Senior/Lead - Cyber Security - IAM Engineer - Identity and Governance

FICO

1d•$119,000 - $187,000•Remote

About The Position

As a Lead IAM Engineer on the Trust - Cybersecurity IAM team, you will help define how FICO manages trust and access across the enterprise. The identity architecture decisions this team makes today will shape the security posture of the company for years to come. You will design and implement modern, cloud-based IGA platform capabilities that scale across the enterprise.

Requirements

In-depth hands-on experience with IGA platforms such as SailPoint or Saviynt.
Strong experience with identity infrastructure including Active Directory, Entra ID, AWS IAM, Okta, and RHIM.
Good working knowledge of federation and access protocols: SAML, SSO, SCIM, LDAP, RADIUS, Kerberos, and MFA/FIDO2 passkeys.
Extensive hands-on experience with AWS Cloud Platform and good scripting and automation skills with Python.
Security analysis experience applying Segregation of Duties and Least Privilege principles.
Experience automating identity processes tied to HRIS systems.
Bachelor’s degree in computer science, Cyber Security, Information Technology, or a related field or relevant experience.

Nice To Haves

PAM, ITDR, and NHI tooling (CyberArk, Hashi Corp, Delinea, Clutch) are highly desired.
Certificate management, PKI experience, and familiarity with post-quantum cryptography concepts are a plus.
Relevant certifications (SANS, AWS Certified Security) are a plus.

Responsibilities

Design and implement modern, cloud-based IGA (Identity Governance and Administration) platform capabilities that scale across the enterprise.
Partner across Cybersecurity and with business and technology leaders to shape FICO's Identity engineering strategy, including human and non-human identity domains.
Implement and support identity-based platforms, systems, and programs spanning governance, privileged access, and federation.
Evaluate identity services on an ongoing basis and drive recommendations that close governance gaps and reduce risk exposure.
Guide engineering decisions using observed access patterns and behavioral data to strengthen Segregation of Duties and Least Privilege enforcement.