Назад
Company hidden
6 дней назад

Lead Platform Engineer (Identity & Access)

204 800 - 290 000$
Формат работы
remote (только USA)
Тип работы
fulltime
Грейд
lead
Английский
b2
Страна
US
Вакансия из списка Hirify.GlobalВакансия из Hirify RU Global, списка компаний с восточно-европейскими корнями
Для мэтча и отклика нужен Plus

Мэтч & Сопровод

Для мэтча с этой вакансией нужен Plus

Описание вакансии

Текст:
/
TL;DR
Lead Platform Engineer (Identity & Access) (Okta): Owns the architecture, governance, and automation of workforce identity and access using Okta as the core platform, with an accent on lifecycle automation, application onboarding, and least-privilege access. Focus on designing resilient identity controls, governing non-human identities and AI agents, responding to identity incidents, and integrating security telemetry.

Location: Remote-first (United States)

Salary: $204,800–$290,000 base annual compensation across geographic zones, plus eligibility for a company-wide bonus program.

Company

hirify.global is an agentic web marketing platform that helps modern marketing teams build, manage, and optimize high-performing web experiences.

What you will do

  • Own the architecture and roadmap for workforce identity, with Okta as the core platform, including build-versus-buy decisions.
  • Establish Okta management standards covering configuration, hardening, change control, and configuration as code using Terraform, APIs, Okta Workflows, or scripts.
  • Automate joiner-to-leaver identity lifecycle processes using the HRIS as the source of truth and SCIM for downstream applications.
  • Build application onboarding paths with standard SSO patterns, provisioning templates, and federated access to cloud and source control platforms.
  • Design RBAC, least-privilege controls, access requests and approvals, access reviews, phishing-resistant MFA, device trust, and risk-based access.
  • Respond to identity incidents and outages, provide critical-service on-call coverage, conduct post-incident reviews and log analysis, stream identity telemetry to Security, and manage the Okta vendor relationship, licensing, and cost.

Requirements

  • At least 8 years of experience in identity, platform, or infrastructure engineering, including ownership of a workforce identity platform at meaningful scale.
  • Deep hands-on experience architecting an enterprise identity provider; Okta is strongly preferred.
  • Fluency in SAML, OIDC, OAuth 2.0, and SCIM, including debugging at the token and assertion level.
  • Experience with identity governance, RBAC design, HRIS-driven lifecycle automation, and audit requirements.
  • Strong knowledge of Zero Trust, identity-based attacks, device trust, and security of non-human identities.
  • Scripting ability in Python, JavaScript, or a similar language, plus infrastructure-as-code experience such as Terraform.
  • Clear communication with senior and executive audiences and the ability to drive architecture decisions.
  • Ability to influence Security, HR, and application owners, mentor others, and serve as the lead identity expert.
  • Ability to use AI tools with good judgment and proactively build fluency in emerging technologies.

Nice to have

  • Experience governing identities for AI tools and agents.
  • Okta certifications.

Culture & Benefits

  • Remote-first, full-time, permanent, exempt position with flexible vacation, paid holidays, and a sabbatical program.
  • Equity through RSUs and eligibility for the annual WIN bonus program.
  • Medical, dental, and vision coverage for full-time employees and dependents, with most premiums covered.
  • Paid parental leave, family-planning support, mental-health resources, therapy, and coaching.
  • 401(k) with a 100% employer match up to $6,000 per year in the U.S., plus localized work and wellness stipends.
  • Values include customer trust, teamwork, reinvention, and end-to-end ownership.

Hiring process

  • Applications are accepted on an ongoing basis until the position is closed and filled.
  • The position is new and reports to the Senior Director of Information Technology.

Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →