Engineer, Identity & Access Management

Skechers•Manhattan Beach, CA

15h•$125,000 - $165,000

About The Position

The Identity and Access Management team at Skechers is part of the global information security program, ensuring authentication systems are designed and operated securely and that appropriate access is available when needed. The IAM Engineer helps design and operate authentication and authorization systems with a focus on security and efficiency. The role calls for a technical specialist with a broad understanding of threat actor tactics and deep expertise in authentication systems, helping evolve security capabilities in response to the changing threat environment. The successful candidate brings a genuine interest in information security, a passion for learning, a positive attitude, and curiosity. They will support and lead IAM initiatives, collaborate with stakeholders across the organization, and automate repeatable IAM tasks. The position’s stated pay range is $125,000–$165,000 per year.

Requirements

At least 5 years of hands-on experience with multiple authentication and authorization solutions and directory platforms.
At least 5 years of experience with identity security solutions such as CyberArk, Delinea, Duo, or Okta.
Hands-on experience with enterprise identity platforms such as Okta or Microsoft Entra ID.
Experience with and understanding of approaches to securing directory services such as Active Directory.
Experience with cloud infrastructure and familiarity with authentication systems in IaaS.
Deep understanding of authentication protocols such as NTLM, Kerberos, SAML, OIDC, FIDO2, and WebAuthn.
Understanding of general enterprise network and system components and their roles.
Familiarity with network and application protocols such as TCP/IP, HTTP, TLS, SSH, and DNS.
Understanding of modern cybersecurity concepts such as Zero Trust and just-in-time access provisioning.
Strong understanding of identity and access security implications of emerging technologies, such as agentic AI and MCP servers.
Awareness and understanding of current and emerging threats and attacker techniques.
Strong analytical and problem-solving skills.
Ability to work effectively in a fast-paced and rapidly changing environment.
Excellent communication skills and experience collaborating with diverse stakeholders.
Proven ability to take ownership of tasks and responsibilities.
Reliable, self-reliant contributor with a strong work ethic.

Nice To Haves

GIAC, (ISC)2, or similar security certification.
Exposure to or working knowledge of identity providers and IGA solutions.

Responsibilities

Assist with designing and implementing security-focused IAM solutions, including PAM, MFA, JIT, and vaulting.
Use knowledge of threat actor techniques and technical solutions to guide and develop requirements for secure authentication methods.
Continuously evaluate and modernize authentication systems and processes by researching and participating in pilots of emerging technologies.
Develop and improve joiner, mover, and leaver workflows, including access requests, approvals, provisioning, and timely access removal, in partnership with process and system owners.
Identify risks and potentially weak configurations in existing environments and in proposed solutions and implementations.
Contribute to or lead projects involving core authentication systems and secure authentication initiatives, including phishing-resistant and risk-based authentication.
Collaborate with business and technology stakeholders, infrastructure, cloud, application development, and other teams to promote security and consistency across the organization.
Help develop effective solutions to complex technical challenges through critical thinking and creativity.
Stay current on threat actor tools, techniques, and procedures, as well as emerging IAM capabilities.
Use scripting, APIs, and workflow tools to automate repeatable IAM tasks and improve integration reliability.