IAM Security Engineer - Identity & Access Mastery

Skechers USA Deutschland; Manhattan Beach (CA); On-site; USD 125,000 - 165,000; Full time

Job summary

Skechers Identity and Access Management team seeks an IAM Engineer to design, implement, and evolve secure authentication and authorization systems across our environments. You will work to ensure the right access exists at the right time, balancing security with operational efficiency, while researching and piloting new technologies.

You will lead efforts around joiner/mover/leaver workflows, PAM/MFA/JIT, and phishing-resistant and risk-based authentication, collaborating with diverse teams to

Qualifications

• 5+ years hands-on with multiple authentication/authorization solutions and directory platforms.
• 5+ years in identity security solutions (CyberArk, Delinea, Duo, Okta, etc.).
• Security certifications (GIAC, (ISC)2 or equivalent) are a plus.
• Experience with Okta or Microsoft Entra ID and Active Directory security.
• Cloud infrastructure familiarity and authentication in IaaS.
• Deep understanding of protocols (NTLM, Kerberos, SAML, OIDC, FIDO2, WebAuthn).

Responsibilities

• Assist with design and implementation of IAM solutions including PAM, MFA, JIT, vaulting.
• Guide secure authentication methods and develop requirements.
• Pilot emerging technologies to modernize authentication systems.
• Improve joiner/mover/leaver workflows with access provisioning and removal.
• Identify risks and weak configurations in current and new environments.
• Lead projects related to core authentication systems and secure initiatives.

Skills

IAM and directory platforms

Identity security solutions

Security certifications

Okta / Microsoft Entra ID

Cloud IAM

Auth protocols

Zero Trust / JIT

Threat awareness

Communication

Tools

CyberArk

Delinea

Duo

Okta

Microsoft Entra ID

Active Directory

Job description

Skechers Identity and Access Management team seeks an IAM Engineer to design, implement, and evolve secure authentication and authorization systems across our environments. You will work to ensure the right access exists at the right time, balancing security with operational efficiency, while researching and piloting new technologies.

You will lead efforts around joiner/mover/leaver workflows, PAM/MFA/JIT, and phishing-resistant and risk-based authentication, collaborating with diverse teams to