Customer Identity and Access Management (CIAM) Engineer
State Employees' Credit Union
Raleigh, NC
Permanent
Full-time
2 months ago
If you are motivated and believe in the credit union philosophy of "People Helping People," join our team!The Customer Identity and Access Management (IAM) Okta security engineer is responsible for the implementation of our customer focused Okta control solutions, some of which include Lifecycle Management, Customer Identity Workflows, and Adaptive MFA. This person must be a strategic, thought leader and serve as technical expert to design and integrate enterprise IT assets. The candidate will oversee the design and development of the Okta solutions to adhere to applicable policies and comply with information security requirements while supporting the SECU IT transformation that is underway. Responsibilities also include working with IT teams to consult and implement Okta with appropriate access controls, along with creating and managing control design patterns that enable IT asset owners’ adoption of this enterprise control solution. This is a remote work opportunity, and the position is a direct report to the IAM team manager.Duties:Conduct configuration, administration, customization, and maintenance of a large Okta platform services environment.Configure and maintain custom rules, workflows, scripting, and automation processes within the Okta platform to create efficiencies for SECU.Develop working relationship with IT engineering resources to drive solution features adoption.Partner with Information Security (IS) and line of business (LOB) leadership to understand requirements, enterprise IT standards and other considerations that influence how IAM Okta control solutions and services should perform and operate.Develop control adoption templates for IT resources to understand and implement connections required for Okta.Review Okta platform to ensure the solution is optimized for the highest level of service and establish an ongoing practice to perform periodic reviews.Interpret policies and standards with InfoSec, Risk and Compliance teams, ensuring policies and standards are properly followed by IAM control solutions.Design and maintain flowchart diagrams, process workflows and standard documentation required to sustain the Okta platform.Promote security policies, standards, and best practices across the organization.Supports and resolved system incidents, problems, and changes.Train and mentor other team members on the use of the Okta platform.Requirements:Resident of NC, VA,TN, GA, or SC5+ years of hands-on experience with designing and building Okta control solution platforms.Experience with most common Okta connectors including Active Directory (AD), Azure AD, JDBC, exchange, mainframe, web service, and authoritative sources integration (such as Workday).Strong understanding of SSO/federated authentication methods (SAML, OIDC, OAuth) and related components coupled with SCIM and JIT provisioning.Experience with consultative and complex technical deployment projects, managing various stakeholder relationships.Experience with software development lifecycle (SDLC) and Agile development methodologies.3-5+ years of troubleshooting and investigating complex issues within a highly regulated and secure environment.Strong knowledge and experience with incident/problem management processes.Strong functional knowledge of MS Office Suite software products, Jira, and Confluence.Ability to collaborate and interact productively with team members and key stakeholders.Ability to effectively communicate complex and technical issues to diverse audiences, orally and in writing, in an easily understood and actionable manner.An understanding of business needs and commitment to delivering high-quality, prompt, and efficient service to the business.Desired Skills:Okta Certified Administrator, Certified Consultant or Certified Developer certification a plus.Bachelor’s degree in Computer Science, Information Technology, Computer Engineering, or related field.Specific experience with NIST, PCI, ISO 27001, COBIT or other information security related framework.CISSP, CISM, SANS GSEC, Cloud Security (CCSP, CCSK), or other information security related certification(s).Job Environment and Physical Demands:Remote working and remote options are available.Office setting with physical proximity to other employees is also intermittently required.Sitting for prolonged periods.Must be able to lift 5 pounds.SECU provides equal employment opportunity to all qualified persons regardless of race, color, religion, age, sex, sexual orientation, gender identity, national origin, genetic information, disability, veteran status, or other classification protected by law.DisclaimerState Employees' Credit Union reserves the right to fill this role at a higher/lower level based on business need.
