Senior Identity & Access Management Engineer (Enterprise Systems)(Remote)

Fanatics; New York (NY); Hybrid; USD 134.000 - 167.000; Vollzeit

Benefits dieser Stelle

Remote work in the US

Zusammenfassung

Fanatics Betting and Gaming is seeking a Senior Identity & Access Management Engineer to own Okta administration and the portfolio of SaaS integrations within Enterprise Systems. This remote US-based role focuses on secure, scalable identity and access management across the organization.

You will collaborate with InfoSec, HRIS and SaaS owners to implement SSO, MFA, RBAC and Zero Trust, while developing automation and runbooks for lifecycle management and governance.

Qualifikationen

• 5+ years in enterprise IT/systems engineering
• 2+ years hands-on Okta administration
• Strong command of SSO protocols (SAML, OIDC, OAuth)
• Experience securing major SaaS platforms in regulated environments
• Automation skills with scripting and orchestration tools

Aufgaben

• Lead Okta administration and IAM architecture
• Develop scalable automated onboarding/offboarding workflows
• Implement Zero Trust and RBAC policies
• Evaluate and onboard new SaaS tools with security/compliance in mind
• Collaborate with InfoSec, HRIS and business units on IAM strategies
• Contribute to roadmaps, runbooks, and on-call incident response

Kenntnisse

Okta administration

SSO protocols (SAML, OIDC, OAuth)

Automation & scripting (Python, Power

REST APIs

Jira / Agile

Terraform / IaC

Tools

Okta Workflows

REST APIs

Terraform

Python

PowerShell

Postman

Jobbeschreibung

Senior Identity & Access Management Engineer (Enterprise Systems)(Remote)

New York, NY, United States

About Us

Fanatics is building a leading global digital sports platform. We ignite the passions of global sports fans and maximize the presence and reach for our hundreds of sports partners globally by offering products and services across Fanatics Commerce, Fanatics Collectibles, and Fanatics Betting & Gaming, allowing sports fans to Buy, Collect, and Bet. Through the Fanatics platform, sports fans can buy licensed fan gear, jerseys, lifestyle and streetwear products, headwear, and hardgoods; collect physical and digital trading cards, sports memorabilia, and other digital assets; and bet as the company builds its Sportsbook and iGaming platform. Fanatics has an established database of over 100 million global sports fans; a global partner network with approximately 900 sports properties, including major national and international professional sports leagues, players associations, teams, colleges, college conferences and retail partners, 2,500 athletes and celebrities, and 200 exclusive athletes; and over 2,000 retail locations, including its Lids retail stores. Our more than 22,000 employees are committed to relentlessly enhancing the fan experience and delighting sports fans globally.

About the Team

Launched in 2021, Fanatics Betting and Gaming is the online and retail sports betting subsidiary of Fanatics, a global digital sports platform. The Fanatics Sportsbook is available to 95% of the addressable online sports bettor market in the U.S. Fanatics Casino is currently available online in Michigan, New Jersey, Pennsylvania and West Virginia. Fanatics Betting and Gaming operates twenty-two retail sports betting locations, including the only sportsbook inside an NFL stadium at Northwest Stadium. Fanatics Betting and Gaming is headquartered in New York with offices in Denver, Leeds and Dublin. This is remote position based in the US.

Fanatics Betting & Gaming (FBG) is seeking a highly capable Senior Systems Engineer to join our Enterprise Systems team, with a primary focus on Okta administration and managing the portfolio of SaaS platforms. In this role, you'll be responsible for implementing and maintaining secure, scalable identity and access management solutions, as well as supporting the lifecycle and integration of key SaaS applications. This is a hands‑on, technical role requiring strong collaboration, problem-solving skills, and a solid understanding of modern enterprise IT systems.

Responsibilities

• Advanced Identity Architecture: Lead the administration and enhancement of Okta, including the design of SSO, MFA, and complex Lifecycle Management (LCM) strategies.
• Strategic Automation: Develop and maintain high‑scale automated workflows using Okta Workflows, REST APIs, and identity orchestration tools to ensure seamless onboarding, offboarding, and access governance.
• IAM & Zero Trust Strategy: Contribute to the enterprise IAM strategy, implementing Zero Trust architecture and robust Role‑Based Access Control (RBAC) policies across the organization.
• SaaS Portfolio Management: Evaluate and lead the technical onboarding of new SaaS tools, ensuring they meet strict security, compliance, and integration standards.
• Cross‑Functional Collaboration: Partner deeply with InfoSec, HRIS, and other business units to ensure identity platforms align with organizational growth and security requirements.
• Incident Leadership & COEs: Participate in incident response and root cause analysis (COEs); serve as the ultimate escalation point for the most complex platform issues.
• Roadmapping & Improvement: Contribute to enterprise systems roadmaps and tool selection, identifying opportunities for continuous improvement and operational efficiency.
• High‑Level Documentation: Author comprehensive technical standards, system configurations, and procedural runbooks to support audit, compliance, and team knowledge sharing.
• Participate in on‑call rotation.

Experience and Skills

• 5+ years of experience in enterprise IT or systems engineering, with at least 2 years of deep, hands‑on experience specifically in Okta administration.
• Protocol Expertise: Strong command of SSO protocols (SAML, OIDC, OAuth) and modern IAM best practices.
• Enterprise SaaS Management: Proven experience integrating and securing major SaaS platforms in a high‑growth, regulated environment.
• Technical Automation: Proficiency with scripting and automation tools, including Python, PowerShell, Postman, and Okta Workflows.
• API Integration: Expert ability to work with REST APIs for complex system integration and data orchestration.
• Agile Proficiency: Extensive experience working in an Agile, sprint‑based environment, utilizing Jira for sprint planning and progress tracking.

Nice to Have

• Certifications: Okta Certified Professional or Administrator (Okta Certified Consultant is a plus).
• Governance Experience: Familiarity with identity governance tools or privileged access management.
• Infrastructure as Code (IaC): Experience using tools like Terraform to manage cloud identity or SaaS configurations.
• ITSM Knowledge: Familiarity with professional ITSM frameworks and service delivery processes.
• Leadership Qualities: A natural inclination toward mentoring others and contributing to architectural discussions.

Depending on the role, your interview and onboarding experience may include in‑person components, such as onsite interviews or Launching into Better: LIVE—a multi‑day cultural immersion in New York City for full‑time, non‑seasonal hires. These sessions are designed to build connection and bring our culture to life, though specific travel and participation requirements will be confirmed based on your role and location. Your recruiter will provide clear guidance at each stage of the process.

Ranges will change based on country and state of residence, which are reflected in Geographical Zones defined by Fanatics Betting and Gaming. The range incorporates all of our Geographical Compensation Zones and is subject to change as the Zone associated with the actual offer is confirmed. In addition to the base and bonus, full‑time employment, and more. For information about our benefits, please visit https://benefitsatfanatics.com/

Salary Range

$133,920 - $167,400 USD

Voluntary Self-Identification

For government reporting purposes, we ask candidates to respond to the below self‑identification survey. Completion of the form is entirely voluntary. Whatever your decision, it will not be considered in the hiring process or thereafter. Any information that you do provide will be recorded and maintained in a confidential file.

As set forth in Fanatics Betting & Gaming’s Equal Employment Opportunity policy, we do not discriminate on the basis of any protected group status under any applicable law.

If you believe you belong to any of the categories of protected veterans listed below, please indicate by making the appropriate selection. As a government contractor subject to the Vietnam Era Veterans Readjustment Assistance Act (VEVRAA), we request this information in order to measure the effectiveness of the outreach and positive recruitment efforts we undertake pursuant to VEVRAA. Classification of protected categories is as follows:

A "disabled veteran" is one of the following: a veteran of the U.S. military, ground, naval or air service who is entitled to compensation (or who but for the receipt of military retired pay would be entitled to compensation) under laws administered by the Secretary of Veterans Affairs; or a person who was discharged or released from active duty because of a service‑connected disability.

A "recently separated veteran" means any veteran during the three‑year period beginning on the date of such veteran's discharge or release from active duty in the U.S. military, ground, naval, or air service.

An "active duty wartime or campaign badge veteran" means a veteran who served on active duty in the U.S. military, ground, naval or air service during a war, or in a campaign or expedition for which a campaign badge has been authorized under the laws administered by the Department of Defense.

An "armed forces service medal veteran" means a veteran who, while serving on active duty in the U.S. military, ground, naval or air service, participated in a United States military operation for which an Armed Forces service medal was awarded pursuant to Executive Order 12985.