20 days ago
New York, NY, USAMid Level / Senior
Base Salary
$176k - $184k/yr
Responsibilities
- Administer Okta in production, including lifecycle management, SAML/OIDC application integrations, group rules, and access policies.
- Own or contribute to access certification campaigns, joiner/mover/leaver processes, and periodic access reviews.
- Support SOX IT General Controls audits by preparing access-control and user-access-review evidence.
- Document IAM policies, procedures, and control narratives for external auditors.
- Automate identity workflows using Python or PowerShell for access reporting, entitlement extraction, and lifecycle management.
- Manage entitlement inventories, access-review tracking, and audit evidence using spreadsheet tools.
- Engage application owners and business stakeholders to complete access reviews and follow up on outstanding items.
- Identify and appropriately escalate access anomalies and control gaps.
Requirements
- 3–5 years of experience in identity and access management, information security, or GRC with a direct focus on identity governance.
- Demonstrated production Okta administration experience, including lifecycle management, SAML/OIDC integrations, group rules, and access policies.
- Hands-on experience with access certification campaigns, joiner/mover/leaver processes, and periodic access reviews.
- Experience supporting or responding to SOX ITGC audits, including access controls and UAR evidence.
- Ability to document IAM policies, procedures, and control narratives suitable for external auditors.
- Working knowledge of SAML 2.0, OIDC, OAuth 2.0, and SCIM provisioning.
- Familiarity with IAM governance on AWS, Azure, or GCP.
- Required scripting or automation experience with Python or PowerShell applied to identity workflows.
- Proficiency with spreadsheet tools for entitlement inventories, access-review tracking, and audit evidence preparation.
- Understanding of RBAC, least privilege, and segregation of duties concepts.
- Ability to work independently, manage concurrent workstreams, communicate clearly in writing, and collaborate with application owners and business stakeholders.
Benefits
- Competitive compensation package with equity and a 401(k).
- Medical, dental, and vision plan options, plus company-paid short- and long-term disability coverage.
- Paid time off, flexible time off for exempt employees, paid vacation for non-exempt employees, and paid sick leave as required by law.
- Paid parental leave, discounted meals, and exclusive perks across the Wonder family of brands.
- Geographic-specific base salary structure for New York/New Jersey; eligibility and benefit options vary by employment classification and location.
