Identity Governance Engineer — IAM Automation & SOX

GrubHub Inc.; New York (NY); On-site; USD 176,000 - 184,000; Full time

Benefits offered by this job

Equity

401(k)

Health plans

Paid time off

Job summary

Wonder is seeking an Identity Governance Engineer in New York, NY to lead identity and access management initiatives. You will own or contribute to governance programs, manage IAM tooling like Okta in production, and partner with engineering teams to strengthen access controls across multiple cloud environments.

You bring 3–5 years of IAM/ITGC experience, strong policy documentation skills, and a hands-on approach with SAML/OIDC, SCIM provisioning, RBAC, and audit-ready narratives.

Qualifications

• 3–5 years of identity and access management with a focus on identity governance.
• Production Okta administration including lifecycle, SAML/OIDC integrations.
• Experience owning or contributing to access certification campaigns (joiner/mover/leaver).
• Support SOX IT General Controls audits and provide UAR evidence.
• Knowledge of SAML 2.0, OIDC, OAuth 2.0, SCIM provisioning.
• Understanding RBAC, least privilege, and SoD concepts.

Responsibilities

• Lead or contribute to access reviews and certification campaigns.
• Document IAM policies, procedures, and control narratives for auditors.
• Collaborate with application owners to complete reviews and meet deadlines.

Skills

Identity governance

Okta administration

Access certification

ITGC audits

SAML 2.0

OIDC

OAuth 2.0

SCIM provisioning

RBAC/SoD

Python/PowerShell

Audit evidence

Job description

Wonder is seeking an Identity Governance Engineer in New York, NY to lead identity and access management initiatives. You will own or contribute to governance programs, manage IAM tooling like Okta in production, and partner with engineering teams to strengthen access controls across multiple cloud environments.

You bring 3–5 years of IAM/ITGC experience, strong policy documentation skills, and a hands-on approach with SAML/OIDC, SCIM provisioning, RBAC, and audit-ready narratives.