Senior Cybersecurity Engineer – SaaS / Identity Management

Remote, USA (Must be available during PST business hours)
 

Position Overview

We are seeking a highly skilled Senior Cybersecurity Engineer – SaaS / Identity Management to design, implement, and support enterprise-grade Identity & Access Management (IAM) and SaaS automation solutions.

The ideal candidate will have extensive experience with Okta, identity federation, automation, DevOps practices, and enterprise SaaS integrations. This role will focus on securing and automating user lifecycle management across cloud and on-premises environments while driving operational efficiency and identity governance initiatives.

Key Responsibilities

Identity & Access Management

• Manage and administer enterprise SaaS and on-premises applications.
• Design and maintain user provisioning and deprovisioning processes.
• Implement and support SAML SSO, MFA/2FA, Identity Federation, and Zero Trust initiatives.
• Configure IAM integrations with platforms such as:
  • Okta
  • Azure AD
  • Google Workspace (G-Suite)
  • SAP
  • ADP
  • Concur
  • Other enterprise applications

Automation & DevOps

• Develop automation solutions for:
  • User lifecycle management
  • Access governance
  • SaaS application onboarding
  • Identity workflows
• Build and maintain DevOps pipelines supporting IAM operations.
• Develop scripts and automation using:
  • Python
  • PowerShell
  • Bash
  • Java
• Integrate systems using APIs, webhooks, and event-driven architectures.

Identity Security Engineering

• Design and implement IAM solutions utilizing:
  • SAML
  • OIDC
  • SCIM
  • Modern authentication protocols
• Configure and manage advanced Okta capabilities:
  • Okta Access Gateway (OAG)
  • Adaptive MFA (AMFA)
  • Device Trust
  • Desktop SSO (DSSO)
  • Okta Workflows
  • API Automation
  • Okta Expression Language

Systems Integration & Architecture

• Design secure integrations across SaaS and on-premises platforms.
• Develop and support integrations using:
  • REST APIs
  • SOAP APIs
  • LDAP
  • RADIUS
  • SSH
  • SFTP
• Work with JSON, XML, and YAML data formats.
• Utilize synchronization tools including:
  • GAM/GADS
  • Okta APIs
  • Google APIs
  • Okta Workflows

Security Analytics & Monitoring

• Develop security reporting and analytics solutions.
• Utilize:
  • Python (Pandas)
  • Sumo Logic
  • XDR platforms
  • Security monitoring tools
• Monitor identity risks, user activities, and system health.

Documentation & Collaboration

• Create architecture diagrams, SOPs, runbooks, and technical documentation.
• Partner with engineering, operations, and business teams.
• Act as a trusted advisor on IAM, SaaS security, and automation strategies.
• Provide knowledge transfer and training to operational teams.

Required Qualifications

• 8+ years of experience in:
  • Identity & Access Management (IAM)
  • SaaS Administration
  • Identity Engineering
  • DevOps Automation
• Strong hands-on expertise with Okta.
• Experience with:
  • SAML
  • OIDC
  • SCIM
  • Identity Federation
  • Enterprise SSO
• Advanced scripting experience in:
  • Python
  • Bash
  • PowerShell
  • Java
• Strong understanding of:
  • LDAP
  • RADIUS
  • REST APIs
  • SOAP APIs
  • HTTP/S
  • SSH
  • SFTP
• Experience building automation frameworks and API integrations.
• Strong understanding of identity governance and cybersecurity best practices.

Preferred Qualifications

• Experience with:
  • AWS IAM
  • Azure AD
  • Google Cloud Platform (Google Cloud Platform)
• Familiarity with Zero Trust architecture.
• Experience supporting enterprise-scale automation initiatives.
• Knowledge of SIEM, XDR, and security analytics platforms.
• Relevant certifications preferred:
  • Okta Certified Professional
  • Okta Certified Administrator
  • Certified Identity and Access Manager (CIAM)
  • AWS Certification
  • Azure Certification
  • Google Cloud Platform Certification

eye