Senior IAM Engineer
About The Position
The Senior IAM Engineer administers identity and access management end to end, including automated employee, contractor, and independent adjuster lifecycle processes driven by HRIS. The role manages access certifications and remediation to support least privilege, and implements just-in-time elevation for standing administrative access across Okta, AWS, and claims and payment platforms. The engineer identifies access anomalies, dormant account reactivation, and privilege escalation; investigates incidents and insider threats by reconstructing access timelines, scoping exposure, preserving evidence, and containing incidents. The position also automates IAM and audit preparation with Python, PowerShell, Okta Workflows, and APIs, and supports audits and assessments involving SOC 2, carrier clients, HIPAA, GDPR, state insurance data security requirements, and logical access controls. The role includes standardizing access practices and coaching business reviewers so access hygiene can scale.
Requirements
- At least 6 years in cybersecurity or a relevant role, including at least 4 years focused on identity and access management.
- Experience with an IGA platform; Okta is required.
- Experience using Rippling or a comparable modern HRIS as an identity source of truth.
- Deep hands-on Okta experience with SSO, SCIM, Lifecycle Management, workflows, and policy design.
- Strong understanding of SAML, OIDC, OAuth 2.0, MFA, and conditional access.
- Documented privileged access experience, including vaulting, just-in-time elevation, and credential rotation.
- Cloud IAM experience in AWS, including roles, policies, federation, and permission boundaries.
- Experience with RBAC and ABAC design, entitlement modeling, and separation-of-duties enforcement.
- Scripting and automation experience in Python or PowerShell against REST APIs.
- Bachelor’s degree in Cybersecurity, IT, or a related field.
- Ability to handle confidential work, such as investigations and separations, with discretion.
- Strong written and verbal communication skills.
- Experience working in a cloud-first or startup environment.
Nice To Haves
- Security+, Okta Certified Administrator, Okta Certified Consultant, or a relevant certification.
- Identity threat detection, Identity Security Posture Management, or insider threat program experience.
- Experience scaling IAM through high growth or surge onboarding.
Responsibilities
- Administer end-to-end identity lifecycle processes for employees, contractors, and independent adjusters, driven by HRIS.
- Manage access certifications, reviewer remediation, and evidence to assure least privilege.
- Assure standing administrative access through just-in-time elevation across Okta, AWS, and claims and payment platforms.
- Build and tune detection for access anomalies, dormant account reactivation, and privilege escalation.
- Investigate incidents and insider threats by reconstructing access timelines, scoping exposure, preserving evidence, and containing incidents.
- Automate IAM processes and audit preparation using Python, PowerShell, Okta Workflows, and APIs.
- Support SOC 2, carrier client assessments, HIPAA, GDPR, state insurance data security requirements, and logical access controls.
- Standardize IAM practices and mentor and coach business reviewers to scale access hygiene.
Benefits
- Generous health-insurance package with nationwide coverage, vision, and dental.
- 401(k) retirement plan with employer matching.
- Competitive PTO policy.
- Generous family leave policy after 8 months of continuous work.
- Work from anywhere.
- Apple laptop, large second monitor, and other quality-of-life equipment.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
