identity governance engineer

Openkyber

<div>Role Summary: The IAM Integration Engineer is responsible for designing, developing, and delivering robust integrations that support the secure onboarding and lifecycle management of connected applications within the enterprise Identity and Access Management (IAM) ecosystem. This role requires deep hands on experience with IIQ connector engineering, aggregation pipelines, provisioning workflows, plugin/rule development, and enterprise grade data transformations supporting onboarding automation. You will collaborate closely with IAM engineering, IAM integration team, application teams, and security/compliance stakeholders to deliver high quality, audit ready identity services that meet enterprise regulatory and operational standards.
Key Responsibilities:
<ul><li>Identity Integration &amp; Connector Engineering: Develop and maintain integration components across IAM/IGA platforms, with current emphasis on SailPoint IdentityIQ. Build and tune aggregation connectors, including REST, SOAP, JDBC, AD/LDAP, and custom connector patterns. Implement schema discovery, entitlement modeling, correlation logic, and provisioning policies to ensure accurate identity lifecycle operations. Develop secure, reusable Java-based components including rules, plugins, workflows, and JAR modules leveraging SailPoint's object model and best practice coding standards. Drive connector enhancements, refactors, defect resolution, and performance optimization. Design onboarding patterns for new application integrations, including standardized templates for schemas, correlation, provisioning, and entitlement modeling. Implement connector-level error handling, retry logic, and reconciliation tuning to ensure reliability and auditability of identity operations. Develop extensible integration frameworks that support future connectors, custom endpoints, and reusable provisioning logic.</li>
<li>Data Engineering &amp; Transformation: Build and maintain robust identity data flows across SQL Server and/or Oracle environments. Develop schema mapping logic, attribute transformation routines, and normalization rules for account, entitlement, and role data. Troubleshoot data integrity issues, reconcile inconsistencies, and ensure completeness/accuracy of identity data sources.</li>
<li>Application Onboarding Automation: Engineer onboarding automation frameworks supporting metadata ingestion, entitlement cataloging, user-to-entitlement assignments, and lifecycle management. Build bulk-data workflows with rollback, validation, tracking, and audit evidence. Create standardized onboarding templates, scripts, and validation utilities to accelerate application integration efficiency.</li>
<li>CI/CD &amp; Environment Promotion: Implement Git driven workflows for version control, code review, and artifact promotion across DEV, IT, UAT, and PROD environments. Package, test, and deploy rulesets, workflows, and integration modules using standardized release governance. Maintain environment configuration parity and support deployment verification during go live.</li>
<li>Testing &amp; Quality Assurance: Write and execute unit tests, system integration tests (SIT), user acceptance tests (UAT), and production validation tests. Conduct root cause analysis for defects and coordinate with development, operations, and application teams for remediation. Ensure integration changes adhere to enterprise quality, reliability, and security expectations.</li>
<li>IAM Security, Governance &amp; Compliance: Apply IAM governance principles including Segregation of Duties (SoD), auditability, certification processes, and evidence capture. Ensure integrations meet SOX, SOC, internal audit, and enterprise security standards. Create documentation supporting audit readiness design documents, test evidence, deployment runbooks, and compliance mappings.</li>
<li>Collaboration &amp; Technical Leadership: Partner with application owners, IAM engineering teams, security architects, and platform admins to design scalable integration solutions. Translate requirements into technical designs and provide guidance on integration patterns and identity best practices. Deliver knowledge transfer sessions to operational teams and contribute to shared engineering standards.</li>
</ul>Required Skills &amp; Qualifications:
<ul><li>Technical Skills: 4 7+ years of experience in IAM/IGA engineering roles. Hands on experience with SailPoint IdentityIQ. Strong Java (JDK 8+) engineering background, including plugin, rule, and JAR development. Proficiency with SQL Server and/or Oracle; advanced understanding of relational identity data structures. Expertise in REST/SOAP APIs, schema mapping, ETL like transformations, and integration pipelines. Familiarity with IGA object models and identity data constructs (accounts, entitlements, roles, policies).</li>
<li>IAM &amp; Security Skills: Solid understanding of identity lifecycle management, provisioning/deprovisioning processes, and governance workflows. Experience applying IAM controls such as SoD, recertification, audit trails, and privileged access standards. Knowledge of authentication and directory technologies (AD/LDAP, cloud identity providers, SCIM, SSO/MFA patterns).</li>
<li>DevOps &amp; Delivery Skills: Experience with Git-based CI/CD workflows, environment promotion, and release governance. Strong testing discipline across unit, integration, and functional testing. Ability to build reusable, scalable integration frameworks and adhere to secure coding practices.</li>
<li>Soft Skills: Excellent communication and documentation capabilities. Ability to lead discussions with technical and non technical users. Strong analytical problem solving skills and high accountability for quality and reliability.</li>
<li>Preferred Qualifications: Experience with cloud-based identity systems (Azure AD/Entra ID, Okta, Saviynt, ForgeRock, etc.). Knowledge of scripting languages (Python, PowerShell, Groovy). Experience building identity integrations in highly regulated environments. Background in data engineering or API orchestration.</li>
</ul>Success Criteria: Delivery of accurate, high performing identity integrations with minimal production defects. Reduction in onboarding cycle time through automation and reusable integration frameworks. Strong cross team collaboration enabling smooth onboarding of applications and identity data sources. Compliance with security, audit, and governance requirements across all integration activities.
For applications and inquiries, contact: hirings@openkyber.com</div>

Okta IAM Engineer

Agoda

<div>
 
 About Agoda
 
 
 
 At Agoda, we bridge the world through travel. Our story began in 2005, when two lifelong friends and entrepreneurs, driven by their passion for travel, launched Agoda to make it easier for everyone to explore the world.
 
 
 Today, we are part of Booking Holdings [NASDAQ: BKNG], with a diverse team of over 7,000 people from 90 countries, working together in offices around the globe. Every day, we connect people to destinations and experiences, with our great deals across our millions of hotels and holiday properties, flights, and experiences worldwide.
 
 
 No two days are the same at Agoda. Data and technology are at the heart of our culture, fueling our curiosity and innovation. If you&rsquo;re ready to begin your best journey and help build travel for the world, join us.
 
 
 
 Role Overview:
 
 
 
 We are looking for a hands on Identity Security Engineer to design, build, and operate Okta platform. This role owns the implementation and evolution of Okta Identity Governance, lifecycle automation, and identity centric security controls across the enterprise.
 
 
 
 Key Responsibilities:
 
 
 
 <ul>
 <li>
 Okta Identity Governance (OIG) &amp; Lifecycle: Design and deploy Okta Identity Governance modules, including Access Requests, Certifications, and Entitlement Management.
 </li>
 <li>
 Develop and maintain custom workflows and policies within Okta IGA to enforce Segregation of Duties (SOD) rules during provisioning and access requests
 </li>
 <li>
 Design access certification campaigns and remediation workflows to satisfy audit requirements.
 </li>
 <li>
 Okta Platform Engineering: Manage Okta organization architecture (Groups, Rules, Policies) using Infrastructure-as-Code (Terraform) to ensure version control and reduce drift.
 </li>
 <li>
 Build and maintain Okta Workflows for lifecycle automation, custom notifications, and advanced logic beyond native features. Implement and enforce Multi-Factor Authentication (MFA) policies, Risk-Based Authentication, and Global Session Policies.
 </li>
 <li>
 Automation &amp; Integration: Develop automation using Okta APIs, Event Hooks, and Workflows. Integrate Okta OIG with downstream applications for seamless provisioning.
 </li>
 <li>
 Partner with Detection Engineering to ingest Okta System Logs into the SIEM for threat monitoring.
 </li>
 <li>
 Governance, Risk &amp; Compliance: Partner with GRC and Audit teams to support SOX, NIST requirements.
 </li>
 <li>
 Ensure identity controls are measurable, auditable, and enforced consistently.
 
 
 </li>
 </ul>
 
 Required Skills &amp; Experience:
 
 
 
 <ul>
 <li>
 6+ years of hands-on experience operating Okta in a production environment.
 </li>
 <li>
 Experience with Okta Identity Governance (OIG): Setting up Access Requests, Review Campaigns, and Entitlements.
 </li>
 <li>
 Experience with Terraform (specifically the Okta Provider) for managing configuration as code.
 </li>
 <li>
 Ability to write scripts in Python or JavaScript/TypeScript for custom API integrations.
 
 
 </li>
 </ul>
 #sanfrancisco #sanjose #losangeles #sandiego #oakland #denver #miami #orlando #atlanta #chicago #boston #detroit #newyork #portland #philadelphia #dallas #houston #austin #seattle #sydney #melbourne #perth #toronto #vancouver #montreal #shanghai #beijing #shenzhen #prague #Brno #Ostrava #cairo #alexandria #giza #estonia #paris #berlin #munich #hamburg #stuttgart #cologne #frankfurt #hongkong #budapest #jakarta #bali #dublin #telaviv #milan #rome #venice #florence #naples #turin #palermo #bologna #tokyo #osaka #kualalumpur #malta #amsterdam #oslo #manila #warsaw #krakow #doha #alrayyan #riyadh #jeddah #mecca #medina #singapore #seoul #barcelona #madrid #stockholm #zurich #taipei #tainan #taichung #kaohsiung #bangkok #Phuket #istanbul #london #manchester #edinburgh #hcmc #hanoi #lodz #wroclaw #poznan #katowice #rio #salvador #newdelhi #bangalore #bandung #yokohama #nagoya #okinawa #fukuoka #jerusalem #IT #4
 
 
 Please review our Hiring Process Guidelines before your interview &mdash; click here to learn how interviewing at Agoda works.
 
 
 
 Discover More About Working At Agoda
 
 
 
 <ul>
 <li>
 Agoda Careers https://careersatagoda.com
 </li>
 <li>
 Facebook https://www.facebook.com/agodacareers/
 </li>
 <li>
 LinkedIn https://www.linkedin.com/company/agoda
 </li>
 <li>
 YouTube https://www.youtube.com/agodalife
 
 
 </li>
 </ul>
 
 Equal Opportunity Employer
 
 
 
 At Agoda, we pride ourselves on being a company represented by people of all different backgrounds and orientations. We prioritize attracting diverse talent and cultivating an inclusive environment that encourages collaboration and innovation. Employment at Agoda is based solely on a person&rsquo;s merit and qualifications. We are committed to providing equal employment opportunity regardless of sex, age, race, color, national origin, religion, marital status, pregnancy, sexual orientation, gender identity, disability, citizenship, veteran or military status, and other legally protected characteristics.
 
 
 We will keep your application on file so that we can consider you for future vacancies and you can always ask to have your details removed from the file. For more details please read our privacy policy.
 
 
 
 Disclaimer
 
 
 
 We do not accept any terms or conditions, nor do we recognize any agency&rsquo;s representation of a candidate, from unsolicited third-party or agency submissions. If we receive unsolicited or speculative CVs, we reserve the right to contact and hire the candidate directly without any obligation to pay a recruitment fee.
 
 
</div>

Identity Security Engineer (Okta & Identity Governance) - Bangkok Based, Relocation provided

IonQ

<div><div>About IonQ: 

IonQ, Inc. [NYSE: IONQ] is the world's leading quantum platform and merchant supplier - delivering integrated quantum solutions across computing, networking, sensing, and security. IonQ's newest generation of quantum computers, the IonQ Tempo, is the latest in a line of cutting-edge systems that have been helping customers and partners including Amazon Web Services, and AstraZeneca achieve 20x performance results and accelerate innovation in drug discovery, materials science, financial modeling, logistics, cybersecurity, and defense. In 2025, the company achieved 99.99% two-qubit gate fidelity, setting a world record in quantum computing performance. 
 
Headquartered in College Park, Maryland, IonQ has operations in California, Colorado, Massachusetts, Tennessee, Washington, Italy, South Korea, Sweden, Switzerland, Canada, and the United Kingdom. Our quantum computing services are available through all major cloud providers, while we also meet the needs of networking and sensing customers across land, sea, air, and space. IonQ is making quantum platforms more accessible and impactful than ever before.</div>
This Senior IAM Engineer will own the Okta for Government High (FedRAMP High) tenant, which serves as the enterprise Identity Provider and Identity Governance platform for a 1,500+ user organization. The role is the primary technical resource responsible for the build, enhancement, and operation of key functions, including SSO integrations, Identity Governance (OIG), Lifecycle Management, Workflows automation, and Adaptive MFA policy.

In the first three months, you will help develop the core program documentation and workflows. You will collaborate with external teams like IT, Legal and People to integrate into company processes. You will work with our technical security experts to build Identity and Access management processes and procedures. 

Responsibilities
<ul>
<li>Own the Okta for Government High (FedRAMP High) tenant &mdash; configuration, health, lifecycle, and security posture</li>
<li>Manage Universal Directory: on-prem AD Agent sync, HRIS attribute mastering, profile mappings, and group rules</li>
<li>Build and maintain all SSO app integrations via the Okta Integration Network (OIN) using SAML, OIDC, and SCIM</li>
<li>Own and maintain Okta Adaptive MFA policies: factor enrollment rules, risk-based step-up authentication, FIDO2/YubiKey/PIV/CAC configuration</li>
<li>Maintain the Okta System Log to Microsoft Sentinel log streaming pipeline and retention configuration</li>
<li>Own Okta Identity Governance (OIG): entitlement catalog, access certification campaign setup, SoD policy rules, and access request workflow design</li>
<li>Own, Build and Maintain Okta Lifecycle Management: JML automation rules, HRIS connector configuration, and auto-provisioning and deprovisioning into all connected applications, access review triggers, and automated remediation</li>
<li>Design, build, and document all Okta-side enhancements including new app onboarding, policy changes, and IGA configuration updates</li>
<li>Write test cases for all Okta-side changes; execute UAT jointly with the Identity Governance &amp; Operations Analyst before production promotion</li>
<li>Support Identity Operations Specialist on Tier 2 Okta escalations and Workflow troubleshooting</li>
<li>Assist Identity Governance &amp; Operations Analyst with OIG campaign configuration and certification reporting</li></ul> 
 
Requirements:
<ul>
<li>4+ years of hands-on Okta administration and engineering experience</li>
<li>Demonstrated experience with Okta SSO app integrations via SAML 2.0 and OIDC</li>
<li>Experience with Okta Lifecycle Management and HRIS connector configuration</li>
<li>Experience building Okta Workflows for provisioning automation</li>
<li>Experience with Okta Adaptive MFA policy configuration including FIDO2/WebAuthn and hardware token enrollment</li>
<li>Experience with Okta Universal Directory including AD Agent deployment and profile mastering</li></ul> 


Compliance Requirements: this role will be subject to US Federal regulations, therefore:
<ul>
<li>Must be a U.S. Citizen or Lawful Permanent Resident (Green Card holder) &mdash; U.S. Person</li>
<li>Ability to obtain and maintain a security clearance or pass a background investigation consistent with CUI access</li> 
</ul>
Preferred Qualifications:
<ul><li>Experience with Okta for Government High (FedRAMP High) or FedRAMP Moderate environments &mdash; strong preference</li>
<li>Okta Identity Governance (OIG) experience &mdash; access certifications, SoD, entitlement management</li>
<li>Experience federating Okta to Microsoft Entra ID / GCCH as a SAML Service Provider</li>
<li>Familiarity with CMMC, ITAR, GDPR, SOX, SOC 2 compliance requirements</li>
<li>Experience with SCIM 2.0 provisioning to downstream applications</li>
<li>Okta Identity Governance certification (preferred)</li></ul> 
 
The approximate base salary range for this position is $126,887 - $166,127. The total compensation package includes base, bonus, equity, and a range of benefit options found on our career site. 


Location: This role is based out of our College Park, Boulder, CO, or Bothell, WA offices, or can be remote in the US. 
Travel: Up to 1 week per quarter 
Job ID: 1460<div>
Compensation will vary based on individual factors such as education, qualifications, and experience of the final candidate(s), specific office location, and calibration against relevant market data and internal team equity. Posted base salary figures are subject to change as new market data becomes available. Our benefits include comprehensive medical, dental, and vision plans, matching 401K, unlimited PTO and paid holidays, parental/adoption leave, legal insurance, and a home technology stipend. Details of participation in these benefit plans will be provided when a candidate receives an offer of employment.

At IonQ, we believe in fair treatment, access, opportunity, and advancement for all while striving to identify and eliminate barriers. We empower employees to thrive by fostering a culture of autonomy, productivity, and respect. We are dedicated to creating an environment where individuals can feel welcomed, respected, supported, and valued. 
 
We are committed to equity and justice. We welcome different voices and viewpoints and do not discriminate on the basis of race, religion, ancestry, physical and/or mental disability, medical condition, genetic information, marital status, sex, gender, gender identity, gender expression, transgender status, age, sexual orientation, military or veteran status, or any other basis protected by law. We are proud to be an Equal Employment Opportunity employer.

US Technical Jobs. The position you are applying for will require access to technology that is subject to U.S. export control and government contract restrictions. Employment with IonQ is contingent on either verifying &quot;U.S. Person&quot; (e.g., U.S. citizen, U.S. national, U.S. permanent resident, or lawfully admitted into the U.S. as a refugee or granted asylum) status for export controls and government contracts work, obtaining any necessary license, and/or confirming the availability of a license exception under U.S. export controls. Please note that in the absence of confirming you are a U.S. Person for export control and government contracts work purposes, IonQ may choose not to apply for a license or decline to use a license exception (if available) for you to access export-controlled technology that may require authorization, and similarly, you may not qualify for government contracts work that requires U.S. Persons, and IonQ may decline to proceed with your application on those bases alone. Accordingly, we will have some additional questions regarding your immigration status that will be used for export control and compliance purposes, and the answers will be reviewed by compliance personnel to ensure compliance with federal law.
US Non-Technical Jobs. Due to applicable export control laws and regulations, candidates must be a U.S. citizen or national, U.S. permanent resident (i.e., current Green Card holder), or lawfully admitted into the U.S. as a refugee or granted asylum. Accordingly, we will have some additional questions regarding your immigration status that will be used for export control and compliance purposes, and the answers will be reviewed by compliance personnel to ensure compliance with federal law.

If you are interested in being a part of our team and mission, we encourage you to apply!</div></div>

Senior IAM Engineer (Okta)

Booz Allen Hamilton

<div>Privileged Access Manager Engineer
The Opportunity:
Everyone knows security needs to be &ldquo;baked in&rdquo; to a system architecture, but you know how to bake it in. You can identify and implement ways to harden systems and reduce their attack surface. What if you could use your cyber engineering skills to design and build secure systems for a federal government Identity and Access Management (IdAM) program? We&rsquo;re looking for a Radiant Logic (RL) engineer who can help to create solutions that will stand up to even the most advanced cyber threats.
You&rsquo;ll work with our existing client IdAM team to identify techniques to translate your customer&rsquo;s needs and future goals into a plan that will enable secure and effective solutions. We need to come up with the best solution, so you&rsquo;ll investigate new techniques, break free from the legacy model, and go where the industry is going. As a team, we&rsquo;ll take a critical approach to network design, providing alternatives and customizing solutions to maintain a balance of security and mission needs. This is a chance to learn from a team of experts as you make a difference in security. Join our team as we strive to stand up and maintain a world-class IdAM program for our client.
Join us. The world can&rsquo;t wait.
You Have:<ul><li>
3+ years of experience supporting ICAM, Security Operations, or Identity Governance programs</li><li>
3+ years of experience with administration of directory services such as Active Directory or LDAP</li><li>
3+ years of experience with cybersecurity administration, including identity lifecycle management</li><li>
Experience with Privileged Access Management (PAM) such as CyberArk or Delinea</li><li>
Experience supporting IAM solutions in cloud environments such as Azure or AWS</li><li>
Knowledge of PKI, PIV standards, and identity security best practices</li><li>
Knowledge of identity-focused cybersecurity principles and controls</li><li>
Ability to analyze technical documentation and incorporate industry best practices and security findings</li><li>
TS/SCI clearance</li><li>
HS diploma or GED</li></ul>
Nice If You Have:<ul><li>
Experience with consultative project management in an IT environment</li><li>
Experience with COTS IAM tools, including Microsoft Identity Manager, SailPoint, Saviynt, or One Identity</li><li>
Experience with Splunk or ELK stack preferred</li><li>
Experience supporting enterprise IAM solution delivery projects</li><li>
Experience with project management including schedules, complex problem resolution or performance management</li><li>
Knowledge of troubleshooting processes and standards for IGA or PAM</li></ul>
Clearance:
Applicants selected will be subject to a security investigation and may need to meet eligibility requirements for access to classified information; TS/SCI clearance is required.
Compensation
At Booz Allen, we celebrate your contributions, provide you with opportunities and choices, and support your total well-being. Our offerings include health, life, disability, financial, and retirement benefits, as well as paid leave, professional development, tuition assistance, work-life programs, and dependent care. Our recognition awards program acknowledges employees for exceptional performance and superior demonstration of our values. Full-time and part-time employees working at least 20 hours a week on a regular basis are eligible to participate in Booz Allen&rsquo;s benefit programs. Individuals that do not meet the threshold are only eligible for select offerings, not inclusive of health benefits. We encourage you to learn more about our total benefits by visiting the Resource page on our Careers site and reviewing Our Employee Benefits page.
Salary at Booz Allen is determined by various factors, including but not limited to location, the individual&rsquo;s particular combination of education, knowledge, skills, competencies, and experience, as well as contract-specific affordability and organizational requirements. The projected compensation range for this position is $86,800.00 to $198,000.00 (annualized USD). The estimate displayed represents the typical salary range for this position and is just one component of Booz Allen&rsquo;s total compensation package for employees. This posting will close within 90 days from the Posting Date.
Identity Statement
As part of the hiring process, we will ask you to complete an identity verification process that leverages advanced biometrics and artificial intelligence to ensure authenticity and protect against identity fraud. You are expected to be on camera during interviews and assessments. We reserve the right to take your picture to verify your identity and prevent fraud.
Candidate AI Usage Policy
AI is a part of our daily work at Booz Allen, and we are committed to the responsible and ethical use of AI tools. However, we want to ensure a fair candidate process based on your own skills and knowledge. As part of this commitment, the use of artificial intelligence (AI) or other tools to assist with responses during interviews (whether in-person or virtual) is prohibited unless permission is explicitly provided.
Work Model 
Our people-first culture prioritizes the benefits of collaboration, whether it occurs in person or virtually. To support engagement and effective communication, employees working virtually are generally expected to have their cameras on during meetings.<ul><li>
Remote: If this position is listed as remote, there may still be occasions when you are required to work in person at a Booz Allen or customer facility.</li><li>
Hybrid: If this position is listed as hybrid, you will be expected to work from a Booz Allen facility frequently, in alignment with leadership expectations and the needs of the role. You may also be required to work from or visit a customer facility.</li><li>
Onsite: If this position is listed as onsite, work will primarily be performed at a Booz Allen office or customer facility, where employees will collaborate directly with colleagues and customers as required by the role.</li></ul>
Commitment to Non-Discrimination
All qualified applicants will receive consideration for employment without regard to disability, status as a protected veteran or any other status protected by applicable federal, state, local, or international law.</div>

Privileged Access Manager Engineer

USDM Life Sciences

<div>About USDM

USDM Life Sciences is a premier consulting company with 20+ years of experience assisting heavily regulated biotech, medical device, and pharmaceutical companies with their GxP technologies to accelerate growth. Our deep domain knowledge and technology expertise in life sciences business processes are what set us apart. From strategy to implementation and adoption, we have delivered thousands of GxP projects globally.

As part of the USDM team, you have the opportunity to work with cutting-edge technologies through our many partnerships with companies like Microsoft, Google, Oracle, DocuSign, Box, and many more. From molecule to market, you will help connect technology, people, and data in new ways to generate real-time insights to improve business outcomes for USDM&rsquo;s clients. Are you ready to make an impact and drive real digital transformation in life sciences?

Founded in Santa Barbara in 1999, USDM has grown to a progressive, global company with 300+ remote employees and offices throughout the US, Canada, and Germany.

Nature and Scope of Job

The Identity &amp; Access Management (IAM) Engineer II develops, implements, and manages the operation of Client&rsquo;s IAM systems and processes. They will work with business partners and cross-functional teams to provide Identity and Access Management strategies, roadmaps, and program related items to improve the posture of Client&rsquo;s IAM practice.

Primary Responsibilities
<ul>
<li>Own key business processes involved with IAM</li>
<li>User Provisioning</li>
<li>Role-based Access Control</li>
<li>User access request and provisioning</li>
<li>Automate IAM processes and tasks using standard tools and scripting languages</li>
<li>Implement best practices for identity governance and administration</li>
<li>Integrate identity systems with HR, Training, and Quality systems</li>
<li>Manage onboarding and integration of new business systems</li>
<li>Establish technology and processes to maintain accuracy of access management system(s)</li>
<li>Oversee the execution of regular configuration and user access reviews</li>
<li>Coordinate closely with Information Security</li>
<li>Ensure the security and protection of company systems and data by maintaining compliance with Client security and information handling policies.</li>
</ul>
Additional Responsibilities
<ul>
<li>Performs other related duties and assignments as required</li>
</ul>
Qualifications
<ul>
<li>Broad knowledge of identity and access data correlation, normalization, and building identity and access data models.</li>
<li>Highly developed interpersonal, written and verbal skills with an ability to express complex technical concepts in business terms.
</li><li>Excellent technical writing and system documentation skills.</li>
<li>Demonstrated project management skills for large cross-functional projects.</li>
<li>Strong analytical problem-solving, and conceptual skills.</li>
<li>Services based Integration (e.g. REST) of role-based access control, Active Directory, LDAP, Single Sign-On, End-User provisioning, identity and access governance, and identity data synchronization services with existing applications and systems.</li>
<li>API Gateways, Enterprise Directories, Enterprise Databases, SSO and Access Management systems, identity federation protocols (SAML), and LDAP.</li>
<li>Systems and Applications: SailPoint, Active Directory, O365 and Azure AD, Okta, Avatier, PowerShell, JavaScript, SQL scripting</li>
</ul>
Education &amp; Certifications
<ul>
<li>Bachelor degree and 5+ years of related experience, including designing, implementing, and operating enterprise identity and access management technologies, including access request/management, directories and authentication (SSO) systems across diverse in-house and external business systems.</li>
</ul>
Working Conditions

The working conditions described here are representative of those that must be met by an employee to successfully perform the essential responsibilities and functions of the job and are not meant to be all-inclusive. Reasonable accommodation may be made to enable individuals with disabilities to perform the essential responsibilities and functions of the job.

Unless reasonable accommodations can be made, while performing this job the staff member shall:
<ul>
<li>Prolonged periods of sitting or standing at a desk and working on a computer in an environmentally controlled home office environment.</li>
<li>Operate other office productivity machinery, such as a calculator, scanner, or printer.</li>
<li>Frequently communicate with stakeholders via telephone, email, or instant message. Must be able to exchange accurate information in these situations.</li>
</ul>
Equal Opportunity Statement

USDM Life Sciences is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran.

Disclaimer

This job description is intended to describe the general nature and the level of the work being performed by the people assigned to this position. It is not intended to include every job duty and responsibility specific to the position. USDM Life Sciences reserves the right to amend and change responsibilities to meet business and organizational needs as necessary.

Compensation

Salary/Hourly Rate Range (W2): USD 45.00 &ndash; 65.00

The base salary/hourly rate range represents the anticipated low and high end of the USDM&rsquo;s compensation range for this position. Actual salaries/hourly rates will vary and will be based on various factors, such as the candidate&rsquo;s qualifications, skills, competencies, and proficiency for the role. The compensation described above is subject to change and could be higher or lower than the range described based on market survey data or budget.

Full-time employees are eligible for health, vision, and dental insurance, life insurance, short and long-term disability, hospital indemnity, accident, and critical care coverage.

Both full and part-time employees, who are at least 21 years of age, are eligible to participate in USDM's 401k plan. Full and part-time employees may be eligible for paid time off.

All employees are eligible for USDM's rewards and recognition program.

For more details about our benefits, visit us here: https://usdm.com/careers</div>

Identity & Access Management Engineer

Seaboard Foods

<div><div>YOUR OPPORTUNITY</div>

We have an exciting Information Security Engineer opportunity in the Merriam, KS office. This highly impactful role will serve as a vital member of our security team, responsible for the design, implementation, maintenance, and support of security systems and controls that safeguard the organization's digital assets. The Security Engineer will ensure the protection of systems, networks, and data against threats while maintaining compliance with relevant regulatory standards, company security policies and standards, and contributing to the organization's overall security strategy. In this role, you will support and enhance security platforms supporting Data Governance and Identity. The ideal candidate is a strong technologist with a proactive mindset, and the ability to operate effectively in a fast paced, evolving environment.

ABOUT US
At Seaboard Foods, we create the most sought-after pork. A top U.S. pork producer/processor and leading exporter to 30+ countries, we are committed to bringing excellence to the table, seeking a better way to produce wholesome pork and connect every step between our farms and family tables. More than 5,400 employees in five states work on our farms, feed mills, and processing plant to produce Prairie Fresh&reg; pork, ensuring the well-being of our animals, the environment, our employees, and the communities we call home. We are a Fortune 500 employer, recently nominated by the Business Journal as one of the &ldquo;Best Places to Work&rdquo;, representing our dynamic culture, where our employees can contribute and understand why they matter.
ESSENTIAL DUTIES AND RESPONSIBILITIES
<ul><li>Configure and tune data classification and labeling solutions to improve sensitivity detection and reduce false positives.</li>
<li>Analyze discovery results and partner with data owners to drive remediation actions.</li>
<li>Enhance DLP rules for endpoints, cloud services, and messaging systems.</li>
<li>Contribute to governance policy enhancements, training, and data stewardship efforts.</li>
<li>Participate in vendor reviews, upgrades, and capability enhancements.</li>
<li>Engineer automated provisioning/deprovisioning workflows and connectors for enterprise applications.</li>
<li>Design and enhance RBAC models, permission schemas, and identity roles aligned to least privilege.</li>
<li>Develop scripts and integrations using PowerShell, JSON, and APIs to improve access accuracy and efficiency.</li>
<li>Support updates to IAM policies, processes, and governance documentation.</li>
<li>Troubleshoot complex IAM issues related to provisioning, synchronization, or authentication.</li>
<li>Partner with peers and internal teams (both technical and non-technical) to drive security initiatives, contribute to cross-functional projects, gather and incorporate feedback, and drive continuous improvements in security processes</li>
<li>Document and maintain comprehensive operational procedures and security baselines for all supported data governance and identity tools, infrastructure, and capabilities</li>
<li>Advise project teams on security requirements and ensure standards are integrated during the requirements phase</li>
<li>Assist with developing company security policies, standards, baselines, and procedures as needed</li>
<li>Carry out additional responsibilities as assigned</li>
</ul>
CORE COMPETENCIES FOR SUCCESS IN ALL ROLES: instills trust, communicates effectively, action-oriented, ensures accountability, and drives results.

QUALIFICATION REQUIREMENTS

To perform this job successfully, an individual must be able to perform each essential duty satisfactorily. The requirements listed below are representative of the knowledge, skill, and/or ability required or preferred. Reasonable accommodation may be made to enable individuals with disabilities to perform the essential functions.

Required:
<ul>
<li>At least 2 years of experience in data governance or identity, focused on providing daily support and administration, as well as tuning and optimizing cybersecurity tools and applications
</li><li>Experience with Identity tools in support of automation</li>
<li>Proficiency in scripting languages (e.g. Python, PowerShell)</li>
<li>Continuous learner with a passion for improving data governance and identity processes.</li>
<li>Fundamental understanding of the following information security capabilities:</li>
<li>Demonstrated ability to lead complex projects, manage timelines, and deliver results in a fast-paced environment</li>
<li>Provide subject‑matter support for IAM and Data Governance platforms.</li>
<li>Prepare audit evidence and participate in IT General Controls walkthroughs</li>
<li>Strong analytical and problem-solving abilities</li>
<li>Strong communication and documentation skills</li>
<li>Demonstrates focused team orientation and effectiveness in collaborative work environments</li>
</ul>
Preferred:
<ul>
<li>University degree in MIS, Computer Science, IT, Cybersecurity, or related fields</li>
<li>Relevant certifications in data governance (DAMA, DGSP, CDPSE, DGCP, etc.) and/or identity (CIGE, CIAM, CAMS, CISSP, etc.).</li>
<li>Familiarity with regulatory compliance frameworks (SOX, etc.)</li>
</ul>
<div></div>WORK ENVIRONMENT

The physical and work demands listed here represent those an employee should possess to successfully perform the job's essential functions. Reasonable accommodation may be made to enable individuals with disabilities to perform essential functions.

<ul><li>Primarily an office environment with some need to work in the field</li>
<li>The hours and days of work are established by departmental needs and at the discretion of management. After-hours, weekends, and overnight travel as requested.
</li></ul>WHY SEABOARD FOODS?
<ul>
<li>Medical, vision &amp; dental benefits upon hire</li>
<li>401K with company match</li>
<li>Paid Time Off &amp; Company Holidays</li>
<li>Wellness Program
</li><li>Tuition reimbursement
</li><li>Employee pork purchase program
</li></ul>For a complete list of our benefits please visit our career site: https://www.seaboardfoods.com/careers/why-sbf/

Seaboard Foods is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, sexual orientation, national origin, age, gender identity, protected veterans' status, status as a disabled individual, or any other status protected by law.</div>

Information Security Engineer

<div>Azure AD Engineer Contract Location: Mckinney, TX (Hybrid) Job Description:
The Identity &amp; Access Management (IAM) team plays a pivotal role in our Cybersecurity program by enabling secure, scalable, and compliant access to enterprise and customer systems. Our IAM program encompasses:
<ul><li>Identity Governance &amp; Administration (IGA)</li>
<li>Authentication Services</li>
<li>Privileged Access Management (PAM)</li>
<li>Public Key Infrastructure (PKI)</li>
<li>Consumer Identity &amp; Access Management (CIAM)</li>
</ul>We are seeking a Cybersecurity Staff Engineer IAM to lead the design, implementation, and continuous improvement of IAM solutions. This role will focus on RBAC, MFA, federated authentication, certificate management, privileged access, and user lifecycle automation.
Ideal candidates will bring deep technical expertise across SailPoint ISC, Entra ID ( Azure AD), Active Directory, PAM, and PKI, along with a strong understanding of identity architecture and security best practices.
Key Responsibilities:
<ul><li>Lead the design and implementation of IAM capabilities, including identity lifecycle, authentication, authorization, and access controls.</li>
<li>Collaborate across departments to define RBAC models, MFA strategies, access governance, and application integrations.</li>
<li>Serve as a trusted IAM subject matter expert (SME) to technical teams, business units, and senior leadership.</li>
<li>Guide to integration efforts between enterprise applications and identity platforms (e.g., Entra ID, AD, SailPoint ISC).</li>
<li>Oversee multiple IAM projects concurrently, ensuring timely, secure, and scalable delivery.</li>
<li>Drive stakeholder alignment, including technical teams and business leaders, through proactive communication and conflict resolution.</li>
<li>Provide technical mentorship to junior engineers and develop documentation to support operational continuity and audit readiness.</li>
<li>Analyze and evaluate new IAM technologies, including authentication protocols, PKI, and automation tooling.</li>
<li>Partner with internal teams on change management, access reviews, and identity lifecycle automation initiatives.</li>
<li>Contribute to the strategic roadmap for IAM, identifying opportunities for innovation, risk reduction, and operational efficiency.</li>
</ul>Required Qualifications:
<ul><li>8+ years of experience in Identity &amp; Access Management or a related cybersecurity discipline.</li>
<li>Deep hands-on experience with SailPoint ISC, Entra ID ( Azure AD), Active Directory, and MFA/SSO solutions.</li>
<li>Strong understanding of IAM architecture, RBAC, PIM, and CIAM principles.</li>
<li>Proficient in scripting and automation (e.g., PowerShell, Python).</li>
<li>Demonstrated ability to lead IAM initiatives and engage with both technical and non-technical stakeholders.</li>
<li>Excellent communication, analytical, and organizational skills.</li>
<li>Comfortable working independently or within a team in a hybrid work.
</li></ul>For applications and inquiries, contact: hirings@openkyber.com</div>

Search 10000+ Identity governance engineer jobs near you this April. New roles added regularly across leading industries. Apply today.