Identity & Access Management Engineer

Callaway Golf•Carlsbad, CA

About The Position

The Identity & Access Management Engineer is accountable for operating security controls and IAM processes while supporting audits and remediation. This role involves providing user account life cycle management, participating in projects and production support operations focused on implementing Identity and Access Management (IAM) integrations and Roles Based Access Control (RBAC) strategies, and managing daily operational activities for Active Directory (AD), Okta, and Azure (Entra). The engineer will reconcile discrepancies between assigned and required access rights, enforce organizational policies for information access, perform AD administration, integrate and onboard new applications with Okta/Azure for SSO and/or provisioning, and collaborate with application owners. The role also requires assisting as a resource in IAM project initiatives and supporting audits, assessments, and compliance reviews.

Requirements

2+ years of IAM experience
Knowledge in core IAM Domains: Identity Governance and Administration, RBAC, Kerberos, Privileged Access Management, Authentication, Authorization, Identity
Knowledge of Single Sign On, Multi Factor Authentication and authenticators, Adaptive MFA, Directory, API Access Management, application integration and configuration
Ability to work across multiple team settings and collaborate in the deployment of IAM technologies and processes.
Skilled at translating business needs into technical solutions and requirements.
Able to communicate effectively in both written and oral form with technical and non-technical audiences.
Skilled at managing competing priorities in a fast-paced environment and solving complex problems with durable solutions.
Able to produce clear, accurate documentation.
Able to work independently and as part of a team toward shared goals, taking initiative without close supervision.
Able to analyze complex or diverse information and make recommendations based on analysis.
Able to maintain a high degree of professionalism, confidentiality, and integrity at all times, and to evaluate risk versus reward when making decisions affecting the team or business outcomes.
Bachelor’s degree (B.A./B.S.), or an equivalent combination of education and experience
Minimum of 2 to 3 years of relevant experience.

Nice To Haves

advanced degree a plus
Relevant certification(s) completed or in progress, preferred or required based on the specific systems and business areas supported.

Responsibilities

Provide user account life cycle management, including creating, provisioning, securing, and inactivation of access.
Participate in projects and production support operations focused on implementing Identity and Access Management (IAM) integrations and Roles Based Access Control (RBAC) strategies and integrations.
Manage daily operational activities for Active Directory (AD), Okta and Azure (Entra).
For systems and software applications in scope for IAM Team, reconcile discrepancies between access rights assigned and access rights required for users to perform job duties.
Enforce organizational policies and procedures to ensure only authorized personnel have access to information in compliance with the Minimum Necessary Rules.
Perform AD Administration including managing users, groups, computers and GPOs.
Integrate and onboard new applications with Okta /Azure for SSO and/or provisioning.
Meet with application owners to troubleshoot issues or define a standard solution.
Assist as a resource in IAM project initiatives.
Ability to work across multiple team settings and collaborate in the deployment of IAM technologies and processes.
Support audits, assessments, and compliance reviews, and remediate findings within agreed timelines.