14 days ago
Base Salary
$121k - $181k/yr
Responsibilities
- Lead the design, implementation, maintenance, and expansion of enterprise identity and access management solutions.
- Design and maintain Okta tenant architecture covering SSO, MFA, lifecycle management, OAG, authentication flows, session management, and authorization policies.
- Integrate enterprise applications with Okta using SAML, OIDC, header-based, and legacy application approaches.
- Build, test, roll out, and validate IAM solutions and end-to-end access flows.
- Conduct security assessments and audits across networks, applications, and operating systems.
- Define IAM engineering strategy, technical vision, roadmaps, objectives, and long-term plans.
- Coordinate with Cybersecurity Operations, Application Development, Risk, technology, security, business, and external teams.
- Document use cases, user stories, operational processes, and technical solutions.
- Provide subject matter expertise, technical guidance, solution architecture, project oversight, and vendor evaluation support.
- Research IAM technologies and maintain current knowledge through educational opportunities, conferences, and professional publications.
Requirements
- 5–8+ years of Identity & Access Management experience.
- Hands-on expertise with Okta, including SSO, MFA, Lifecycle Management, and OAG.
- Strong understanding of SAML, OAuth2, and OIDC authentication protocols.
- Experience with hybrid cloud and on-premises architectures.
- Working knowledge of AWS, including VPC, ALB/ELB, networking, and security controls.
- Experience with directory services such as AD and LDAP, plus federation.
- Strong troubleshooting and scripting skills using PowerShell, Python, or similar tools.
- Experience managing projects or programs from concept through implementation using a structured project management methodology.
- Bachelor's degree preferred, with consideration for relevant coursework, experience, or extensive related professional experience.
- Ability to provide technical leadership, solve complex IAM engineering problems, and collaborate across functions.
Benefits
- Comcast provides an array of benefits and personalized support resources addressing physical, financial, and emotional well-being.
- The position is generally expected to be on-site unless the team is designated virtual; remote consideration may be available for candidates living more than 100 miles from an office when virtual options are listed.
- Eligible non-sales employees may receive a bonus in addition to base pay.
- The application window is generally 30 days from posting, subject to adjustment based on applicant volume.
About Comcast
Welcome to Comcast. From the connectivity and platforms we provide to the content and experiences we create, we bring people together, globally. Our people think the world of our work, and that’s why our work is the best in the world.