IAM Security Engineer

Cision is a global leader in media intelligence and communications solutions. Our InfoSec team is expanding to meet the growing demands of a secure, scalable, and resilient identity infrastructure. We are seeking a skilled IAM Security Engineer to help us build and maintain a robust identity and access management ecosystem across our global footprint, with a strong focus on Okta technologies.

As an IAM Security Engineer, you will play a critical role in designing, implementing, and maintaining identity and access management solutions using Okta as our primary platform. You will collaborate with global teams across security, infrastructure, and application development to ensure IAM policies and technologies align with business and compliance requirements.

Key Responsibilities:

• Design and implement IAM solutions using Okta, including SSO, MFA, and lifecycle management.
• Manage identity lifecycle processes (Joiner, Mover, Leaver) across enterprise systems.
• Integrate Okta with cloud platforms (e.g., Azure AD, AWS IAM), directory services (e.g., Active Directory), and third-party applications.
• Support audits, compliance initiatives (e.g., SOC2, ISO27001), and security assessments.
• Monitor and respond to IAM-related incidents and vulnerabilities.
• Define and enforce access policies and role-based access controls (RBAC) within Okta, as well as maintain our existing IdP instances.
• Contribute to the development of IAM roadmaps and strategic initiatives.

Qualifications:

• 3–5 years of experience in IAM engineering or related security roles.
• Relevant certifications (e.g., Okta Certified Professional, CISSP, Azure Security Engineer) are a plus.
• Strong background experience with SAML and OIDC federation protocols and working with various federated Identity Providers such as Okta.
• Familiarity with Okta Workflows, API integrations, and SCIM provisioning.
• Experience with scripting and automation (e.g., PowerShell, Python).
• Knowledge of regulatory frameworks (e.g., GDPR, ISO27001, SOC2).
• Bachelor’s degree in Computer Science, Information Security, or related field.