Staff Identity Engineer
Reports to: Senior Manager Enterprise Security and Identity & Access Management
Staff Identity EngineerManagement (IAM)solutions. In this role, you will design, implement, andsecure identity architectures that enable seamless, resilient, and compliant access for our workforce and customers. You will drive key initiatives such asauthentication, privileged access management (PAM), and modern identity integrations, ensuring alignment with compliance frameworks likeSOC 2
Identity Architecture & Implementation
Design, implement, and support IAM solutions usingOkta,Auth0, and Identity Governance and Administration (IGA) tools.
Develop scalableCIAM
Lead the adoption ofpasswordlessand advancedMFAsolutions,leveragingprotocols likeOIDC,SAML, andSWA
Integrate andmaintainidentity systems withActive Directory,Entra ID (Azure AD), and other directories
Integration & Automation
Build andmaintainsecure integrations usingSCIM,REST APIs, and custom connectors.
Develop PowerShell scripts to automate user lifecycle management, access provisioning, and governance workflows.
Support seamless integration with cloud and SaaS applications
Security & Compliance
Define and enforce IAM policies and standards that align withFedRAMP,SOC 2, andSOXrequirements.
Develop robustPrivileged Access Management (PAM)controls and zero standing privilege models.
Partner with compliance and audit teams to support identity-related controls and evidence collection.
Operational Excellence
Serve as the SME for complex IAM issues, providing tier-3 level troubleshooting and incident resolution.
Lead upgrades, migrations, and adoption of emerging identity technologies, includingOkta Identity Engine (OIE)
Monitor system performance, availability, and security posture
Collaboration & Mentorship
Work closely with Security, Infrastructure, Cloud, and DevOps teams to ensure IAM solutions align with enterprise architecture and regulatory requirements.
Mentor junior engineers and promote IAM best practices across the organization.
Required Qualifications:
Technical Experience:
expertiseinOkta,Auth0,IGA,CIAM,PAM, andpasswordless
Strong understanding of identity protocols (OIDC,SAML,SWA,MFA
Hands-on experience integrating identity solutions withActive Directory,Entra, and hybrid cloud environments.
Solid experience developing automations withPowerShelland building custom integrations withREST APIs
Familiarity withSCIMand other identity lifecycle management standards.
Demonstrated knowledge of compliance frameworks (FedRAMP,SOC 2,SOX) as they relate to identity security.
Bachelor’s degree in Computer Science, Information Systems, Cybersecurity, or a related field — or equivalent relevant experience.
Certifications such asOkta Certified Professional,Okta Certified Consultant, or other identity-focused credentials are a plus.
Other Skills:
Proven ability to work independently in a fast-paced, regulated environment.
Excellent analytical, troubleshooting, and communication skills.
Strong collaborator and mentor with a passion for identity security.
The Job Description is intended to be a general representation of the responsibilities and requirements of the job. However, the description may not be all-inclusive, and responsibilities and requirements are subject to change.
The annual base pay for this position is: $199,952.00 - $299,928.00משרות נוספות שיכולות לעניין אותך