Senior Identity and Access Management Engineer

UFCU•Austin, TX

1d•Hybrid

About The Position

The Senior Engineer, Identity & Access Management designs, implements, and operates secure, scalable identity solutions across the enterprise. This hands-on senior engineering role helps protect UFCU's digital ecosystem by ensuring that users and systems have appropriate access to resources at the right time. This role partners with Information Security, Platform Engineering, Product Engineering, Infrastructure, and Application teams to embed identity and access controls into UFCU's platforms, applications, and workflows. The Senior Engineer, Identity & Access Management is an exempt position and reports to the Director, Information Security, and is part of the Information Security team at UFCU.

Requirements

Advanced knowledge of Identity Lifecycle Management and Zero Trust principles.
Advanced knowledge of modern authentication and federation standards, including Security Assertion Markup Language, OAuth 2.0, OpenID Connect, mutual Transport Layer Security, JSON Web Token, and Fast Identity Online 2.
Familiar with IAM requirements for Payment Card Industry Data Security Standard (PCI-DSS).
Configuring and administering IAM platforms, such as Microsoft Entra, Okta, Sailpoint, and Savyint.
Experience with administering conditional access and privileged access policies.
Familiarity with supporting SecDevOps integration efforts for IAM controls validation.
Scripting and automation using PowerShell, Python, and Microsoft Graph.
Ability to diagnose complex identity issues, evaluate technical tradeoffs, and develop secure, supportable solutions.
Ability to drive change-management efforts for identity and access management adoption and transformation.
Ability to lead and influence cross-functional stakeholders without direct authority.
Ability to mentor and share knowledge with engineers, business partners, and executives.
4+ years experience in IAM architecture or engineering
Experience managing non-human identities at-scale.
Bachelor’s degree in computer science, cybersecurity, engineering, or a related field or equivalent years of experience
Must be bondable.

Nice To Haves

Experience in financial services, fintech, credit unions, or another regulated industry.
2+ years in an operations or administration capacity
Familiarity with Gramm-Leach-Bliley Act, National Credit Union Administration, and Federal Financial Institutions Examination Council cybersecurity guidance.
Relevant certification, such as Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), or Certified Cloud Security Professional (CCSP).

Responsibilities

Design, implement, and support enterprise identity and access management solutions across workforce, Member, third-party, and non-human identities, including service accounts, workload identities, and artificial intelligence agents.
Engineer secure authentication and authorization mechanisms, including single sign-on, multifactor authentication, passwordless authentication using Fast Identity Online 2 and passkeys, credential sharding, including conditional and risk-based access schemas.
Implement and maintain role-based access control and attribute-based access control aligned with least privilege, least agency, and separation-of-duties principles.
Support the key management program, including certificate lifecycle management, secrets management, and application programming interfaces and model context protocol (MCP) client and server access.
Embed identity controls and secure protocols into continuous integration and continuous delivery pipelines, Infrastructure as Code, and modern application architectures.
Deploy and manage leading-edge Identity Governance and Administration platforms.
Conduct access certifications for regulatory compliance and manage access-request workflows, entitlement management, and role-lifecycle governance.
Develop centralized, cross-team processes and procedures related to all joiner, mover, and leaver activities.
Implement and manage Privileged Access Management solutions using just-in-time and just-enough-access models; monitor and audit privileged activity and session recording.
Deploy Identity Threat Detection and Response capabilities; monitor identity-related threats and anomalous behavior and integrate identity threat signals with security information and event management, security orchestration, automation, and response, and incident-response workflows.
Design and maintain highly available identity and access management infrastructure with disaster-recovery capabilities, including redundancy, failover mechanisms, and break-glass access protocols.
Align identity and access management controls with the National Institute of Standards and Technology Cybersecurity Framework 2.0 and applicable National Credit Union Administration, Gramm-Leach-Bliley Act, Federal Financial Institutions Examination Council, System and Organization Controls 2, and Payment Card Industry Data Security Standard requirements.
Provide audit evidence, documentation, and control explanations for internal and external audits; continuously assess and improve identity and access management controls to reduce identity-related risk.
Implement privacy-by-design principles in identity architectures, including data minimization, and support privacy impact assessments.
Support the development and maintenance of a multi-year identity and access management strategy and roadmap aligned with organizational objectives, regulatory requirements, and Zero Trust maturity progression.
Present identity risk posture, architecture decisions, and compliance status to the Director, Information Security, executive leadership, and audit committees using business-focused risk language.
Lead and facilitate identity governance activities with stakeholders from Technology, Information Security, Risk Management, Human Resources, Legal, Compliance, and business units.
Evaluate emerging identity technologies, conduct total-cost-of-ownership analysis for platform investments, and lead vendor selection, requests for proposal, and proof-of-concept evaluations.
Partner with application, infrastructure, and product teams to design secure access patterns and educate teams on identity and access management best practices and regulatory requirements.
Adheres to all company policies, procedures, and business ethics codes.
Completes required regulatory training as assigned.
Maintains strict adherence to and compliance with all laws, rules, regulations, and internal controls specific to the role, including but not limited to Bank Secrecy Act, Anti-Money Laundering, USA Patriot Act, Office of Foreign Assets Control, and Fair Lending regulations.