Security IDaaS Engineer

Job Title: Security IDaaS Engineer (Access Management & Federation)

Role Overview
We are seeking a skilled and security-focused Security IDaaS Engineer to join our Federation Services team. In this role, you will leverage technology to improve, streamline, and automate information security systems, developing and maintaining robust security controls, rules, and safeguards to protect enterprise information assets.

This is a hands-on technical role where you will facilitate and configure complex application integrations, manage IAM objects (users, groups, service accounts, and API tokens), and build access management services. Collaborating across cross-functional teams, you will design secure Authentication, Authorization, IDaaS, and API services to reduce manual overhead, accelerate time-to-market, and strengthen overall security posture and change management practices. If you have a strong background in identity federation and cloud security, we want to hear from you.

Key Responsibilities
Identity, Federation & Access Management
Integration & Configuration: Facilitate and configure secure application integrations using industry-standard protocols including SAML, OAuth, and OpenID Connect.
IAM Administration: Manage lifecycle creation and governance of IAM objects, including users, groups, service accounts, and API tokens.
Access Control Services: Design, code, and maintain scalable Access Management Services and IDaaS solutions in cloud environments.

Security Operations & Compliance
Posture Management: Develop and maintain security posture rules, controls, and safeguards to protect enterprise assets.
Incident & Change Management: Manage operational security incidents, adhere strictly to change management processes, and support rapid recovery practices.
Documentation & Knowledge Sharing: Create comprehensive technical documentation, facilitate team knowledge sharing, and drive continuous process improvements.

Collaboration & Agile Delivery
Cross-Functional Partnership: Collaborate with security architects, application teams, and business units to deliver secure, automated authentication and authorization solutions.
Agile Participation: Engage actively in Agile ceremonies, sprint planning, and backlog refinement to deliver technical milestones.

Qualifications & Requirements
Minimum Qualifications
Education: Bachelor's degree in Computer Science, Information Security, or a related discipline (or equivalent practical experience).
Experience Baseline: 5+ years of relevant professional experience in Information Security, Identity & Access Management, or related IT engineering roles.
Technical Mastery (Must Have):
oProven experience with IDaaS platforms (specifically Okta) and Identity Governance & Administration (IGA) / Identity Management (IDM).
oDeep expertise in federation protocols: SAML, OAuth.
oCloud platform experience across AWS or Azure.
oScripting and API testing proficiency using Postman and PowerShell.
oDemonstrated experience working within Agile development environments.
Citizenship / Work Authorization: U.S. Citizenship or U.S. Permanent Resident status required.

Preferred Attributes
Hands-on security framework knowledge (e.g., NIST, FedRAMP, NIST CSF).
Experience with Microsoft Entra ID and identity governance platforms like Saviynt.
Proficiency in Python for security automation and scripting.
Strong understanding of Role-Based Access Control (RBAC), REST APIs, and core networking infrastructure.

Equal Opportunity Employer / Disabled / Protected Veterans

The Know Your Rights poster is available here:
_EEOC_KnowYourRights6.12.pdf

The pay transparency policy is available here:
_%20English_formattedESQA508c.pdf

For temporary assignments lasting 13 weeks or longer, AllSTEM Connections is pleased to offer major medical, dental, vision, 401k and any statutory sick pay where required.

We are committed to working with and providing reasonable accommodations to individuals with disabilities. If you need a reasonable accommodation for any part of the employment process, please contact your staffing representative who will reach out to our HR team.

AllSTEM Connections participates in the E-Verify program in certain locations as required by law. Learn more about the E-Verify program.
_Participation_Poster_ES.pdf

We also consider for employment qualified applicants regardless of criminal histories, consistent with legal requirements, including, if applicable, the City of Los Angeles' Fair Chance Initiative for Hiring Ordinance. Pursuant to applicable state and municipal Fair Chance Laws and Ordinances, we will consider for employment-qualified applicants with arrest and conviction records, including, if applicable, the San Francisco Fair Chance Ordinance. For Los Angeles, CA applicants: Qualified applications with arrest or conviction records will be considered for employment in accordance with the Los Angeles County Fair Chance Ordinance for Employers and the California Fair Chance Act.

Additional Skills

(none specified)

AllSTEM Representative Contact Info

Account Executive:

Nichols

Branch Phone:



Location:

Ontario, CA