Identity Governance Engineer

GrubHub Inc.; New York (NY); On-site; USD 176,000 - 184,000; Full time

Benefits offered by this job

Equity

401(k)

Health plans

Paid time off

Job summary

Wonder is seeking an Identity Governance Engineer in New York, NY to lead identity and access management initiatives. You will own or contribute to governance programs, manage IAM tooling like Okta in production, and partner with engineering teams to strengthen access controls across multiple cloud environments.

You bring 3–5 years of IAM/ITGC experience, strong policy documentation skills, and a hands-on approach with SAML/OIDC, SCIM provisioning, RBAC, and audit-ready narratives.

Qualifications

• 3–5 years of identity and access management with a focus on identity governance.
• Production Okta administration including lifecycle, SAML/OIDC integrations.
• Experience owning or contributing to access certification campaigns (joiner/mover/leaver).
• Support SOX IT General Controls audits and provide UAR evidence.
• Knowledge of SAML 2.0, OIDC, OAuth 2.0, SCIM provisioning.
• Understanding RBAC, least privilege, and SoD concepts.

Responsibilities

• Lead or contribute to access reviews and certification campaigns.
• Document IAM policies, procedures, and control narratives for auditors.
• Collaborate with application owners to complete reviews and meet deadlines.

Skills

Identity governance

Okta administration

Access certification

ITGC audits

SAML 2.0

OIDC

OAuth 2.0

SCIM provisioning

RBAC/SoD

Python/PowerShell

Audit evidence

Job description

## Identity Governance EngineerApplylocations: New York, NYtime type: Full timeposted on: Posted Todayjob requisition id: JR101259**About Wonder**Everything’s on the menu at Wonder. Except compromise.Wonder is the mealtime platform built to feed every craving in one order. With Wonder, you can mix and match hundreds of dishes from 20+ exclusive restaurants in a single order, so everyone gets exactly what they’re craving. Enjoy everything from tacos to Thai with $0 delivery fees, plus dine-in or pick up at a Wonder location near you. Each dish is made to order on-site by our culinary team and served hot.Behind the scenes, Wonder owns and operates every step of the dining experience, from recipe development to the technology that powers our experience, allowing us to deliver quality, variety, and consistency at scale.*Join us as we work to make great food more accessible.***Experience*** 3–5 years of experience in identity and access management, information security, or GRC with a direct focus on identity governance* Demonstrated experience administering Okta in a production environment, including lifecycle management, SAML/OIDC app integrations, group rules, and access policies* Hands-on experience owning or contributing to access certification campaigns (joiner/mover/leaver processes, periodic access reviews)* Experience supporting or directly responding to SOX IT General Controls (ITGCs) audits, including access controls and user access review (UAR) evidence* Proven ability to document IAM policies, procedures, and control narratives suitable for external auditor consumption**Technical Skills*** Working knowledge of SAML 2.0, OIDC, OAuth 2.0, and SCIM provisioning* Familiarity with IAM governance across at least one major cloud platform (AWS IAM, Azure Entra ID / PIM, or GCP Cloud IAM)* Scripting or automation experience — Python or PowerShell applied to identity workflows (access reporting, entitlement data extraction, lifecycle automation). This is a required skill, not a preference.* Proficiency with spreadsheet tools for managing entitlement inventories, access review tracking, and audit evidence preparation* Understanding of role-based access control (RBAC), least privilege, and segregation of duties (SoD) concepts**Soft Skills & Attributes*** Able to work independently with minimal supervision on concurrent workstreams* Strong written communication skills — can produce clear policy documents, control narratives, and audit evidence packages without significant editing* Comfortable engaging application owners and business stakeholders to complete access reviews, including following up to meet deadlines* Detail-oriented with a documentation-first mindset appropriate for a SOX-controlled environment* Judgment to escalate appropriately when access anomalies or control gaps are identified**New York / New Jersey Base Salary:** $176,000-$183,500 Wonder uses geographic-specific salary structures, which means the salary offered may vary depending on where the job is located. The final salary offer will take into account various factors, such as the candidate's skills, education, training, credentials, and experience. **Benefits** The benefits applicable to this role include a competitive compensation package with equity and a 401(k). We also offer a choice of medical, dental, and vision plans, company paid short and long term disability coverage, paid time off including flexible time off for exempt employees, paid vacation for non-exempt employees, and paid sick leave in compliance with applicable law in addition to paid parental leave, discounted meals and exclusive perks across the Wonder family of brands. Eligibility, effective dates, and available plan options vary by employment classification and location. To learn more about benefits for this role, visit our Careers page here.**A Final Note**At Wonder, we build the best teams by hiring with an objective lens — evaluating people for their potential while championing diversity, equity, and inclusion. We do not discriminate based on race, color, religion, gender identity or expression, sexual orientation, national origin, age, military service eligibility, veteran status, marital status, disability, or any other protected class. As part of our commitment to fair and compliant hiring practices, Wonder participates in the federal government's E-Verify program to confirm employment eligibility. If you need an accommodation during the interview process, please let your recruiter know.**We look forward to hearing from you! We'll contact you via email or text to schedule interviews and share information about your candidacy**.