Identity Governance Engineer

Wonder; New York (NY); On-site; USD 176,000 - 184,000; Full time

Benefits offered by this job

Equity

401(k)

Medical plan

Dental plan

Vision plan

Disability insurance

PTO & parental leave

Meal discounts

Job summary

Wonder in New York is seeking an Identity & Access Management professional to own and advance access governance, policy documentation, and audit readiness. You will work with application owners to drive timely access reviews and strengthen control narratives for SOX compliance.

You will contribute to lifecycle management across SAML/OIDC app integrations, and help enforce RBAC and least privilege in a multi‑cloud environment, supporting a security‑minded culture.

Qualifications

• 3–5 years of experience in identity and access management, information security, or GRC with a direct focus on identity governance.
• Experience administering Okta in production, including lifecycle management, SAML/OIDC app integrations, group rules, and access policies.
• Hands‑on experience owning or contributing to access certification campaigns (joiner/mover/leaver processes, periodic access reviews)
• Experience supporting or directly responding to SOX IT General Controls (ITGCs) audits, including access controls and user access review (UAR) evidence
• Proven ability to document IAM policies, procedures, and control narratives suitable for external auditor consumption

Responsibilities

• Own or contribute to access review campaigns and control attestations.
• Document IAM policies, procedures, and control narratives for auditors.
• Engage with application owners and stakeholders to complete timely access reviews.
• Support SOX ITGC audits with evidence of access controls and reviews.
• Maintain RBAC concepts and least‑privilege across cloud environments.

Skills

Identity governance

Policy documentation

Stakeholder engagement

Independent work

SOX awareness

Tools

SAML 2.0

OIDC

OAuth 2.0

SCIM provisioning

Cloud IAM (AWS/Azure/GCP)

Job description

About Wonder

Everything’s on the menu at Wonder. Except compromise.

Wonder is the mealtime platform built to feed every craving in one order. With Wonder, you can mix and match hundreds of dishes from 20+ exclusive restaurants in a single order, so everyone gets exactly what they’re craving. Enjoy everything from tacos to Thai with $0 delivery fees, plus dine-in or pick up at a Wonder location near you. Each dish is made to order on-site by our culinary team and served hot.

Behind the scenes, Wonder owns and operates every step of the dining experience, from recipe development to the technology that powers our experience, allowing us to deliver quality, variety, and consistency at scale.

Join us as we work to make great food more accessible.

Experience

• 3–5 years of experience in identity and access management, information security, or GRC with a direct focus on identity governance
• Demonstrated experience administering Okta in a production environment, including lifecycle management, SAML/OIDC app integrations, group rules, and access policies
• Hands‑on experience owning or contributing to access certification campaigns (joiner/mover/leaver processes, periodic access reviews)
• Experience supporting or directly responding to SOX IT General Controls (ITGCs) audits, including access controls and user access review (UAR) evidence
• Proven ability to document IAM policies, procedures, and control narratives suitable for external auditor consumption

Technical Skills

• Working knowledge of SAML 2.0, OIDC, OAuth 2.0, and SCIM provisioning
• Familiarity with IAM governance across at least one major cloud platform (AWS IAM, Azure Entra ID / PIM, or GCP Cloud IAM)
• Scripting or automation experience — Python or PowerShell applied to identity workflows (access reporting, entitlement data extraction, lifecycle automation). This is a required skill, not a preference.
• Proficiency with spreadsheet tools for managing entitlement inventories, access review tracking, and audit evidence preparation
• Understanding of role‑based access control (RBAC), least privilege, and segregation of duties (SoD) concepts

Soft Skills & Attributes

• Able to work independently with minimal supervision on concurrent workstreams
• Strong written communication skills — can produce clear policy documents, control narratives, and audit evidence packages without significant editing
• Comfortable engaging application owners and business stakeholders to complete access reviews, including following up to meet deadlines
• Detail‑oriented with a documentation-first mindset appropriate for a SOX‑controlled environment
• Judgment to elevate appropriately when access anomalies or control gaps are identified

New York / New Jersey Base Salary:

$176,000-$183,500

Wonder uses geographic‑specific salary structures, which means the salary offered may vary depending on where the job is located. The final salary offer will take into account various factors, such as the candidate's skills, education, training, credentials, and experience.

Benefits

The benefits applicable to this role include a competitive compensation package with equity and a 401(k). We also offer a choice of medical, dental, and vision plans, company paid short and long term disability coverage, paid time off including flexible time off for exempt employees, paid vacation for non‑exempt employees, and paid sick leave in compliance with applicable law in addition to paid parental leave, discounted meals and exclusive perks across the Wonder family of brands.

Eligibility, effective dates, and available plan options vary by employment classification and location. To learn more about benefits for this role, visit our Careers page here.

A Final Note

At Wonder, we build the best teams by hiring with an objective lens — evaluating people for their potential while championing diversity, equity, and inclusion. We do not discriminate based on race, color, religion, gender identity or expression, sexual orientation, national origin, age, military service eligibility, veteran status, marital status, disability, or any other protected class. As part of our commitment to fair and compliant hiring practices, Wonder participates in the federal government's E-Verify program to confirm employment eligibility. If you need an accommodation during the interview process, please let your recruiter know.