Lead Engineer, Identity Management

Sony Pictures Entertainment•Culver City, CA

About The Position

The Lead Engineer, Identity Management is responsible for the design, engineering, and operational excellence of Sony Pictures Entertainment’s enterprise Identity and Access Management (IAM) ecosystem, with a primary focus on Okta Identity Governance, Identity Lifecycle Management, Security Operations, and Identity Compliance. The role leads end-to-end engineering, configuration, and maintenance of the Identity Governance and Administration (IGA) platform to ensure secure, compliant, and efficient management of digital identities across user populations. It requires deep expertise in Okta governance, access, and lifecycle capabilities, along with the ability to establish identity standards and policies aligned with enterprise security and compliance objectives. The position provides ongoing support and request fulfillment for IAM platform services, and escalated support to internal application teams and IAM team members. It also analyzes emerging authentication technologies and designs and implements secure, intuitive, scalable, and reliable Access Management solutions for internal and external users. The role works with stakeholders and application teams, resolves escalated Okta issues, supports audit and compliance efforts, and contributes to ongoing improvements to SPE’s IAM program.

Requirements

Bachelor’s degree or equivalent applied experience.
At least 8 years of experience as an Identity Engineer, Architect, or in a similar role.
At least 8 years of direct experience building and engineering large-scale, enterprise-level IAM systems.
At least 6 years of experience implementing IAM solutions.
At least 5 years of software development experience, including developing web applications; experience in an agile SaaS environment is preferred.
Proven experience designing and managing Okta Identity Governance and Administration or equivalent enterprise IGA platforms.
Strong understanding of identity lifecycle automation, access governance, and compliance frameworks such as SOX.
Hands-on expertise with Okta Workflows for automating identity processes and integrations.
Experience integrating Workday or another HR system as a source of truth for identity lifecycle management.
Experience implementing security best practices such as least privilege, Privileged Access Management, and passwordless authentication.
Expertise in SSO, MFA, federation, and directory integration, including Active Directory, LDAP, and SCIM-based provisioning.
Hands-on scripting and automation experience, such as PowerShell, Python, or REST APIs, for identity orchestration.
Knowledge of emerging authentication technologies and protocols.
Critical thinking, strategic planning, and process management skills.
Excellent written and verbal communication skills.
Excellent presentation and group dynamics skills.
Proven excellence in client and partner relationship management with senior IT leaders.
Proactive approach to finding solutions to complex problems.

Nice To Haves

Okta Certified Professional certification.

Responsibilities

Lead the design, implementation, and operations of the Okta IGA platform, including Joiner–Mover–Leaver lifecycle management, access governance, and compliance controls.
Partner with business and security stakeholders to develop and enforce identity governance policies that meet corporate, regulatory, and audit requirements.
Oversee access certification campaigns, entitlement reviews, and identity attestation processes to maintain least-privilege access and compliance.
Develop architecture, standards, design, and implementation documentation.
Manage directory services, including user provisioning, synchronization, and role-based access control (RBAC) models.
Participate in or lead troubleshooting and resolution of complex, high-severity incidents.
Plan and manage project tasks, schedules, and resources for Identity Access Management services.
Provide technical expertise to application teams on IAM and governance, including SSO, MFA, identity federation, lifecycle management, enterprise directory architecture and design, and resource provisioning.
Work with internal and external application support teams to extend use of SPE’s enterprise IAM solutions through the Okta platform.
Identify and evaluate complex business and technology risks, related internal controls, and opportunities to improve internal controls.
Install, integrate, and deploy Identity Management solutions.
Communicate technical and functional aspects of IAM products and implementations to internal users and external partners, as appropriate.
Work with the IAM team to enhance SPE’s ongoing IAM program.
Support audit findings, compliance adherence, and organizational change efforts.
Resolve Okta system issues escalated within the service level agreement.