Enterprise identity and access management role at the center of securing employee access to applications, systems, and data
Hands-on role designing and maintaining persona-based RBAC across cloud and hybrid environments
Work extensively with Microsoft Entra ID, Active Directory, Okta, password management platforms, and hardware security keys
Support Zero Trust initiatives while improving reliability and reducing friction for end users
Responsibilities
Design, build, test, deploy, and maintain persona-based RBAC roles and access policies
Develop scalable application logic, automation, integrations, and workflows across Microsoft Entra ID and Okta
Configure and maintain application onboarding, SSO, SCIM, and identity automation using Microsoft Graph, Okta APIs, and related technologies
Develop PowerShell and/or Python scripts and tooling to automate role assignment, provisioning, reporting, and identity workflows
Maintain RBAC implementations as organizational structures, entitlements, applications, and access requirements evolve
Write, test, document, and review code in accordance with engineering standards, including unit testing and version control
Administer the enterprise password management platform, including vault structures, policies, group and SCIM provisioning, onboarding, offboarding, and upgrades
Manage the lifecycle of hardware security keys, including enrollment, provisioning, replacements, PIN resets, and recovery
Coordinate with asset management teams on security-key distribution, reclamation, replacement, and offboarding logistics
Monitor identity platform health, apply updates, work with vendors to resolve issues
Analyze authentication, authorization, and access data to support troubleshooting, audits, and continuous improvement
Investigate and resolve application access problems, authentication errors, and integration failures
Support end users and partner teams with identity-related requests, RBAC questions, and platform capabilities
Participate in on-call rotations and respond to identity platform incidents
Contribute to runbooks, knowledge articles, and technical documentation
Requirements
3+ years of IT engineering experience, including at least 1 year administering an enterprise password management platform; 1Password preferred, Keeper or Bitwarden also relevant
Hands-on experience with Active Directory, Microsoft Entra ID, and Okta, including application onboarding and SSO/SCIM configuration
Strong understanding of IAM concepts such as RBAC, SSO, SAML, OIDC, MFA, authentication, authorization, and access governance
Practical experience with hardware security tokens such as YubiKey, Google Titan, or Feitian
Scripting experience with PowerShell, Python, or both, ideally including Microsoft Graph automation and Entra ID application registrations
Working knowledge of ITIL or comparable change-management practices
Experience with cloud platforms, with Azure required and AWS strongly preferred
Familiarity with Git, CI/CD, code reviews, and modern software development practices
Exposure to privileged access management platforms such as CyberArk is strongly preferred
Strong troubleshooting, analytical, and practical decision-making abilities
Strong written and verbal communication skills
Security certifications or coursework such as CISSP, CISA, SC-300, AZ-900, Security+, or AI governance credentials are advantageous
Authorization to work in the United States for any employer
Conditions
Remote-first position within the United States, with hybrid flexibility available for employees located near designated offices
Full-time employment with occasional travel for in-person business activities
Hiring salary range of $128,000–$139,000, with compensation adjusted based on location, experience, qualifications, impact, and market data
Annual bonus opportunities and potential merit-based raises and promotions
Comprehensive benefits package
Opportunities for professional development and continued learning in IAM, cloud security, automation, and emerging technologies