aipythonterraformoauthoktaoidcrbacsamlscimidentity and access management
Вакансия из Hirify RU Global, списка компаний с восточно-европейскими корнями Для мэтча и отклика нужен Plus
Пожаловаться
Зарплата и рынок
Выше рынка
$205к-290к/год
$150к$170кмедиана$200к
По похожим ролям (28) ~ $170к/год
91
Крутая вакансия
развернуть
Чёткая ответственность за важную платформу управления доступом, сильный пакет льгот и зарплата выше рыночного ориентира делают вакансию привлекательной; главный нюанс - дежурства по критичным сервисам.
Кликните для подробной информации
ДежурстваАктуальные технологииВыше рынкаЧёткая зона ответственностиСильные льготы
Оценка от Hirify AI
Мэтч & Сопровод
Для мэтча с этой вакансией нужен Plus
Подключить Plus
Описание вакансии
Текст:
Hirify AI/Оригинал
TL;DR
Lead Platform Engineer (Identity & Access) (Okta): Owns the architecture, governance, and automation of workforce identity and access using Okta as the core platform, with an accent on lifecycle automation, application onboarding, and least-privilege access. Focus on designing resilient identity controls, governing non-human identities and AI agents, responding to identity incidents, and integrating security telemetry.
Location: Remote-first (United States)
Salary: $204,800–$290,000 base annual compensation across geographic zones, plus eligibility for a company-wide bonus program.
Company
hirify.global is an agentic web marketing platform that helps modern marketing teams build, manage, and optimize high-performing web experiences.
What you will do
Own the architecture and roadmap for workforce identity, with Okta as the core platform, including build-versus-buy decisions.
Establish Okta management standards covering configuration, hardening, change control, and configuration as code using Terraform, APIs, Okta Workflows, or scripts.
Automate joiner-to-leaver identity lifecycle processes using the HRIS as the source of truth and SCIM for downstream applications.
Build application onboarding paths with standard SSO patterns, provisioning templates, and federated access to cloud and source control platforms.
Design RBAC, least-privilege controls, access requests and approvals, access reviews, phishing-resistant MFA, device trust, and risk-based access.
Respond to identity incidents and outages, provide critical-service on-call coverage, conduct post-incident reviews and log analysis, stream identity telemetry to Security, and manage the Okta vendor relationship, licensing, and cost.
Requirements
At least 8 years of experience in identity, platform, or infrastructure engineering, including ownership of a workforce identity platform at meaningful scale.
Deep hands-on experience architecting an enterprise identity provider; Okta is strongly preferred.
Fluency in SAML, OIDC, OAuth 2.0, and SCIM, including debugging at the token and assertion level.
Experience with identity governance, RBAC design, HRIS-driven lifecycle automation, and audit requirements.
Strong knowledge of Zero Trust, identity-based attacks, device trust, and security of non-human identities.
Scripting ability in Python, JavaScript, or a similar language, plus infrastructure-as-code experience such as Terraform.
Clear communication with senior and executive audiences and the ability to drive architecture decisions.
Ability to influence Security, HR, and application owners, mentor others, and serve as the lead identity expert.
Ability to use AI tools with good judgment and proactively build fluency in emerging technologies.
Nice to have
Experience governing identities for AI tools and agents.
Okta certifications.
Culture & Benefits
Remote-first, full-time, permanent, exempt position with flexible vacation, paid holidays, and a sabbatical program.
Equity through RSUs and eligibility for the annual WIN bonus program.
Medical, dental, and vision coverage for full-time employees and dependents, with most premiums covered.
Paid parental leave, family-planning support, mental-health resources, therapy, and coaching.
401(k) with a 100% employer match up to $6,000 per year in the U.S., plus localized work and wellness stipends.
Values include customer trust, teamwork, reinvention, and end-to-end ownership.
Hiring process
Applications are accepted on an ongoing basis until the position is closed and filled.
The position is new and reports to the Senior Director of Information Technology.
Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →