Senior Engineer, Workforce IAM

This is a fully remote position, open to applicants in United States.

📋 Description

• Develop repeatable identity blueprints for mergers, acquisitions, and divestitures.

• Oversee cross-domain identity consolidation involving Okta, Entra ID, Ping, and various enterprise directories.

• Create cross-cloud federation, B2B collaboration frameworks, and governance for tenant boundaries.

• Direct IAM discovery, identity migration, and system consolidation for newly acquired organizations.

• Establish enterprise IAM architecture standards, patterns, and reference blueprints.

• Assess third-party integration patterns and vendor Statements of Work.

• Design hybrid and multi-cloud IAM bridges across Active Directory, ADFS, GCP, AWS, Azure/Entra ID, Okta, and SailPoint.

• Define Zero Standing Privilege and Just-In-Time access patterns utilizing PAM and CIEM.

• Investigate and incorporate Non-Human Identity Management, Identity Security Posture Management, and AI security controls.

• Create HRMS integrations with Workday, SuccessFactors, and PeopleSoft.

• Develop RBAC/PBAC access models and automated Segregation of Duties frameworks.

• Architect specialized authentication solutions for nuclear pharmacies, manufacturing facilities, and distribution centers.

• Design self-service access monitoring features for people leaders.

• Establish self-healing provisioning patterns and SailPoint connectors.

• Automate joiner, mover, leaver lifecycle events and request-based provisioning.

• Build API-driven automations and implement infrastructure-as-code for IAM configurations.

• Ensure IAM adherence to GDPR, HIPAA, SOX, and internal security policies.

• Design, implement, and maintain SSO, identity lifecycle management, IGA, and PAM solutions.

• Collaborate with Information Security, IT Operations, HR, and Application Development teams.

• Create technical documentation and uphold IAM best practices.

• Mentor junior team members.

⛳️ Requirements

• Bachelor's degree in Computer Science, Information Technology, Information Security, or a related field, or equivalent hands-on experience.

• Over 10 years in Information Security and Identity Management.

• Minimum of 5 years in a Lead or Principal Enterprise IAM Architect role within a Fortune 500 or hyper-scale enterprise preferred.

• Profound theoretical and practical knowledge of OAuth 2.0, OpenID Connect (OIDC), SAML 2.0, SCIM 2.0, FIDO2/WebAuthn, and Kerberos.

• Established architectural authority in Microsoft Entra ID, Okta, SailPoint IdentityIQ / Identity Security Cloud, CyberArk, and HashiCorp Vault.

• Proven track record in leading identity discovery, tenant consolidation, and domain migration initiatives across complex, multi-entity corporate frameworks.

• Understanding of SOX 404 ITGC controls, HIPAA Security Rule, and international data sovereignty regulations.

• Exceptional communication skills and stakeholder management abilities.

• Capability to translate cryptographic and identity concepts into clear business risk assessments.

• Proficient in managing multiple priorities and meeting stringent deadlines in a dynamic M&A setting.

• Flexibility to adapt to evolving IAM technologies and security threats.

🏝️ Benefits

• Eligible for bonuses.

• Comprehensive medical, dental, and vision coverage.

• Paid time off plan.

• Health savings account (HSA).

• 401k savings plan.

• Access to wages before pay day with myFlexPay.

• Flexible spending accounts (FSAs).

• Short- and long-term disability coverage.

• Work-Life resources.

• Paid parental leave.

• Healthy lifestyle programs.