Security Engineer II – IAM & SaaS Governance

We are looking for a Mid-Tier Security Engineer specializing in Identity and Access Management (IAM) and Data Governance to join our Cyber Security team. In this role, you won't just be managing user tickets; you will be the engineer designing, implementing, and securing our identity perimeter and SaaS ecosystem. You will own our Okta environment and drive data governance strategies across our core SaaS applications (e.g., Google Workspace, Microsoft 365, Slack, Salesforce, GitHub). Your goal is to ensure seamless user lifecycle management while aggressively enforcing the principle of least privilege and monitoring data exposure.

Responsibilities

Act as the primary engineer for Okta, managing advanced configurations including custom authorization servers, adaptive MFA, and conditional access policies; Design and maintain automated joiner-mover-leaver (JML) workflows using Okta Workflows, SCIM, or custom API scripts to eliminate manual provisioning errors; Standardize and implement SSO integrations utilizing SAML 2.0, OIDC, and OAuth 2.0, ensuring secure token exchange and scoping; Design, audit, and refine Role-Based Access Control (RBAC) and Attribute-Based Access Control (ABAC) models across all enterprise SaaS platforms; Monitor and remediate unauthorized data sharing, public file exposure, and "shadow IT" API integrations within our SaaS ecosystem; Lead quarterly user access reviews (UARs) and provide evidentiary support for security frameworks such as SOC 2 Type II, ISO 27001, and GDPR; Leverage SSPM tools or native security centers to continuously audit and harden SaaS application configurations; Analyze Okta System Logs and SaaS audit logs to detect anomalous behavior (e.g., impossible travel, credential stuffing, unauthorized data exfiltration); Collaborate with the SOC team to ensure critical IAM and SaaS logs are correctly ingested into our SIEM for real-time alerting

Requirements

3–5 years of dedicated experience in a Security Engineering, IAM, or Systems Engineering role with a heavy security focus; Strong engineering-level knowledge of Okta; Proven track record of implementing data governance principles, data loss prevention (DLP), and zero-trust access models; Deep understanding of networking and identity protocols: TCP/IP, HTTP, SAML, OAuth, OIDC, and SCIM; Proficiency in Python, PowerShell, or Bash to interact with REST APIs for custom security tooling and automation; Experience querying logs (Splunk, ELK, SQL, or cloud-native SIEMs) to investigate identity-related security incidents

Nice to have

Okta Certified Administrator or Certified Consultant preferred

Benefits

Shape real-world AI-driven projects across key industries; Be part of a global team with equal opportunities for collaboration across continents and cultures; Thrive in an inclusive environment that prioritizes continuous learning, innovation, and ethical AI standards