Identity Governance Engineer

Blue Apron; Northern, New York (KY, NY); Hybrid; USD 176,000 - 184,000; Full time

Benefits offered by this job

Equity

401(k)

Medical, dental and vision plans

Paid time off

Job summary

Wonder is hiring an Identity Governance Engineer in New York, NY. The role focuses on identity governance, Okta administration in production, and supporting SOX ITGC audits. You will manage lifecycle processes, SAML/OIDC integrations, and access reviews while documenting policies for auditors.

Join Wonder to help ensure identity security across our mealtime platform and collaborate with cross-functional teams on entitlement and access governance initiatives.

Qualifications

• 3–5 years of experience in identity and access management, information security, or GRC with a focus on identity governance.
• Experience administering Okta in production environments, including lifecycle management, SAML/OIDC app integrations, group rules, and access policies.
• Hands-on experience owning or contributing to access certification campaigns (joiner/mover/leaver, periodic access reviews).
• Experience supporting or directly responding to SOX ITGC audits, including access controls and UAR evidence.
• Ability to document IAM policies, procedures, and control narratives for external auditors.

Responsibilities

• Administer Okta in production environments with lifecycle management and SAML/OIDC integrations.
• Own or contribute to access certification campaigns and review processes.
• Support or respond to SOX ITGC audits with relevant access evidence.
• Document IAM policies, procedures, and control narratives for auditors.

Skills

SAML 2.0

OIDC

OAuth 2.0

SCIM provisioning

IAM governance

AWS IAM

Azure Entra ID / PIM

GCP Cloud IAM

Python scripting

PowerShell scripting

Entitlement inventories

RBAC and SoD concepts

Tools

Okta

Job description

## Identity Governance EngineerApply: New York, NY: Full time: Posted 30+ Days Ago: JR101259**About Wonder**Everything’s on the menu at Wonder. Except compromise. Wonder is the mealtime platform built to feed every craving in one order. With Wonder, you can mix and match hundreds of dishes from 20+ exclusive restaurants in a single order, so everyone gets exactly what they’re craving. Enjoy everything from tacos to Thai with $0 delivery fees, plus dine-in or pick up at a Wonder location near you. Each dish is made to order on-site by our culinary team and served hot.Behind the scenes, Wonder owns and operates every step of the dining experience, from recipe development to the technology that powers our experience, allowing us to deliver quality, variety, and consistency at scale.*Join us as we work to make great food more accessible.***About Wonder**Everything’s on the menu at Wonder. Except compromise.Wonder is the mealtime platform built to feed every craving in one order. With Wonder, you can mix and match hundreds of dishes from 20+ exclusive restaurants in a single order, so everyone gets exactly what they’re craving. Enjoy everything from tacos to Thai with $0 delivery fees, plus dine-in or pick up at a Wonder location near you. Each dish is made to order on-site by our culinary team and served hot.Behind the scenes, Wonder owns and operates every step of the dining experience, from recipe development to the technology that powers our experience, allowing us to deliver quality, variety, and consistency at scale.*Join us as we work to make great food more accessible.***Experience*** 3–5 years of experience in identity and access management, information security, or GRC with a direct focus on identity governance* Demonstrated experience administering Okta in a production environment, including lifecycle management, SAML/OIDC app integrations, group rules, and access policies* Hands-on experience owning or contributing to access certification campaigns (joiner/mover/leaver processes, periodic access reviews)* Experience supporting or directly responding to SOX IT General Controls (ITGCs) audits, including access controls and user access review (UAR) evidence* Proven ability to document IAM policies, procedures, and control narratives suitable for external auditor consumption**Technical Skills*** Working knowledge of SAML 2.0, OIDC, OAuth 2.0, and SCIM provisioning* Familiarity with IAM governance across at least one major cloud platform (AWS IAM, Azure Entra ID / PIM, or GCP Cloud IAM)* Scripting or automation experience — Python or PowerShell applied to identity workflows (access reporting, entitlement data extraction, lifecycle automation). This is a required skill, not a preference.* Proficiency with spreadsheet tools for managing entitlement inventories, access review tracking, and audit evidence preparation* Understanding of role-based access control (RBAC), least privilege, and segregation of duties (SoD) concepts**Soft Skills & Attributes*** Able to work independently with minimal supervision on concurrent workstreams* Strong written communication skills — can produce clear policy documents, control narratives, and audit evidence packages without significant editing* Comfortable engaging application owners and business stakeholders to complete access reviews, including following up to meet deadlines* Detail-oriented with a documentation-first mindset appropriate for a SOX-controlled environment* Judgment to escalate appropriately when access anomalies or control gaps are identified**New York / New Jersey Base Salary:** $176,000-$183,500Wonder uses geographic-specific salary structures, which means the salary offered may vary depending on where the job is located. The final salary offer will take into account various factors, such as the candidate's skills, education, training, credentials, and experience.**Benefits** The benefits applicable to this role include a competitive compensation package with equity and a 401(k). We also offer a choice of medical, dental, and vision plans, company paid short and long term disability coverage, paid time off including flexible time off for exempt employees, paid vacation for non-exempt employees, and paid sick leave in compliance with applicable law in addition to paid parental leave, discounted meals and exclusive perks across the Wonder family of brands. Eligibility, effective dates, and available plan options vary by employment classification and location. To learn more about benefits for this role, visit our Careers page here. **A Final Note**At Wonder, we build the best teams by hiring with an objective lens — evaluating people for their potential while championing diversity, equity, and inclusion. We do not discriminate based on race, color, religion, gender identity or expression, sexual orientation, national origin, age, military service eligibility, veteran status, marital status, disability, or any other protected class. As part of our commitment to fair and compliant hiring practices, Wonder participates in the federal government's E-Verify program to confirm employment eligibility. If you need an accommodation during the interview process, please let your recruiter know.**We look forward to hearing from you! We'll contact you via email or text to schedule interviews and share information about your candidacy**.