Staff Identity Governance and Access
Core
Design and own end-to-end Okta Identity Governance (IGA) architecture, including access workflows, entitlement structures, and lifecycle management across the enterprise.
Role type
Staff Identity Governance and Access Management Engineer
Builds
Enterprise IGA and Privileged Access Management (PAM) systems, including Workday integrations, automation workflows, and security posture management.
Domain
Cybersecurity, Identity Management, Compliance
Required skills
Enterprise IGA/PAM/ISPM platform administration, Birthright provisioning, RBAC architecture, Workday integration design, Privileged Access Management (PAM), Identity Security Posture Management (ISPM), Zero Standing Privilege implementation, Just-In-Time (JIT) access design, Break-glass access design, SAML, OIDC, OAuth 2.0, SCIM, Role-based and attribute-based access control, Joiner/mover/leaver lifecycle design, SOX compliance, Audit evidence management, Segregation of duties, Access certification integrity.
Preferred skills
Non-human identity governance (service accounts, API tokens, secrets, AI agents), ServiceNow integration, REST APIs, JSON parsing, Webhooks, SOC 2/ISO 27001/HIPAA/GDPR audit support.
Technologies
Okta, Workday, CrowdStrike Falcon, ServiceNow, Jira, OPA
Responsibilities
Own end-to-end Okta IGA architecture including access request workflows and certification campaigns; Lead birthright provisioning and RBAC lifecycle strategy; Design Workday integration architecture for reconciliation and termination sync; Design and harden mover/leaver automation; Lead PAM and ISPM initiatives including JIT elevation and break-glass access; Own PAM and ISPM telemetry and KPIs; Build and maintain Okta Workflows automation; Mentor engineers and serve as technical escalation point.
Seniority
Staff, hands-on IC with mentorship and strategic leadership
