Senior Identity Governance Engineer

This is a fully remote position, open to applicants in United States.

📋 Description

• Develop and implement identity governance tools, automation processes, and design standards.

• Establish governance requirements and design patterns for access request workflows within privileged systems.

• Create role-based, time-sensitive, delegated, and just-in-time access workflows.

• Assess workflow utilization and identify any access-request bypasses.

• Set authentication and authorization standards for enterprise applications.

• Evaluate integrations concerning SSO, MFA, OIDC, SAML, SCIM, and least-privilege principles.

• Design authorization decisions, job-function role models, and entitlements for privileged data.

• Standardize entitlement data across applications in Veza.

• Develop and manage access review and lifecycle assurance tools for SOX ITGC, PCI DSS, SOC 1/2, and ISO 27001 compliance.

• Automate processes for joiners, movers, leavers, access reversion for leavers, HR reconciliation, and orphaned account detection.

• Enhance visibility into existing privileged access and encourage the adoption of PIM and JIT elevation strategies.

• Define the target-state governance architecture for Okta, Veza, and Lumos.

• Manage Veza, including its data-source integrations, policies, and alerts.

• Establish continuous identity monitoring and analytics for over-privileged accounts, shadow identities, dormant access, and identity drift.

• Automate remediation workflows with designated owners.

• Oversee service accounts, API keys, personal access tokens, and AI agents, focusing on ownership, rotation, and attestation.

• Provide identity evidence for audits and streamline evidence collection processes.

• Collaborate with engineering, security teams, system owners, and vendors for the implementation and adoption of identity governance practices.

⛳️ Requirements

• Minimum of 5 years of experience in identity and access management, with a focus on Identity Governance & Administration.

• Proficiency in identity and access engineering, including SSO, provisioning, directory services, or identity platform automation.

• In-depth knowledge of Joiner/Mover/Leaver lifecycle management, RBAC/ABAC, entitlement modeling, Separation of Duties, privileged access governance, and the Principle of Least Privilege.

• Capability to design and automate enterprise-scale access certification initiatives.

• Practical experience with Veza, Lumos, Okta, or similar contemporary IGA and identity discovery platforms.

• Background in managing an authorization graph platform like Veza.

• Familiarity with SSO, OIDC, SAML, SCIM, MFA, RBAC, and ABAC concepts.

• Demonstrated experience governing non-human identities in cloud-native environments such as AWS/GCP.

• Ability to interpret cloud IAM and secrets management configurations.

• Understanding of ISPM principles, identity drift, excessive entitlements, orphaned accounts, and misconfigurations.

• Skill in translating SOX ITGC, PCI DSS, SOC 2, and ISO 27001 standards into identity controls and audit-ready evidence.

• Comfortable engaging directly with both internal and external auditors.

• Proficient in a scripting language such as Python or Go.

• Experience with API integration.

• Familiar with workflow or low-code development tools.

• Ability to collaborate with security, engineering, system owner, and vendor teams.

🏝️ Benefits

• Flexible time off.

• Opportunities for learning and professional development.

• Comprehensive onboarding program.

• Leadership training available.

• Various programs and events.

• Bonusly reward system.

• Peer-nominated award opportunities.

• Company-sponsored medical, dental, and vision insurance.

• 100% employer-paid options and 90% coverage for dependents.

• Flexible Spending Account (FSA) and Health Savings Account (HSA).

• 401(k) matching program.

• Telehealth services, including One Medical memberships.

• Parental leave and related support.

• Up to $20,000 for fertility services, including IUI and IVF.

• Reimbursement for surrogacy and adoption expenses.

• On-demand maternity support through Maven Maternity.

• Free breast milk shipping service via Maven Milk.

• Pet insurance options.

• Access to legal advisory services.

• Financial planning tools available.

• Annual bonus opportunities.

• Equity options.

• Support for flexible and autonomous working arrangements.