Engineer, Identity & Access Management

Skechers USA Deutschland; Manhattan Beach (CA); On-site; USD 125,000 - 165,000; Full time

Job summary

Skechers Identity and Access Management team seeks an IAM Engineer to design, implement, and evolve secure authentication and authorization systems across our environments. You will work to ensure the right access exists at the right time, balancing security with operational efficiency, while researching and piloting new technologies.

You will lead efforts around joiner/mover/leaver workflows, PAM/MFA/JIT, and phishing-resistant and risk-based authentication, collaborating with diverse teams to

Qualifications

• 5+ years hands-on with multiple authentication/authorization solutions and directory platforms.
• 5+ years in identity security solutions (CyberArk, Delinea, Duo, Okta, etc.).
• Security certifications (GIAC, (ISC)2 or equivalent) are a plus.
• Experience with Okta or Microsoft Entra ID and Active Directory security.
• Cloud infrastructure familiarity and authentication in IaaS.
• Deep understanding of protocols (NTLM, Kerberos, SAML, OIDC, FIDO2, WebAuthn).

Responsibilities

• Assist with design and implementation of IAM solutions including PAM, MFA, JIT, vaulting.
• Guide secure authentication methods and develop requirements.
• Pilot emerging technologies to modernize authentication systems.
• Improve joiner/mover/leaver workflows with access provisioning and removal.
• Identify risks and weak configurations in current and new environments.
• Lead projects related to core authentication systems and secure initiatives.

Skills

IAM and directory platforms

Identity security solutions

Security certifications

Okta / Microsoft Entra ID

Cloud IAM

Auth protocols

Zero Trust / JIT

Threat awareness

Communication

Tools

CyberArk

Delinea

Duo

Okta

Microsoft Entra ID

Active Directory

Job description

WHO WE ARE:

Headquartered in Southern California, Skechers-the Comfort Technology Company®-has spent over 30 years helping men, women, and kids everywhere look and feel good. Comfort innovation is at the core of everything we do, driving the development of stylish, high-quality products at a great value. From our diverse footwear collections to our expanding range of apparel and accessories, Skechers is a complete lifestyle brand.

ABOUT THE ROLE:

The Identity and Access Management team at Skechers works as part of the global information security program to ensure authentication systems are designed and operated securely, and the right access exists for the right needs at the right time. As part of this team, the IAM Engineer's role is to help ensure that authentication and authorization systems are designed and operated with a focus on security and efficiency.

Technology changes quickly and adversaries are constantly evolving new ways to break and bypass all types of local, federated, human, and machine authentication protocols. This technical specialist will bring a broad understanding of threat actor tactics and deep expertise with authentication systems to help ensure that our capabilities are constantly evolving to meet and exceed the current threat environment. The candidate who will find the most success and fulfillment brings a genuine interest and passion for information security, a love for learning, a positive attitude, and that nagging curiosity that makes you want to push past where others stop.

WHAT YOU'LL DO:

• Assist with design and implementation of security focused IAM solutions including PAM, MFA, JIT, vaulting, etc.
• Leverage understanding of threat actor techniques and technical solutions to provide guidance on and develop requirements for secure authentication methods.
• Help continuously evaluate and modernize authentication systems and process by researching and participating in the pilot of emerging technologies.
• Develop and improve joiner, mover, leaver workflows, including access requests, approvals, provisioning, and timely access removal, in partnership with process and system owners.
• Identify risks and potential weak configurations in existing environments as well as new proposals and implementations.
• Contribute to and/or lead projects and efforts related to core authentication systems and secure authentication initiatives, including phishing-resistant and risk-based authentication.
• Collaborate with diverse stakeholders including business and technology teams, infrastructure, cloud, application development, and more to drive security and consistency across the organization.
• Exhibit critical thinking and creativity by helping develop elegant solutions to complex technical challenges.
• Demonstrate curiosity and a continuous learning mindset by staying up to date on current threat actor tools, techniques, and procedures and emerging IAM capabilities.
• Use scripting, APIs, and workflow tools to automate repeatable IAM tasks and improve integration reliability.

WHAT YOU'LL BRING:

• 5+ years of hands-on experience with multiple authentication and authorization solutions and directory platforms.
• 5+ years of experience with identity security solutions, such as CyberArk, Delinea, Duo, Okta, etc.
• GIAC, (ISC)2, or similar security certification is a plus.
• Hands-on experience with enterprise identity platforms such as Okta or Microsoft Entra ID, plus experience with and understanding of approaches to securing directory services such as Active Directory.
• Experience with cloud infrastructure and familiarity with authentication systems in IaaS.
• Deep understanding of authentication protocols (NTLM, Kerberos, SAML, OIDC, FIDO2, WebAuthn, etc.).
• Understanding of general enterprise network and system components and their roles.
• Familiarity with network and application protocols (TCP/IP, HTTP, TLS, SSH, DNS, etc.).
• Understanding of modern cybersecurity concepts like Zero Trust and Just in Time access provisioning.
• Strong understanding of the identity and access security implications of emerging technologies, such as agentic AI, MCP servers, etc.
• Awareness and understanding of current and emerging threats and attacker techniques.
• Strong analytical and problem-solving skills.
• Ability to excel in a fast paced and rapidly changing environment.
• Exposure or working knowledge of identity providers and IGA solutions.
• Excellent communication skills, and experience collaborating with diverse stakeholders.
• Proven ability to take ownership of tasks and responsibilities.
• Reliable self-reliant contributor with a strong work ethic.

The pay range for this position is $125,000-$165,000/yr USD.

About Skechers

Skechers, a global Fortune 500® company, develops and markets a diverse range of lifestyle and performance footwear, apparel, and accessories. Serving over 180 countries and territories, Skechers connects customers to products through department and specialty stores, e-commerce and digital stores, and through our