Senior Workforce IAM Engineer

This is a fully remote position, open to applicants in United States.

📋 Description

• Take ownership of the Governance and Compliance aspect of the College Board's Workforce Identity and Access Management team.

• Plan and anticipate the annual review cycles for Okta.

• Design, set up, launch, monitor, and conclude access reviews, account assessments, and security attestations.

• Conduct annual user access evaluations, managing the process from scoping and assigning reviewers to remediation, closure, and reporting to auditors.

• Address requests for evidence from both internal and external auditors.

• Confirm review requirements and data accuracy prior to launch.

• Maintain job guides and documentation related to review cycles.

• Collaborate with Security, Risk, Audit, Technology, business units, and AI governance teams.

• Ensure WIAM practices are in alignment with the College Board's information security policies.

• Integrate AI agent identities into the IGA platform, including ownership, lifecycle states, and reviewable access.

• Establish models for AI agent ownership and lifecycle accountability.

• Oversee AI agent access and develop attestation processes.

• Conduct identity engineering throughout onboarding, offboarding, access requests, application integrations, vaults, and automation.

• Lead and review governance efforts executed by other engineers.

• Define account ownership and lifecycle states for human, service, workload, and API identities.

• Enforce the principle of least privilege and monitor exceptions.

• Track and rectify discrepancies between approved entitlements and actual access rights.

• Utilize Okta Workflows and platform APIs to automate enforcement and evidence gathering.

• Measure controls against NIST standards and recommend enhancements.

• Provide reports on control enforcement with traceable data.

• Analyze access and entitlement data for troubleshooting, audits, and ongoing improvements.

• Participate in the on-call rotation for the identity platform and adhere to escalation procedures.

⛳️ Requirements

• 5+ years of experience in identity and access management and/or security engineering.

• Practical experience with Active Directory, Entra ID, and Okta.

• Proven experience in designing and executing access reviews, certifications, or attestation campaigns at scale.

• Familiarity with scoping, assigning reviewers, remediation, closure, and delivering auditor evidence.

• Working knowledge of NIST and related policy and compliance frameworks.

• Hands-on experience with Okta Identity Governance and Okta Workflows in a production environment.

• Knowledge in agentic AI governance, including management of ownership, lifecycle states, and certifiable access.

• Understanding of SAML, OIDC, OAuth 2.0, SCIM, role- and attribute-based access control, SSO, MFA, and least privilege principles.

• Secure-by-design mindset with the ability to verify actual system states and trace data back to source records.

• Excellent written communication skills with the ability to articulate identity controls to non-specialists.

• Authorized to work in the United States for any employer.

• A passion for enhancing educational and career opportunities through mission-driven work.

• Curiosity and enthusiasm for emerging technologies and AI-driven solutions.

• Strong written and verbal communication abilities.

• A learner's mindset and commitment to personal growth.

• A collaborative and empathetic approach in team settings.

• Preferred: Experience in IT auditing or Governance, Risk, and Compliance (GRC).

• Preferred: Relevant enterprise security certifications or recent coursework, such as CISSP, CISA, CRISC, or Okta certifications.

• Preferred: Understanding of the defense-in-depth strategy.

🏝️ Benefits

• Fully remote or hybrid working options for candidates residing near College Board offices (in-office on Tuesdays and Wednesdays).

• Occasional business travel for in-person meetings.

• Comprehensive compensation and benefits package.

• Salaries adjusted based on location.

• Open discussions regarding compensation and benefits throughout the hiring process.