Senior Workforce IAM Engineer

College Board • New York, NY

3d • $153,000 - $166,000 • Remote

About The Position

The Senior Engineer on College Board’s Workforce Identity and Access Management (WIAM) team is a hands-on identity engineer who owns the Governance and Compliance pillar and is accountable for its goals. The pillar governs access and identities in the IGA platform across human, service, and AI agent identities, including access reviews, security attestations, account reviews, least-privilege enforcement, segregation of duties, and account ownership and accountability. The engineer ensures reviewer access data is accurate and understandable, reviews run on schedule, and each review produces clear, auditable evidence. The role administers and facilitates review implementation, advising on feasibility, scheduling, notifications, communications, evidence, and platform capabilities. It also includes integrating AI agents into the IGA platform with defined owners, lifecycle states, and reviewable access while minimizing business impact when access is removed.

The engineer shares day-to-day identity engineering across the WIAM team’s applications, including AD, Entra ID, Okta OIG, CyberArk, and 1Password. Work includes access provisioning, identity management, application and integration setup, automation development and maintenance, and vault maintenance. The role applies governance and audit considerations across these activities and directs and reviews governance work performed by other engineers.

The WIAM team owns College Board’s workforce identity lifecycle and operates platforms for authentication, authorization, identity governance, and privileged access management. It partners with Talent, ISGRC, security peers, and other stakeholders to provide reliable, auditable identity services aligned with Zero Trust principles.

Requirements

• At least 5 years of identity and access management and/or security engineering experience, including hands-on work with Active Directory, Entra ID, and Okta.
• Experience designing and running access reviews, certifications, or attestation campaigns at scale, including scoping, reviewer assignment, remediation, closure, and delivery of evidence to auditors.
• Working knowledge of policy and compliance frameworks such as NIST, and ability to translate framework guidance into practical control requirements.
• Hands-on production experience with Okta, especially Okta Identity Governance and Okta Workflows.
• Experience with agentic AI governance, treating agents and workload identities as governed identities with owners, lifecycle states, and certifiable access.
• Grounding in identity and access standards including SAML, OIDC, OAuth 2.0, and SCIM, and in role- and attribute-based access control, SSO, MFA, and least privilege.
• Secure-by-design mindset, including checking a system’s actual state rather than relying only on configuration displays and tracing data back to its source record.
• Strong written communication and ability to explain controls to people outside identity engineering, while considering business and end-user perspectives.
• Passion for expanding educational and career opportunities and mission-driven work.
• Authorization to work in the United States for any employer.
• Curiosity and enthusiasm for emerging technologies, willingness to experiment with and adopt AI-driven solutions, and ability to learn and apply digital tools independently and proactively.
• Clear and concise written and verbal communication skills.
• Learner’s mindset, commitment to growth, openness to diverse perspectives and feedback, and continuous improvement through iterative learning and user input.
• Drive for impact and excellence, including solving complex problems, making data-informed decisions, prioritizing effectively, and improving through learning, user input, and external benchmarking.
• Collaborative and empathetic approach, ability to work across differences, foster trust, and contribute to shared success.

Nice To Haves

• Experience as an IT auditor or in a GRC function, testing controls over identities, provisioning, and access.
• Enterprise security certifications or recent coursework, such as CISSP, CISA, CRISC, Okta certifications, or similar.
• Working understanding of defense in depth and how to implement layered controls in practice.

Responsibilities

• Plan and forecast the annual Okta review cycle, balancing recurring reviews and new work against team capacity, compliance needs, and audit deadlines.
• Design, configure, launch, monitor, and close access reviews, account reviews, and security attestations in Okta for human, service, and AI agent identities.
• Bring new account types into recurring reviews as they enter scope.
• Run the annual user access review from scoping and reviewer assignment through remediation, closure, and delivery of the auditor reporting package.
• Fulfill internal and external audit evidence requests by agreed deadlines.
• Verify requirements and review data before launch, and raise identified issues with the review owner.
• Maintain job guides and documentation so other engineers can run review cycles correctly.
• Partner with Security, Risk, Audit, Technology, business teams, AI governance stakeholders, and Risk Engineering to translate requirements into workable identity controls.
• Keep WIAM practices aligned with College Board information security policy; track policy changes and identify required practice updates.
• Integrate AI agent identities into the IGA platform with defined owners, lifecycle states, and reviewable access.
• Define AI agent ownership and accountability, including changes in agent purpose or ownership.
• Include AI agents in access reviews and least-privilege enforcement alongside human and service accounts.
• Govern AI tools’ and agents’ access to College Board systems and data, including access scope, approvals, reviews, and revocation.
• Build and operate reusable attestation flows for AI tools as the organization adopts them.
• Contribute to day-to-day identity engineering, including onboarding, offboarding, access requests, provisioning, identity management, application integrations, automation, and vault maintenance.
• Direct and review governance pillar work performed by other engineers and remain accountable for outcomes.
• Establish and maintain named ownership and defined lifecycle states for human, service, and workload identities, extending to API identities as they come into scope.
• Enforce least privilege and document and track exceptions.
• Monitor and correct unintended differences between approved and actual entitlements across centralized applications.
• Automate control enforcement and evidence using Okta Workflows and platform APIs.
• Measure controls against frameworks such as NIST, identify gaps, and propose remediation.
• Report on control enforcement using documented, traceable data.
• Analyze access and entitlement data for troubleshooting, audits, and continuous improvement.
• Participate in the on-call rotation, respond to identity platform incidents, and follow established escalation procedures.

Benefits

• Competitive compensation; hiring range of $153,000–$166,000, with salary dependent on location, experience, and qualifications.
• Comprehensive package intended to support employees.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed