. The Lead will protect the organization against unauthorized access and identity-based threats by maintaining robust authentication and authorization frameworks.

• Manages and/or improves multiple systems related to identity management, identity security, and directory/federation services.
• Makes recommendations to improve identity, network, and application architectures to ensure "least privilege" access and enhance end user experience.
• Analyzes and assesses vulnerabilities within identity infrastructure and application identity design, investigates countermeasures for identity-based attacks, and recommends best practices.
• Reviews and updates information security policies, architectures, and standards specifically for Identity and Access Management.
• Responds to audits, penetration tests, and vulnerability assessments related to user access and identity governance.
• Utilizes new technologies and scripting to enhance security capabilities and automate manual provisioning/deprovisioning processes.
• Works with IT and business partners to ensure identity security is factored into the selection and configuration of all new software and hardware.

• Preferred: BS or MA in Computer Science, Information Security, or related field. Relevant cyber security and/or identity certifications.
• Minimum of 7 years of experience in systems administration, automation, or technology architecture.
• Proficiency in Power Shell for automation and administrative tasks.
• Deep technical knowledge of Active Directory (AD) and directory services.
• Experience managing Privileged Account Management (PAM) tools (e.g., Cyber Ark, Beyond Trust, Keeper).
• Expertise in SSO Providers and Federation (e.g., One Login, Okta, SAML, OIDC).
• Knowledge of network security including VPN, Firewall, and web server security as it relates to identity.
• Experienced in working with compliance and regulatory program requirements (e.g., SOX, GLBA).
• Strong initiative and decision-making capabilities and the ability to communicate clearly with technical and non-technical stakeholders.

As one of the top mortgage lenders in the country, Pennymac has helped over 4 million lifetime homeowners achieve and sustain their aspirations of home. Our vision is to be the most trusted partner for home. Together, 4,000 Pennymac team members across the country are guided by our core values: to be Accountable, Reliable and Ethical in all that we do.

Pennymac is committed to conducting a business that makes positive contributions and promotes long-term sustainable growth and to fostering an equitable and inclusive environment, where all employees and customers feel valued, respected and supported.

• Comprehensive Medical, Dental, and Vision
• Paid Time Off Programs including vacation, holidays, illness, and parental leave
• Wellness Programs, Employee Recognition Programs, and onsite gyms and cafe style dining (select locations)
• Retirement benefits, life insurance, 401k match, and tuition reimbursement
• Philanthropy Programs including matching gifts, volunteer grants, charitable grants and corporate sponsor ships

To learn more about our benefits visit: (Use the "Apply for this Job" box below)./benefits

For residents with state required benefit information, additional information can be found at:

Individual salary may vary based on multiple factors including specific role, geographic location / market data, and skills and experience as defined below:

• Lower in range - Building skills and experience in the role
• Mid-range - Experience and skills align with proficiency in the role
• Higher in range - Experience and skills add value above typical requirements of the role

Some roles may be eligible for performance-based compensation and/or stock-based incentives awarded to employees based on company and individual performance.

$95,000 - $155,000

OFFICE