Senior/Lead - Cyber Security - IAM Engineer - Identity and Governance

FICO; Northern (KY); Hybrid; USD 119,000 - 187,000; Full time

Job summary

FICO is seeking a Senior/Lead Cyber Security IAM Engineer to design and implement cloud-based IGA capabilities, shaping enterprise identity architecture and governance. You will partner with Cybersecurity and business leaders to align human and non-human identities with policy, while enabling secure access across systems.

The role emphasizes hands-on IAM engineering, federation, and PKI considerations, with opportunities to influence security posture and risk management across the organization.

Qualifications

• In-depth hands-on experience with IGA platforms such as SailPoint or Saviynt.
• Strong experience with identity infrastructure including AD, Entra ID, AWS IAM, Okta and RHIM.
• Good working knowledge of federation and access protocols: SAML, SSO, SCIM, LDAP, RADIUS, Kerberos, MFA/FIDO2 passkeys.
• Extensive hands-on experience with AWS Cloud Platform and scripting in Python.
• Security analysis experience applying Segregation of Duties and Least Privilege principles.
• Experience automating identity processes tied to HRIS systems.
• PAM, ITDR, and NHI tooling (CyberArk, HashiCorp, Delinea, Clutch) are highly desired.
• Certificate management, PKI experience, and familiarity with post-quantum cryptography concepts are a plus.
• Relevant certifications (SANS, AWS Certified Security) are a plus.
• Bachelor’s degree in computer science, Cyber Security, Information Technology, or a related field or relevant experience.

Responsibilities

• Design and implement modern, cloud-based IGA (Identity Governance and Administration) platform capabilities that scale across the enterprise.
• Partner across Cybersecurity and with business and technology leaders to shape FICO's Identity engineering strategy, including human and non-human identity domains.
• Implement and support identity-based platforms, systems, and programs spanning governance, privileged access, and federation.
• Evaluate identity services on an ongoing basis and drive recommendations that close governance gaps and reduce risk exposure.
• Guide engineering decisions using observed access patterns and behavioral data to strengthen Segregation of Duties and Least Privilege enforcement.

Skills

SailPoint

Saviynt

IGA

AWS IAM

Okta

Entra ID

Active Directory

SAML

SSO

SCIM

LDAP

RADIUS

Kerberos

MFA/FIDO2

Python

Segregation of Duties

Least Privilege

HRIS automation

PAM

ITDR

NHI tooling

CyberArk

HashiCorp

Delinea

Clutch

PKI

Post-quantum crypto

SANS

AWS Certified Security

Education

Bachelor’s degree in Computer Science, Cyber Security, Information Technology, or related field

Tools

SailPoint

Saviynt

Active Directory

Entra ID

AWS IAM

Okta

RHIM

SAML

SSO

Job description

## Senior/Lead - Cyber Security - IAM Engineer - Identity and GovernanceApply: Work from Home, United States: Full time: Posted Today: 32260**FICO (NYSE: FICO)** is a leading global analytics software company, helping businesses in 100+ countries make better decisions. Join our world-class team today and fulfill your career potential!**The Opportunity** As a Lead IAM Engineer on the Trust - Cybersecurity IAM team, you will help define how FICO manages trust and access across the enterprise. The identity architecture decision this team makes today will shape the security posture of the company for years to come. You will design and implement modern, cloud-based IGA platform capabilities that scale across the enterprise. **What You'll Contribute** * Design and implement modern, cloud-based IGA (Identity Governance and Administration) platform capabilities that scale across the enterprise.* Partner across Cybersecurity and with business and technology leaders to shape FICO's Identity engineering strategy, including human and non-human identity domains.* Implement and support identity-based platforms, systems, and programs spanning governance, privileged access, and federation.Evaluate identity services on an ongoing basis and drive recommendations that close governance gaps and reduce risk exposure.* Guide engineering decisions using observed access patterns and behavioral data to strengthen Segregation of Duties and Least Privilege enforcement. **What We're Seeking** * In-depth hands-on experience with IGA platforms such as SailPoint or Saviynt.* Strong experience with identity infrastructure including Active Directory, Entra ID, AWS IAM, Okta, and RHIM.* Good working knowledge of federation and access protocols: SAML, SSO, SCIM, LDAP, RADIUS, Kerberos, and MFA/FIDO2 passkeys.* Extensive hands-on experience with AWS Cloud Platform and good scripting and automation skills with Python.* Security analysis experience applying Segregation of Duties and Least Privilege principles.* Experience automating identity processes tied to HRIS systems.* PAM, ITDR, and NHI tooling (CyberArk, Hashi Corp, Delinea, Clutch) are highly desired.* Certificate management, PKI experience, and familiarity with post-quantum cryptography concepts are a plus.* Relevant certifications (SANS, AWS Certified Security) are a plus.* Bachelor’s degree in computer science, Cyber Security, Information Technology, or a related field or relevant experience. **Our Offer to You** * An inclusive culture strongly reflecting our core values: Act Like an Owner, Delight Our Customers and Earn the Respect of Others.* The opportunity to make an impact and develop professionally by leveraging your unique strengths and participating in valuable learning experiences.* Highly competitive compensation, benefits and rewards programs that encourage you to bring your best every day and be recognized for doing so.* An engaging, people-first work environment offering work/life balance, employee resource groups, and social events to promote interaction and camaraderie.* The targeted base pay range for this role is: $1,19,000 to $1,87,000 with this range reflecting differences in candidate knowledge, skills and experience.