
Senior Identity Engineer
Crunchyroll, LLC17 days ago
Dallas, TX, USASenior
Responsibilities
- Design, implement, maintain, and operate IAM systems including Okta, Google Workspace, Active Directory, and Microsoft Entra ID.
- Support joiner, mover, and leaver identity lifecycle workflows and translate employee lifecycle events from HR systems into identity platforms.
- Manage and integrate SSO, MFA, federation, conditional access, provisioning, deprovisioning, RBAC, ABAC, and least-privilege access models.
- Build integrations between identity systems, HR systems, SaaS applications, and internal applications, and onboard applications into SSO and identity governance platforms.
- Troubleshoot authentication, authorization, federation, and directory issues.
- Develop automation scripts and workflows to improve identity operations.
- Manage access certification campaigns, role mining, audits, access reviews, compliance reporting, and evidence collection.
- Monitor identity systems for availability, performance, and security events, and respond to security events.
- Partner with Security, IT, Engineering, Compliance, People Operations, business stakeholders, technical staff, management, and external constituents.
Requirements
- 8+ years of experience in Information Security or Information Technology.
- Hands-on experience with one or more identity platforms such as Okta, Google Workspace, or Microsoft Entra ID.
- Proven experience with privileged access management solutions and implementing MFA, SSO, conditional access, and lifecycle management.
- Strong understanding of authentication and authorization concepts including SAML, OAuth, OpenID Connect, and SCIM.
- Experience with access certification campaigns, role mining, security event response, and employee lifecycle integrations.
- Understanding of least privilege, zero trust, separation of duties, and defense in depth.
- Experience with Python or Bash and infrastructure-as-code tools such as Terraform or Pulumi.
- Certification in identity platform setup or administration is a plus.
- Experience with SOX, PCI, SOC2, ISO 27001, HIPAA, or other compliance frameworks is a plus.
- Knowledge of GDPR, CCPA, and other data privacy laws is a plus.
- Experience with AWS or GCP is a plus.
- BS in Computer Science or a related field, or equivalent experience.
Benefits
- Compensation package with salary and annual performance bonus earning potential.
- Flexible time off policies.
- Medical, dental, vision, short-term disability, long-term disability, and life insurance.
- Health Savings Account and health care and dependent care FSA programs.
- 401(k) plan with employer match.
- Employer-paid commuter benefit.
- New parent support program.
- Pet insurance and some pet-friendly offices.