Identity Engineer: Okta & Zero Trust (Remote)

Cloudera International Limited (Ireland); Cork; Híbrido; EUR 90.000 - 120.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Generous PTO Policy

Unplugged Days

Flexible WFH Policy

Mental & Physical Wellness programs

Phone and Internet Reimbursement

Continued Career Development

Volunteer Time

Employee Resource Groups

EEO/VEVRAA

Descripción de la vacante

Cloudera is seeking an Identity Engineer to join the Infrastructure Operations team. You will own Okta configurations, write runbooks, and implement least-privilege access and Just-In-Time workflows across AWS, Azure and Google Cloud.

You will automate identity lifecycles, build tooling with Terraform and CI/CD, and collaborate with HR systems, security, and engineering to keep identity secure and auditable.

Formación

• 6+ years of experience operating and deploying Okta or an equivalent identity provider.
• Strong experience with authentication protocols and systems, including OIDC, SAML and SCIM, and AD or LDAP.
• Experience with access governance or JIT platforms such as Lumos, SailPoint or ConductorOne.
• Experience building integrations and automation against web service APIs in Python, Go or JavaScript.
• Experience with infrastructure as code, ideally Terraform, in a CI/CD environment such as GitHub, Spacelift or Jenkins.
• Experience working with other teams on identity changes that affect many users.
• Experience securing automation that holds privileged access, including separation of read and write functions and secrets management.
• A methodical approach to change, and a habit of documenting what you build.

Responsabilidades

• Own delivery of identity projects, and contribute to identity architecture decisions with other teams.
• Administer and improve our Okta environments, including groups, group rules, policies, authenticators and application integrations.
• Build and maintain identity configuration as code using Terraform and CI/CD, and review identity change requests from other engineers.
• Design and build tooling and automation that enables secure self-service under Zero Trust principles, including Okta Workflows and scripted integrations.
• Ensure auditability of identity functions, including configuration backup, change tracking and logging to central systems.
• Design and automate identity lifecycle processes, from joiner through mover to leaver, driven by our HR system of record.
• Onboard applications to our access request and just-in-time access platform, replacing manual and standing permissions with request‑based workflows.
• Bring an existing Okta estate into line with our group naming and lifecycle standards, including remediating legacy groups, direct role assignments and stale accounts.
• Work with HR systems to manage the downstream impact of organisational changes on groups and access.
• Support identity federation into AWS, Azure and Google Cloud.
• Weigh risk against business and user needs, so access is both secure and easy to use.
• Write clear runbooks and documentation.
• Take part in an on‑call rotation for identity services.

Conocimientos

Okta

CI/CD

Security best practices

Zero Trust

Automation

Python/Go/JS scripting

Herramientas

Terraform

GitHub

Spacelift

Jenkins

Okta Workflows

Descripción del empleo

Cloudera is seeking an Identity Engineer to join the Infrastructure Operations team. You will own Okta configurations, write runbooks, and implement least-privilege access and Just-In-Time workflows across AWS, Azure and Google Cloud.

You will automate identity lifecycles, build tooling with Terraform and CI/CD, and collaborate with HR systems, security, and engineering to keep identity secure and auditable.