Senior Cybersecurity Engineer

Lumiere Systems•Phoenix, AZ

About The Position

We are seeking a highly skilled Senior SaaS / Identity Engineer to design, implement, and manage enterprise-grade identity and SaaS automation solutions. This role focuses on Identity & Access Management (IAM), DevOps automation, and SaaS ecosystem integration, ensuring secure, scalable, and efficient user lifecycle management across both cloud and on-premise environments. You will play a key role in architecting automation frameworks, enhancing identity workflows, and improving operational efficiency across a diverse application landscape.

Requirements

8+ years of experience in Identity & Access Management, SaaS administration, or DevOps automation
Strong expertise in IAM platforms, especially Okta
Hands-on experience with SAML, OIDC, SCIM, and modern authentication protocols
Hands-on experience with enterprise identity integrations
Advanced scripting experience in Python, Bash, PowerShell, Java
Deep knowledge of networking and integration protocols: LDAP, RADIUS, REST, SOAP, HTTP(S), SSH, SFTP
Experience building automation using APIs and workflow engines
Strong understanding of security best practices and identity governance
Authorized to work in the United States on a full-time basis without the need for current or future visa sponsorship.

Nice To Haves

Experience with cloud platforms (Azure, GCP, AWS IAM)
Familiarity with Zero Trust security models
Previous experience with enterprise-scale automation and DevOps pipelines
Knowledge of log analytics and SIEM/XDR tools
Okta Certified Professional / Administrator
Certified Identity and Access Manager (CIAM)
Cloud certifications (Azure/AWS/GCP)

Responsibilities

Manage and administer enterprise SaaS and on-premise applications supporting multiple business units.
Design and maintain user provisioning and deprovisioning workflows, ensuring compliance and security.
Implement and manage SAML SSO, MFA/2FA, and Identity Federation solutions across platforms.
Configure and maintain IAM integrations for applications such as Okta, Google Workspace (G-Suite), Azure AD, SAP, ADP, Concur, and others.
Architect and develop automation tools to streamline user lifecycle management, identity access workflows, and SaaS application onboarding and integration.
Build and maintain DevOps pipelines and toolchain improvements for IAM operations.
Develop automation using scripting languages such as Python, Bash, PowerShell, and Java.
Use APIs, webhooks, and event-driven architecture to integrate systems and workflows.
Design and implement IAM solutions leveraging OIDC, SAML, SCIM, and modern authentication protocols, secure token handling and lifecycle management.
Configure and manage advanced Okta capabilities including Okta Access Gateway (OAG), Device Trust, Adaptive MFA (AMFA), Desktop SSO (DSSO), Okta Workflows and API automation, and Okta Expression Language.
Analyze dependencies and design robust solutions integrating multiple SaaS and on-prem systems.
Build and maintain integrations using REST/SOAP APIs, LDAP, RADIUS, SFTP, SSH, and data formats such as JSON, XML, YAML.
Utilize synchronization tools including GAM/GADS (Google), Okta APIs, Okta Workflows, Google APIs.
Develop security analytics and reporting using Python (Pandas), log aggregation tools such as Sumo Logic, and XDR query frameworks.
Monitor system health, user activity, and identity risks.
Partner with senior leaders, operations teams, and cross-functional stakeholders to deliver scalable SaaS solutions.
Act as a technical advisor on IAM and SaaS strategy.
Produce clear and comprehensive technical documentation including architecture diagrams, integration templates, runbooks and SOPs.
Develop training materials and provide knowledge transfer to operations/support teams.