Cloud Identity Administrator - Associate

About the position

iCapital is looking to hire a Cloud IAM Engineer to join the Corporate Technology department, whose mission is to empower individuals across the company with reliable and innovative technology. The Cloud IAM Engineer role is a technical position which will support our governance tools Saviynt and Okta along with Microsoft Entra ID. This role is responsible for managing and maintaining our identity governance platforms, creating and granting access to new users and non-human accounts, creating and maintaining birthright entitlements for departments and roles, leading recertification initiatives, deploying single sign-on applications, troubleshooting access and permission related requests, and maintaining an efficient user lifecycle management program. In addition to these responsibilities, this role also requires IAM-related governance of our cloud environments and third-party applications which includes reviewing stale access, reducing over-privileged access etc. This role is supported by both the Corporate Technology and the Corporate Applications and Security departments.

Responsibilities

• Drive our IAM governance program as a highly technical individual by managing and maintaining our primary software, Saviynt and Okta.
• Implement and suggest best practices and more efficient workflows within our current environment. Identify gaps and recommend solutions to enhance internal processes.
• Collaborate across iCapital with department leads, management, senior technical engineers, and Information Security to ensure a secure and reliable IAM environment.
• Create and maintain automation pipelines within Saviynt and Okta via built-in tools and Terraform.
• Ensure a reliable user lifecycle management program where you will oversee user provisioning, deprovisioning, and access changes, ensuring accuracy and timeliness.
• Manage employee and service account access within Microsoft Entra ID and across other Corporate Technology owned third-party applications.
• Have a broad understanding of Information Technology, especially in relation to onboarding and offboarding processes.

Requirements

• Bachelor's degree in computer science, information technology, information security or equivalent work experience within the Information Technology field
• 4+ years of experience within Identity and Access Management related positions
• 2-4 years of experience with Identity management and governance tools like Sailpoint, Saviynt, Ping, Okta, and Microsoft Entra ID
• Experience with managing and maintaining birthright entitlements and privileged identity management (PIM)
• Experience with SAML and Oauth single sign-on applications within Okta, as well as auto-provisioning and SCIM
• Familiar with directory services and identity federation
• Experience with Terraform and IaC concepts
• Hands-on experience with maintaining role-based access for provisioning and entitlements
• Strong understanding of IAM and cloud governance practices and concepts
• Able to deliver clear and concisely written documentation for internal use across the company
• Able to speak confidently on topics related to the role's responsibilities
• Experience working in a regulated and secure environment where due diligence is required

Nice-to-haves

• Certifications related to cloud platforms or Identity and Access Management are preferred
• Experience with cloud-native security tools and platforms is preferred
• Professional and calm attitude with a willingness to learn and develop towards a senior Cloud IAM Engineer
• Able to work independently when needed as well as work alongside department leaders, senior technical employees, and management level employees
• Excellent communication skills both written and verbal with technical and non-technical audiences
• Strong critical thinking and a detail orientated skillset

Benefits

• Base salary range of $100,000 to $125,000
• Compensation package includes salary, equity for all full-time employees, and an annual performance bonus
• Comprehensive benefits package that includes an employer matched retirement plan
• Generously subsidized healthcare with 100% employer paid dental, vision, telemedicine, and virtual mental health counseling
• Parental leave
• Unlimited paid time off (PTO)
• Flexibility to work remotely on Friday