Information Security Engineer – IAM Lead

Posted 97ds ago

Employment Information

Education
Salary
Experience
Job Type

Report this job

Job expired or something wrong with this job?

Job Description

Information Security Engineer at Model N leading Identity and Access Management efforts. Collaborating across departments to enhance security architecture and manage IAM initiatives.

Responsibilities:

  • Define the IAM roadmap and ensure alignment with security, compliance, and business needs.
  • Design and maintain enterprise IAM architectures for workforce, partners, and customers.
  • Lead initiatives related to authentication, authorization, identity governance, and privileged access.
  • Contribute to enterprise security architecture standards beyond IAM, with identity as a foundational control.
  • Set standards for identity lifecycle management, directory services, federation, and access controls.
  • Drive implementation of modern IAM capabilities such as SSO, MFA, password less authentication, SCIM, role-based access, and just-in-time access.
  • Oversee integration of cloud and on-prem applications using SAML, OIDC, and OAuth.
  • Evaluate tools, guide vendor selection, and manage technical relationships.
  • Develop reusable patterns, reference architectures, and security guidance for development teams.
  • Partner with engineering to embed IAM and security controls into CI/CD pipelines and cloud platforms.
  • Design and govern enterprise identity architecture across AWS, Okta, Entra ID, Active Directory, and hybrid environments.
  • Enforce least-privilege access using federation, roles, conditional access, and zero trust principles.
  • Architect secure access for cloud workloads, eliminating long-lived credentials and unmanaged identities.
  • Secure non-human identities, service accounts, APIs, and automation using scoped roles, ownership models, and rotation policies.
  • Design and operate centralized secrets and key management solutions using KMS, Vault, and PAM platforms.
  • Centralize identity logging, monitoring, and response for authentication and authorization events.
  • Support security operations by improving access-focused detection, alerting, and incident response workflows.
  • Establish access policies, role models, and attestation processes.
  • Ensure IAM and access controls meet regulatory, audit, and internal security expectations.
  • Provide oversight for provisioning, deprovisioning, and access escalation processes.
  • Guide monitoring and tuning of identity and security services to meet availability and performance targets.
  • Mentor IAM and security engineers and influence cross-functional teams.
  • Work closely with security, infrastructure, application owners, risk, and compliance partners.
  • Communicate technical and security concepts clearly to both technical and non-technical audiences.
  • Support incident response activities when identity or access systems are involved.

Requirements:

  • Strong background in IAM architecture and engineering within a broader information security context.
  • Solid understanding of core information security principles, risk management, and control design.
  • Expertise with authentication and authorization protocols including SAML, OIDC, OAuth, LDAP, and Kerberos.
  • Experience with enterprise IAM platforms such as Entra ID, Okta, or similar.
  • Strong understanding of cloud platforms such as AWS, Azure, or GCP.
  • Hands-on experience with identity governance, privileged access, and lifecycle automation.
  • Ability to lead complex initiatives and work effectively with diverse stakeholders.
  • Preferred: Experience in regulated environments such as finance, healthcare, or government.
  • Preferred: Familiarity with zero trust architectures and modern enterprise security models.
  • Preferred: Certifications such as CISSP, CCSP, or vendor-specific IAM certifications.
  • Preferred: Experience with IGA, PAM, CIEM, or customer identity platforms.

Benefits:

  • Equal Opportunity Employer
  • Diversity and Inclusion programs
  • Employee engagement initiatives
  • Training and development opportunities