Identity and Access Analyst, IAM

This is a fully remote position, open to applicants in Ireland.

📋 Description

• Take charge of the delivery of identity projects while collaborating with other teams on identity architecture decisions.

• Manage and enhance Okta environments, encompassing groups, group rules, policies, authenticators, and application integrations.

• Develop and sustain identity configuration as code using Terraform and CI/CD methodologies.

• Evaluate identity change requests submitted by fellow engineers.

• Design and implement secure self-service tools and automation adhering to Zero Trust principles, including Okta Workflows and scripted integrations.

• Ensure identity functions are auditable through configuration backups, change tracking, and logging into central systems.

• Design and automate identity lifecycle processes, managing transitions from joiner to mover to leaver, driven by the HR system of record.

• Facilitate the onboarding of applications onto the access request and just-in-time access platform.

• Address legacy groups, direct role assignments, and stale accounts according to established group naming and lifecycle standards.

• Collaborate with HR systems to oversee organizational changes impacting groups and access.

• Support identity federation across AWS, Azure, and Google Cloud platforms.

• Balance the need for security with business and user requirements to maintain accessible and secure access.

• Create comprehensive runbooks and documentation.

• Engage in an on-call rotation for identity services.

⛳️ Requirements

• Over 6 years of experience in operating and deploying Okta or a similar identity provider.

• Proficient in authentication protocols and systems, such as OIDC, SAML, SCIM, and AD or LDAP.

• Familiarity with access governance or JIT platforms like Lumos, SailPoint, or ConductorOne.

• Experience in building integrations and automation with web service APIs in Python, Go, or JavaScript.

• Knowledge of infrastructure as code, preferably Terraform, within a CI/CD environment such as GitHub, Spacelift, or Jenkins.

• History of collaborating with other teams on identity changes impacting numerous users.

• Expertise in securing automation that involves privileged access, including the separation of read and write functions and secrets management.

• A systematic approach to change and a consistent practice of documenting your work.

• Okta Certified Professional, Administrator, or Consultant certification may be considered an additional asset.

• Experience with Okta Workflows may also be viewed as an additional qualification.

• Familiarity with AWS IAM Identity Center or multi-account cloud access could be an added advantage.

• Experience in integrating an identity provider with an HR system such as Workday may be considered beneficial.

• Knowledge of Active Directory, RADIUS, OpenLDAP, or TACACS could count as an additional qualification.

• Experience in compliance-related projects, such as SOC 2 or SOX, may be a valuable asset.

• A fundamental understanding of Zero Trust architecture may also be regarded as an additional qualification.

• This position does not qualify for immigration sponsorship.

🏝️ Benefits

• Generous PTO Policy

• Unplugged Days supporting work-life balance

• Flexible WFH Policy

• Mental & Physical Wellness programs

• Phone and Internet Reimbursement program

• Access to Continued Career Development

• Comprehensive Benefits and Competitive Packages

• Paid Volunteer Time

• Employee Resource Groups