Staff Identity & Access Management Engineer
Rivian and Volkswagen Group Technologies1 month ago
Belgrade, SerbiaStaff+
Responsibilities
- Own the enterprise identity program across workforce identity, IGA, PAM, non-human identity governance, secrets management, and device trust.
- Define and execute the identity roadmap, priorities, dependencies, risks, decisions, operational KPIs, and first-90-day ownership dossier.
- Build and lead a small team of engineers and contractors while managing external implementation partners, vendors, statements of work, evaluations, and RFPs.
- Operate the workforce identity platform, including tenant configuration, access policies, MFA, adaptive access, lifecycle automation, SSO, and SCIM integrations.
- Lead L2/L3 identity Helpdesk operations, SLAs, runbooks, escalations, platform stabilization, and self-service automation.
- Direct identity workstreams during cybersecurity and operational incidents, including containment, evidence production, and corrective actions.
- Own quarterly user access reviews, access remediation, non-human identity governance, privilege reduction, and preventive controls.
- Design identity controls and audit evidence for TISAX, ISO 27001, SOC 2, and SOX, serving as the primary identity contact for auditors.
- Lead PAM and enterprise secrets-management strategy, tool selection, rollout, adoption, developer workflows, and operating models.
- Apply AI engineering and automation to investigations, remediation, evidence collection, lifecycle processes, and self-service.
- Build identity data pipelines and governance tooling on the enterprise data platform and integrate identity signals into detection and response.
Requirements
- Bachelor’s degree in Computer Science, Information Security, Information Systems, or a related technical field is required.
- 8+ years of identity and access management experience, including 3+ years as the accountable lead for a production workforce identity program or platform.
- Experience building and leading a small team, managing contractors, and directing implementation partners and vendors.
- Deep hands-on experience with Okta, Microsoft Entra ID, Ping Identity, or comparable workforce identity platforms, including tenant design, policy architecture, and lifecycle automation.
- Expert knowledge of SAML, OIDC, OAuth 2.0, SCIM, and directory services including Entra ID and Active Directory in hybrid enterprise environments.
- Experience presenting identity controls and evidence to auditors for TISAX, ISO 27001, SOC 2, and/or SOX.
- Experience leading identity Helpdesk or service operations and identity response during security incidents.
- Hands-on coding experience with Python or similar and working experience with Terraform, Databricks, AWS, and GCP.
- Experience managing concurrent high-priority projects, solving resource constraints through automation and AI engineering, and owning access governance in regulated environments.
- Preferred qualifications include advanced identity-platform certification, experience deploying IGA, PAM, and secrets-management platforms, identity migrations or consolidations, AI-assisted security automation, SIEM integration, detection engineering, and automotive or multi-entity enterprise experience.
Benefits
- Competitive base salary, annual company performance bonus eligibility, and equity in the form of RSUs, subject to applicable plan terms.
- Comprehensive benefits for full-time employees, including health coverage, retirement savings, time off, and family planning programs.
- Benefits offerings vary by country.
Tech Stack
Categories
About Rivian and Volkswagen Group Technologies
Rivian and Volkswagen Group Technologies is a 2024 joint venture building software and electrical architectures for software-defined electric vehicles. It develops in-vehicle operating systems, zonal controllers, connectivity, and cloud solutions used by Rivian and Volkswagen Group brands. The privately held company is headquartered in Palo Alto, CA, and focuses on creating a shared platform that can be integrated and licensed across multiple vehicle programs.