Senior SaaS / Identity Engineer
Remote
Needs to work in PST time zone.
Overview
We are seeking a highly skilled Senior SaaS / Identity Engineer to design, implement, and manage enterprise-grade identity and SaaS automation solutions. This role focuses on Identity & Access Management (IAM), DevOps automation, and SaaS ecosystem integration, ensuring secure, scalable, and efficient user lifecycle management across both cloud and on-premise environments.
You will play a key role in architecting automation frameworks, enhancing identity workflows, and improving operational efficiency across a diverse application landscape.
Key Responsibilities
Identity & SaaS Administration
- Manage and administer enterprise SaaS and on-premise applications supporting multiple business units.
- Design and maintain user provisioning and deprovisioning workflows, ensuring compliance and security.
- Implement and manage SAML SSO, MFA/2FA, and Identity Federation solutions across platforms.
- Configure and maintain IAM integrations for applications such as Okta, Google Workspace (G-Suite), Azure AD, SAP, ADP, Concur, and others.
DevOps & Automation
- Architect and develop automation tools to streamline:
- User lifecycle management
- Identity access workflows
- SaaS application onboarding and integration
- Build and maintain DevOps pipelines and toolchain improvements for IAM operations.
- Develop automation using scripting languages such as Python, Bash, PowerShell, and Java.
- Use APIs, webhooks, and event-driven architecture to integrate systems and workflows.
Identity & Security Engineering
- Design and implement IAM solutions leveraging:
- OIDC, SAML, SCIM, and modern authentication protocols
- Secure token handling and lifecycle management
- Configure and manage advanced Okta capabilities including:
- Okta Access Gateway (OAG)
- Device Trust
- Adaptive MFA (AMFA)
- Desktop SSO (DSSO)
- Okta Workflows and API automation
- Okta Expression Language
Integration & Systems Architecture
- Analyze dependencies and design robust solutions integrating multiple SaaS and on-prem systems.
- Build and maintain integrations using:
- REST/SOAP APIs, LDAP, RADIUS, SFTP, SSH
- Data formats such as JSON, XML, YAML
- Utilize synchronization tools including:
- GAM/GADS (Google), Okta APIs, Okta Workflows, Google APIs
Security Analytics & Monitoring
- Develop security analytics and reporting using:
- Python (Pandas)
- Log aggregation tools such as Sumo Logic
- XDR query frameworks
- Monitor system health, user activity, and identity risks.
Collaboration & Stakeholder Engagement
- Partner with senior leaders, operations teams, and cross-functional stakeholders to deliver scalable SaaS solutions.
- Act as a technical advisor on IAM and SaaS strategy.
Documentation & Enablement
- Produce clear and comprehensive technical documentation including:
- Architecture diagrams
- Integration templates
- Runbooks and SOPs
- Develop training materials and provide knowledge transfer to operations/support teams.
Required Qualifications
- 8+ years of experience in Identity & Access Management, SaaS administration, or DevOps automation
- Strong expertise in IAM platforms, especially Okta
- Hands-on experience with:
- SAML, OIDC, SCIM, and modern authentication protocols
- Enterprise identity integrations
- Advanced scripting experience in:
- Python, Bash, PowerShell, Java
- Deep knowledge of networking and integration protocols:
- LDAP, RADIUS, REST, SOAP, HTTP(S), SSH, SFTP
- Experience building automation using APIs and workflow engines
- Strong understanding of security best practices and identity governance
Preferred Qualifications
- Experience with cloud platforms (Azure, Google Cloud Platform, AWS IAM)
- Familiarity with Zero Trust security models
- Previous experience with enterprise-scale automation and DevOps pipelines
- Knowledge of log analytics and SIEM/XDR tools
- Certifications such as:
- Okta Certified Professional / Administrator
- Certified Identity and Access Manager (CIAM)
- Cloud certifications (Azure/AWS/Google Cloud Platform)
Never miss an opportunity! Create an alert based on the job you applied for.