Назад
Company hidden
1 день назад

Senior IAM Cybersecurity Engineer, Enterprise Identity (AI)

159 600 - 239 400$
Формат работы
hybrid
Тип работы
fulltime
Грейд
senior
Английский
b2
Страна
US
Вакансия из списка Hirify.GlobalВакансия из Hirify Global, списка международных tech-компаний
Для мэтча и отклика нужен Plus

Мэтч & Сопровод

Для мэтча с этой вакансией нужен Plus

Описание вакансии

Текст:
/
TL;DR
Senior IAM Cybersecurity Engineer, Enterprise Identity (AI): Designing and leading enterprise User Access Review programs across IAM, IGA, ILM, and PAM systems with an accent on automation, least privilege, compliance, and AI/ML-driven risk analysis. Focus on building certification workflows, integrating Zero Standing Privileges and Just-In-Time provisioning, and producing audit-ready evidence for SOX, SOC 2, and ISO 27001.

Location: Reston, Virginia, United States; additional locations in Atlanta, Georgia, and Pleasanton, California. Flex work with at least 50% of each quarter spent in the office or in the field.

Annual base salary: $159,600–$239,400 for the primary location; $144,400–$258,000 for additional US locations. The role may also be eligible for a bonus plan, commission or bonus, and annual refresh stock grants.

Company

hirify.global is a Fortune 500 technology company providing an AI platform for managing people, money, and agents.

What you will do

  • Design, architect, and run enterprise-wide User Access Review and access certification programs across cloud and on-premises environments.
  • Automate certification workflows, review cadences, entitlement cataloging, and remediation in IGA platforms.
  • Partner with auditors and internal stakeholders to align identity governance with SOX, SOC 2, and ISO 27001 and deliver audit-ready reporting.
  • Implement Zero Standing Privileges and Just-In-Time provisioning alongside periodic reviews to enforce least privilege and accelerate revocation.
  • Apply AI/ML to risk-based reviews, anomaly detection, automated revocation suggestions, threat detection, and access decisions.
  • Define secure requirements and architecture, evolve identity policies and procedures, and scale identity solutions as internal products across the organization.

Requirements

  • Bachelor’s degree or higher in Computer Science, Cybersecurity, Information Security, or a related field.
  • 7+ years of IT or information security experience, or 4+ years with a master’s degree.
  • Hands-on experience designing, launching, and managing enterprise-scale User Access Review and access certification campaigns.
  • Experience with Okta IAM and Workflows.
  • Deep expertise with IGA tooling, including Okta Identity Governance, SailPoint, or Saviynt, for automated UAR campaigns, entitlement cataloging, and remediation.
  • Familiarity with identity lifecycle management concepts, including source of truth.
  • Practical experience with regulatory compliance, audit readiness, and identity gap remediation.
  • Experience orchestrating complex certifications across heterogeneous systems, mapping entitlements, enforcing regulatory controls, and maintaining audit traceability.
  • Product mindset focused on user experience, reduced friction, and measurable adoption; sound risk-based judgment; and strong communication from engineers to the C-suite.
  • Experience building secure systems and applying AI/ML to risk scoring and access control.
  • Experience assessing and mitigating weaknesses in identity infrastructure and staying current on threats.
  • Knowledge of Zero Trust, identity management principles, MFA, SSO, SAML, OIDC, and LDAP.

Nice to have

  • CISSP or equivalent certification.

Culture & Benefits

  • Collaborative and supportive environment within the Enterprise Identity and Cyber Security functions.
  • Flex work combining in-person collaboration with remote flexibility.
  • Opportunity to work with partners across Business Technology, Product & Technology, Legal & Compliance, Internal Audit, and Security organizations.
  • Potential eligibility for a bonus plan or role-specific commission/bonus and annual refresh stock grants.
  • Reasonable accommodations are available during the application and employment process.

Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →