IAM Engineer - Access Management

The Identity and Access Management (IAM) Engineer III focuses on the development and enhancement of IAM products such as Okta, , and JIT software. The engineer assists the team in planning, designing, and implementing solutions while ensuring security best practices and client needs are met.

Location:

Candidates must be located in the Pacific, Mountain, or Central Time Zones. The position may be remote within the US, but onsite visits for interviews or onboarding may be required.

• Assist in planning, designing, developing, and implementing IAM products such as Okta, , and JIT (Just in Time) software.
• Support the analysis and implementation of authorization methods, including RBAC, ABAC, PBAC, role management, lifecycle management, separation of duties (SOD), and access certifications.
• Configure, integrate, and tailor existing IAM products to address business problems or meet client requirements.
• Review IAM technical white papers and provide guidance to the team on future offerings.
• Manage identity lifecycle events, including access certifications, assigning permissions, deleting accounts, and making role changes.
• Perform integrations with directories (cloud and on-prem) and cloud platforms (AWS, GCP, Azure).
• Align business needs with technology and standards related to identity creation, deletion, vaulting, and password management.
• Create and update metrics, automating data collection and aggregation.
• Build automation using Power Shell scripts, RPA, SQL, and other tools like Power Automate.
• Participate in information‑gathering meetings with clients to understand their needs, business goals, and desired outcomes.
• Provide coaching to peers and support business problem solving.
• Support IAM applications and train users.
• Automate processes and contribute to security initiatives.
• Perform other duties as assigned.

• Minimum 4 years of experience with Okta Administration, including workflow management.
• Minimum 2–3 years of experience managing  software.
• Minimum 2–3 years of experience with Just in Time (JIT) software.
• Bachelor’s degree in Computer Science, Information Technology, or Cybersecurity (preferred).
• CISSP, Google GCP, or CISA certifications (preferred).
• Experience with IAM concepts such as RBAC, ABAC, PBAC, and SOD (desirable).
• Knowledge of cloud platforms: AWS, GCP, and Azure (desirable).