IAM Engineer – Hybrid (Equity + MacBook)

Culture Amp Pty Ltd; Melbourne (KY); Hybrid; USD 110,000 - 150,000; Full time

Benefits offered by this job

Employee equity

Learning programs

Refresh days

End-of-year break

Home workspace budget

Social impact days

Medical insurance (US/UK)

Job summary

Culture Amp is seeking an Identity & Access Management Engineer to protect and streamline access across our systems. You’ll own day-to-day Okta administration, lifecycle automation, and governance to ensure the right people have the right access at the right time.

You’ll collaborate with Tech and business stakeholders, build automated joiner/mover/leaver flows, and support SOC 2 / ISO 27001 audits, with a pragmatic, security-minded focus and a calm, customer-centric approach.

Qualifications

• Hands-on experience administering Okta or a similar identity provider.
• Experience onboarding SaaS apps end to end, including SSO setup, SCIM attribute and group mapping, and troubleshooting provisioning issues.
• Experience with Okta Identity Governance or equivalent access request and identity governance tooling.
• Experience building identity lifecycle automation pipelines that connect HRIS systems to an identity provider using tools such as Okta Workflows, APIs, or SCIM.
• Familiarity with SaaS governance practices, including access certification, audit evidence, licence utilisation reviews, and OAuth or shadow IT detection.
• Familiarity with SaaS platforms, cloud providers, networking fundamentals and device management.

Responsibilities

• Manage day-to-day identity and access administration in Okta, including provisioning, deprovisioning, MFA resets, application access requests, and authentication, session, and device trust policies.
• Full lifecycle management of SaaS applications and maintain existing SAML, SCIM, and OIDC configurations and group mappings as Culture Amp’s technology environment evolves.
• Build and own joiner, mover, and leaver workflows end to end, including automated pipelines using Okta Workflows, APIs, and SCIM to connect the HRIS to Okta.
• Configure, deploy, and continuously improve Okta Identity Governance, including access request workflows and self-service or automated approval paths aligned to access policy.
• Support audit and compliance activities by automating access certification reporting, gathering system and directory log evidence for SOC 2 and ISO 27001 audits, and reviewing inactive SaaS licences and unapproved OAuth integrations.
• Contribute to configuration, optimisation and troubleshooting for other ancillary platforms as required, such as Google Workspace, Active Directory / MS Entra, Island & Jamf.

Skills

Okta administration

SAML/SCIM/OIDC

Automation pipelines

Identity governance

Security mindset

Effective communicator

Tools

Okta

Google Workspace

MS Entra / Active Directory

Island & Jamf

Job description

Culture Amp is seeking an Identity & Access Management Engineer to protect and streamline access across our systems. You’ll own day-to-day Okta administration, lifecycle automation, and governance to ensure the right people have the right access at the right time.

You’ll collaborate with Tech and business stakeholders, build automated joiner/mover/leaver flows, and support SOC 2 / ISO 27001 audits, with a pragmatic, security-minded focus and a calm, customer-centric approach.