Senior IAM Engineer (Okta) – Hybrid NYC, Equity, PTO

VulnU; New York (NY); Hybrid; USD 162,000 - 190,000; Full time

Benefits offered by this job

16 weeks parental leave

Unlimited PTO

Retirement match

Home-office stipend

Equity

Job summary

Alloy is seeking a Senior IT Security Engineer to lead workforce identity and access management in New York City. You will be the primary SME for Okta, SaaS access, and identity automation, ensuring secure SSO and lifecycle workflows across HRIS and downstream SaaS.

We value expertise in SAML/OIDC, SCIM provisioning, OAuth, and PAM/TPAM. This role operates in a hybrid environment with in-person days at the NYC HQ and remote work options.

Qualifications

• Hands-on experience with Okta or similar workforce identity platforms.
• Experience administering IdP groups, policies, MFA, and admin roles.
• Experience with SAML/OIDC SSO, SCIM provisioning, and OAuth.
• Experience automating access workflows via APIs or scripts.
• Familiarity with RBAC/ABAC, least privilege, and access reviews.

Responsibilities

• Own workforce identity management including Okta groups, MFA, and admin roles.
• Manage SaaS access and SSO integrations using SAML/OIDC.
• Automate identity lifecycles from HRIS to downstream SaaS.
• Handle RBAC/ABAC, access reviews, and privileged access management.
• Support IAM governance and ISO 27001 / SOC 2 compliance activities.

Skills

Strong troubleshooting

Documentation

Communication

Team collaboration

Tools

Okta

SAML

OIDC

SCIM provisioning

OAuth

Google Workspace

HRIS integration

APIs/scripts

Job description

Alloy is seeking a Senior IT Security Engineer to lead workforce identity and access management in New York City. You will be the primary SME for Okta, SaaS access, and identity automation, ensuring secure SSO and lifecycle workflows across HRIS and downstream SaaS.

We value expertise in SAML/OIDC, SCIM provisioning, OAuth, and PAM/TPAM. This role operates in a hybrid environment with in-person days at the NYC HQ and remote work options.