Engineer, Identity & Access Management

Skechers•Manhattan Beach, CA

1d•$125,000 - $165,000

About The Position

The IAM Engineer is part of Skechers’ global information security program and helps ensure authentication and authorization systems are designed and operated securely and efficiently. The role supports evolving authentication capabilities in response to changing technologies and threats, applying knowledge of threat actor tactics and authentication systems. The successful candidate is curious, passionate about information security, eager to learn, and able to contribute positively to a rapidly changing environment.

Requirements

At least 5 years of hands-on experience with multiple authentication and authorization solutions and directory platforms.
At least 5 years of experience with identity security solutions such as CyberArk, Delinea, Duo, or Okta.
Hands-on experience with enterprise identity platforms such as Okta or Microsoft Entra ID.
Experience with and understanding of approaches to securing directory services such as Active Directory.
Experience with cloud infrastructure and familiarity with authentication systems in IaaS.
Deep understanding of authentication protocols, including NTLM, Kerberos, SAML, OIDC, FIDO2, and WebAuthn.
Understanding of general enterprise network and system components and their roles.
Familiarity with network and application protocols such as TCP/IP, HTTP, TLS, SSH, and DNS.
Understanding of modern cybersecurity concepts such as Zero Trust and just-in-time access provisioning.
Strong understanding of identity and access security implications of emerging technologies, such as agentic AI and MCP servers.
Awareness and understanding of current and emerging threats and attacker techniques.
Strong analytical and problem-solving skills.
Ability to excel in a fast-paced and rapidly changing environment.
Excellent communication skills and experience collaborating with diverse stakeholders.
Proven ability to take ownership of tasks and responsibilities.
Ability to contribute reliably and independently, with a strong work ethic.

Nice To Haves

GIAC, (ISC)2, or similar security certification.
Exposure to or working knowledge of identity providers and identity governance and administration (IGA) solutions.

Responsibilities

Assist with designing and implementing security-focused IAM solutions, including privileged access management (PAM), multifactor authentication (MFA), just-in-time (JIT) access, and vaulting.
Use knowledge of threat actor techniques and technical solutions to guide and develop requirements for secure authentication methods.
Continuously evaluate and modernize authentication systems and processes by researching and participating in pilots of emerging technologies.
Develop and improve joiner, mover, and leaver workflows, including access requests, approvals, provisioning, and timely access removal, in partnership with process and system owners.
Identify risks and potentially weak configurations in existing environments and in proposed or new implementations.
Contribute to or lead projects involving core authentication systems and secure authentication initiatives, including phishing-resistant and risk-based authentication.
Collaborate with business and technology stakeholders, infrastructure, cloud, application development, and other teams to advance security and consistency across the organization.
Help develop effective solutions to complex technical challenges through critical thinking and creativity.
Stay current on threat actor tools, techniques, and procedures and emerging IAM capabilities.
Use scripting, APIs, and workflow tools to automate repeatable IAM tasks and improve integration reliability.