Identity Governance Engineer — IAM & Compliance

Wonder; New York (NY); On-site; USD 176,000 - 184,000; Full time

Benefits offered by this job

Equity

401(k)

Medical plan

Dental plan

Vision plan

Disability insurance

PTO & parental leave

Meal discounts

Job summary

Wonder in New York is seeking an Identity & Access Management professional to own and advance access governance, policy documentation, and audit readiness. You will work with application owners to drive timely access reviews and strengthen control narratives for SOX compliance.

You will contribute to lifecycle management across SAML/OIDC app integrations, and help enforce RBAC and least privilege in a multi‑cloud environment, supporting a security‑minded culture.

Qualifications

• 3–5 years of experience in identity and access management, information security, or GRC with a direct focus on identity governance.
• Experience administering Okta in production, including lifecycle management, SAML/OIDC app integrations, group rules, and access policies.
• Hands‑on experience owning or contributing to access certification campaigns (joiner/mover/leaver processes, periodic access reviews)
• Experience supporting or directly responding to SOX IT General Controls (ITGCs) audits, including access controls and user access review (UAR) evidence
• Proven ability to document IAM policies, procedures, and control narratives suitable for external auditor consumption

Responsibilities

• Own or contribute to access review campaigns and control attestations.
• Document IAM policies, procedures, and control narratives for auditors.
• Engage with application owners and stakeholders to complete timely access reviews.
• Support SOX ITGC audits with evidence of access controls and reviews.
• Maintain RBAC concepts and least‑privilege across cloud environments.

Skills

Identity governance

Policy documentation

Stakeholder engagement

Independent work

SOX awareness

Tools

SAML 2.0

OIDC

OAuth 2.0

SCIM provisioning

Cloud IAM (AWS/Azure/GCP)

Job description

Wonder in New York is seeking an Identity & Access Management professional to own and advance access governance, policy documentation, and audit readiness. You will work with application owners to drive timely access reviews and strengthen control narratives for SOX compliance.

You will contribute to lifecycle management across SAML/OIDC app integrations, and help enforce RBAC and least privilege in a multi‑cloud environment, supporting a security‑minded culture.