Senior/Lead - Cyber Security - IAM Engineer - Identity and Governance

FICO; Oregon; Hybrid; USD 119,000 - 187,000; Full time

Benefits offered by this job

Competitive compensation

Learning and growth opportunities

Inclusive culture and social events

Job summary

FICO is seeking an Lead IAM Engineer to help define and implement cloud-based IGA capabilities across the enterprise. You will shape identity engineering strategy with cybersecurity and business leaders, implement governance, privileged access, and federation, and drive decisions using access patterns to strengthen least-privilege enforcement.

This role focuses on non-human identities and modern identity platforms.

Qualifications

• Hands-on experience with IGA platforms like SailPoint or Saviynt.
• Identity infrastructure knowledge: AD, Entra ID, AWS IAM, Okta, RHIM.
• Familiarity with federation and protocols: SAML, SSO, SCIM, LDAP, RADIUS, Kerberos, MFA/FIDO2.
• AWS Cloud proficiency and Python scripting/automation.
• Security analysis using Segregation of Duties and Least Privilege.
• Experience automating identity processes tied to HRIS systems.
• PAM, ITDR, and NHI tooling are a plus.
• Non-human identity governance focus for AI/agent workloads.

Responsibilities

• Design and implement cloud-based IGA platform capabilities at scale.
• Partner with Cybersecurity, business and tech leaders to shape identity strategy.
• Implement and support identity platforms across governance, privileged access, and federation.
• Guide engineering decisions using access patterns to strengthen SOD and LP enforcement.

Skills

IGA platforms

Identity engineering

SailPoint/Saviynt

Active Directory

Entra ID

AWS IAM

Okta

RHIM

SAML/SSO/SCIM

Python scripting

Segregation of Duties

Least Privilege

HRIS integration

Education

Bachelor's degree in Computer Science, Cyber Security, IT or related field

Tools

SailPoint

Saviynt

Active Directory

Entra ID

AWS IAM

Okta

RHIM

PKI/Certificate management

Post-quantum crypto concepts

Job description

FICO (NYSE: FICO) is a leading global analytics software company, helping businesses in 100+ countries make better decisions.

Join our world-class team today and fulfill your career potential!

The Opportunity

As a Lead IAM Engineer on the Trust - Cybersecurity IAM team, you will help define how FICO manages trust and access across the enterprise. The identity architecture decision this team makes today will shape the security posture of the company for years to come. You will design and implement modern, cloud-based IGA platform capabilities that scale across the enterprise.

What You'll Contribute

• Design and implement modern, cloud-based IGA (Identity Governance and Administration) platform capabilities that scale across the enterprise.
• Partner across Cybersecurity and with business and technology leaders to shape FICO's Identity engineering strategy, including human and non-human identity domains.
• Implement and support identity-based platforms, systems, and programs spanning governance, privileged access, and federation. Evaluate identity services on an ongoing basis and drive recommendations that close governance gaps and reduce risk exposure.
• Guide engineering decisions using observed access patterns and behavioral data to strengthen Segregation of Duties and Least Privilege enforcement.

What We're Seeking

• In-depth hands‑on experience with IGA platforms such as SailPoint or Saviynt.
• Strong experience with identity infrastructure including Active Directory, Entra ID, AWS IAM, Okta, and RHIM.
• Good working knowledge of federation and access protocols: SAML, SSO, SCIM, LDAP, RADIUS, Kerberos, and MFA/FIDO2 passkeys.
• Extensive hands‑on experience with AWS Cloud Platform and good scripting and automation skills with Python.
• Security analysis experience applying Segregation of Duties and Least Privilege principles.
• Experience automating identity processes tied to HRIS systems.
• PAM, ITDR, and NHI tooling (CyberArk, Hashi Corp, Delinea, Clutch) are highly desired.
• Strong expertise in non‑human identity (NHI) governance, with a focus on securing and managing identities for agentic AI systems, autonomous agents, and machine‑to‑machine workloads
• Certificate management, PKI experience, and familiarity with post‑quantum cryptography concepts are a plus.
• Relevant certifications (SANS, AWS Certified Security) are a plus.
• Bachelor's degree in computer science, Cyber Security, Information Technology, or a related field or relevant experience.

Our Offer to You

• An inclusive culture strongly reflecting our core values: Act Like an Owner, Delight Our Customers and Earn the Respect of Others.
• The opportunity to make an impact and develop professionally by leveraging your unique strengths and participating in valuable learning experiences.
• Highly competitive compensation, benefits and rewards programs that encourage you to bring your best every day and be recognized for doing so.
• An engaging, people‑first work environment offering work/life balance, employee resource groups, and social events to promote interaction and camaraderie.
• The targeted base pay range for this role is: $119,000 to $187,000 with this range reflecting differences in candidate knowledge, skills and experience.

Why Make a Move to FICO?

At FICO, you can develop your career with a leading organization in one of the fastest-growing fields in technology today - Big Data analytics. You'll play a part in our commitment to help businesses use data to improve every choice they make, using advances in artificial intelligence, machine learning, optimization, and much more.

FICO makes a real difference in the way businesses operate worldwide:- Credit Scoring — FICO® Scores are used by 90 of the top 100 US lenders.- Fraud Detection and Security — 4 billion payment cards globally are protected by FICO fraud systems.- Lending — 3/4 of US mortgages are approved using the FICO Score.Global trends toward digital transformation have created tremendous demand for FICO's solutions, placing us among the world's top 100 software companies by revenue. We help many of the world's largest banks, insurers, retailers, telecommunications providers and other firms reach a new level of success. Our success is dependent on really talented people - just like you - who thrive on the collaboration and innovation that’s nurtured by a diverse and inclusive environment. We’ll provide the support you need, while ensuring you have the freedom to develop your skills and grow your career. Join FICO and help change the way business thinks!

Learn more about how you can fulfil your potential atFICO promotes a culture of inclusion and seeks to attract a diverse set of candidates for each job opportunity.

We are an equal employment opportunity employer and we're proud to offer employment and advancement opportunities to all candidates without regard to race, color, ancestry, religion, sex, national origin, pregnancy, sexual orientation, age, citizenship, marital status, disability, gender identity or Veteran status. Research has shown that women and candidates from underrepresented communities may not apply for an opportunity if they don't meet all stated qualifications. While our qualifications are clearly related to role success, each candidate's profile is unique and strengths in certain skill and/or experience areas can be equally effective. If you believe you have many, but not necessarily all, of the stated qualifications we encourage you to apply.

Information submitted with your application is subject to the FICO Privacy policy at