Senior Systems Engineer - IAM

Sr Systems Engineer Berkley Technology Services (BTS) provides IT services and supports insurance systems across its operating units. We seek a dynamic senior systems engineer with strong experience in Identity and Access Management (IAM) technologies such as Okta, Auth0, and Microsoft Entra ID. We are looking for an individual who can design, plan, architect, and execute IAM solutions while serving as a liaison between the organization and key vendors. The role requires proactive problem resolution, project leadership, mentoring of technical staff, and collaboration with project managers and technical teams to deliver customer‑centric solutions. The Company is an equal employment opportunity employer. Responsibilities Plan and implement IAM systems, infrastructure, and related hardware and software in response to customer requests and organizational requirements. Perform system‑level programming and scripting to facilitate the management of supported applications and technologies, including Okta Expression Language (EL) and PowerShell. Configure, integrate, maintain, and manage performance, security, failure analysis, recovery, and user support. Lead IAM technology deployment projects for Okta, Auth0, and Microsoft Entra ID, ensuring deployments meet user needs and comply with security standards. Build, analyze, operate, and scale API management solutions to protect customer and workforce data, services, and applications. Emphasize security standards and user needs for MFA, RBAC, fine‑grained authorization, passwordless authentication, and B2B/B2C scenarios. Research emerging IAM technologies to inform procurement and development strategies. Develop and implement Governance, Risk, and Compliance (GRC) strategies, conduct risk assessments and audits to mitigate security risks. Serve as a liaison to vendors such as Okta, Auth0, and Microsoft to facilitate problem resolution. Lead projects in collaboration with Project Management, Account Management, and Customer teams. Mentor and cross‑train technical staff, peers, and subordinates in IAM technologies and best practices. Provide guidance on development standards and quality expectations. Collaborate with technical staff to deliver customer‑centric solutions, presenting design and deployment strategies. Develop and oversee the implementation of policies and procedures to ensure consistent system provisioning and maintenance. Manage end‑user accounts, permissions, and access rights in accordance with best practices regarding privacy, security, and compliance. Adhere to defined ITIL standards for incident, request, and change management. Document problems and resolutions, platform configurations, and standards. Maintain excellent communication across functional technical areas. Participate in on‑call rotation (PIC). Qualifications Minimum 5 years of IAM design, administration, and support. At least 3 years of experience with Okta, Auth0, and Microsoft Entra ID. Ability to design IAM solutions aligned with Zero Trust, identity governance, and adaptive authentication. Strong understanding of SSO, SAML, OAuth/OIDC, MFA, RBAC, and fine‑grained authorization. Experience in API management and protection of customer and workforce data, services, and applications. Proficiency in JavaScript (Node.js preferred) and web security fundamentals to mentor application teams, extend IAM workflows, and automate tasks. Strong knowledge of security frameworks such as OWASP and NIST. Experience in scripting with Okta EL and PowerShell. Knowledge of GRC strategies and conducting risk assessments and audits. Familiarity with CI/CD pipelines and tools such as Ansible, GitHub, Terraform, and Jenkins. Experience working in a hybrid multi‑cloud environment with Azure and AWS. Ability to work irregular hours and participate in on‑call rotation. Physical requirements: sit at a desk, lift up to 10 pounds, and maintain vision focus. Bachelor’s degree in Computer Science, Information Technology, Information Systems, or related field (equivalent experience may be considered). Relevant certifications such as Okta Certified Professional, CISSP, or Microsoft Certified: Identity and Access Administrator Associate (SC-300) are highly preferred. Additional Company Details Base Salary Range: $121,000 – $137,000 Benefits: Health, Dental, Vision, Life, Disability, Wellness, Paid Time Off, 401(k), and Profit‑Sharing plans. Sponsorship Details Sponsorship not offered for this role. #J-18808-Ljbffr