IAM Security Engineer — Okta, SSO, PAM

Alloy; New York (NY); Híbrido; USD 162.000 - 190.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Unlimited PTO

Employee stock options

Health/dental/vision plans

401k match

Parental leave

Home office stipend

Learning stipend

Well-being benefits

Hybrid work in NYC

Descripción de la vacante

Alloy is seeking an IT/Security Engineer focused on workforce identity to own Okta and related IAM workflows. You’ll manage SSO integrations, lifecycle automation, and access governance in a hybrid NYC-area environment.

The role requires strong collaboration, troubleshooting, and an ability to evolve RBAC/ABAC across multiple SaaS platforms. Base salary ranges from $162,000 to $190,000 with equity options and a broad benefits package.

Formación

• Hands-on IT or security engineering with lead responsibility for Okta or a similar workforce identity provider.
• Experience administering IdP groups, access and authentication policies, SaaS app assignments, MFA, and admin roles.
• Experience implementing and troubleshooting SAML/OIDC SSO, SCIM provisioning, and OAuth-based integrations.
• Experience managing identity lifecycles across HR systems, an IdP, Google Workspace, and downstream SaaS apps.
• Ability to automate access workflows using Okta Workflows, APIs, scripts, or similar tools.
• Understanding of least privilege, RBAC/ABAC, access reviews, and account lifecycle controls.
• Familiarity with endpoint security, EDR, DLP, email security, and SaaS security tooling; able to work beyond IAM.
• Strong troubleshooting, documentation, and communication in a shared IT/Security team.

Responsabilidades

• IAM and Okta Administration: serve as the SME for workforce identity, MFA, groups, policies, and admin roles.
• SaaS Access & Integrations: manage SaaS access, onboarding, and SSO integrations (SAML/OIDC); SCIM provisioning/deprovisioning.
• Identity Lifecycle & Automation: optimize joiner/mover/leaver workflows from HRIS through IdP to downstream SaaS.
• Access Operations: troubleshoot authentication/provisioning issues and streamline access requests.
• RBAC Management: evolve Alloy’s RBAC/ABAC model and access control strategy.
• Privileged Access Management: mature PAM/TPAM including just-in-time and break-glass procedures.
• Non-Human Identity Management: govern service accounts, API credentials, OAuth apps, tokens, bots.
• AI Identity & Access: shape delegated access for AI tools and MCP integrations.
• Access Governance & Compliance: run access reviews, enforce contractor expirations, provide IAM evidence for ISO/SOC2.
• Shared IT/Security Engineering: collaborate on endpoint security, EDR, DLP, email security, and SaaS tools.
• Incident Response & Collaboration: investigate identity-related incidents and maintain clear documentation.
• On-call Rotation: participate in IT/Security on-call for critical alerts.

Conocimientos

Okta administration

SSO SAML/OIDC

SCIM provisioning

Identity lifecycle automation

RBAC/ABAC

Troubleshooting & documentation

Communication in IT/Security

Herramientas

Google Workspace

Descripción del empleo

Alloy is seeking an IT/Security Engineer focused on workforce identity to own Okta and related IAM workflows. You’ll manage SSO integrations, lifecycle automation, and access governance in a hybrid NYC-area environment.

The role requires strong collaboration, troubleshooting, and an ability to evolve RBAC/ABAC across multiple SaaS platforms. Base salary ranges from $162,000 to $190,000 with equity options and a broad benefits package.