Job description
About the Role
iCapital is looking to hire an IAM Senior Engineer to join the Corporate Technology team. This role is responsible for managing and maintaining identity governance platforms, creating and granting access to new users and non-human accounts, creating and maintaining birthright entitlements for departments and roles, leading recertification initiatives, deploying single sign-on applications, troubleshooting access and permission related requests, and maintaining an efficient user lifecycle management program. Additionally, this individual requires IAM-related governance of cloud environments and third-party applications which includes reviewing stale access, reducing over-privileged access.
This is a highly technical and visible role which will have a large impact across a fast-growing firm. The ideal candidate must have a professional, calm attitude and the willingness to help others. This individual can drive IAM governance across our firm and provide input for best practices or ways to streamline various governance controls and policy. This will provide a highly rewarding path to deepening technical and communication skills.
Responsibilities
- Drive our IAM governance program as a highly technical individual by managing and maintaining our primary software, Saviynt and Okta.
- Leverage Python, SQL language, and API calls to facilitate automations within Saviynt and other identity tools.
- Manage and maintain birthright entitlements, access requests, and access certifications across all company departments.
- Manage and maintain onboarding and offboarding employee workflows and automations within Saviynt.
- Deploy SSO applications using Terraform within Okta and manage other IdP features and policies.
Qualifications
- Bachelor’s degree in computer science, information technology, or equivalent work experience within the information technology field
- 6+ years of experience within identity and access management-related positions
- 4-6 years of experience with identity management and governance tools like Saviynt, SailPoint, Ping in addition to identity provider tools like Microsoft Entra ID and Okta
- Experience with Python, SQL, and API calls and automations is required
- Experience managing and maintaining birthright entitlements, privileged identity management (PIM), role-based access for provisioning and entitlements
- Experience with SAML and Oauth single sign-on applications within Okta, as well as auto-provisioning and SCI
- Certifications related to cloud platforms or identity and access management are preferred
- Experience working in a regulated and secure environment with required due diligence is preferred
- Able to deliver clear and concise written documentation for internal use across the firm
- Strong ability to speak confidently on topics related to the role’s responsibilities
Benefits
The base salary range for this role is $115,000 to $140,000. iCapital offers a compensation package which includes salary, equity for all full-time employees, and an annual performance bonus. Employees also receive a comprehensive benefits package that includes an employer matched retirement plan, generously subsidized healthcare with 100% employer paid dental, vision, telemedicine, and virtual mental health counseling, parental leave, and unlimited paid time off (PTO).
We believe the best ideas and innovation happen when we are together. Employees in this role will work in the office Monday-Thursday, with the flexibility to work remotely on Friday.
For additional information on iCapital, please visit https://www.icapitalnetwork.com/about-us Twitter: @icapitalnetwork | LinkedIn: https://www.linkedin.com/company/icapital-network-inc | Awards Disclaimer: https://www.icapitalnetwork.com/about-us/recognition/
iCapital is proud to be an Equal Employment Opportunity and Affirmative Action employer. We do not discriminate based upon race, religion, color, national origin, gender, sexual orientation, gender identity, age, status as a protected veteran, status as an individual with a disability, or other applicable legally protected characteristics.
