Senior Cybersecurity Engineer

Senior Cybersecurity Engineer – SaaS / Identity Management

Needs to work in PST time zone – remote is ok

We are seeking a highly skilled Senior SaaS / Identity Engineer to design, implement, and manage enterprise-grade identity and SaaS automation solutions. This role focuses on Identity & Access Management (IAM), DevOps automation, and SaaS ecosystem integration, ensuring secure, scalable, and efficient user lifecycle management across both cloud and on-premise environments.

You will play a key role in architecting automation frameworks, enhancing identity workflows, and improving operational efficiency across a diverse application landscape.

Key Responsibilities

Identity & SaaS Administration

• Manage and administer enterprise SaaS and on-premise applications supporting multiple business units.
• Design and maintain user provisioning and deprovisioning workflows, ensuring compliance and security.
• Implement and manage SAML SSO, MFA/2FA, and Identity Federation solutions across platforms.
• Configure and maintain IAM integrations for applications such as Okta, Google Workspace (G-Suite), Azure AD, SAP, ADP, Concur, and others.

DevOps & Automation

• Architect and develop automation tools to streamline:
  • User lifecycle management
  • Identity access workflows
  • SaaS application onboarding and integration
• Build and maintain DevOps pipelines and toolchain improvements for IAM operations.
• Develop automation using scripting languages such as Python, Bash, PowerShell, and Java.
• Use APIs, webhooks, and event-driven architecture to integrate systems and workflows.

Identity & Security Engineering

• Design and implement IAM solutions leveraging:
  • OIDC, SAML, SCIM, and modern authentication protocols
  • Secure token handling and lifecycle management
• Configure and manage advanced Okta capabilities including:
  • Okta Access Gateway (OAG)
  • Device Trust
  • Adaptive MFA (AMFA)
  • Desktop SSO (DSSO)
  • Okta Workflows and API automation
  • Okta Expression Language

Integration & Systems Architecture

• Analyze dependencies and design robust solutions integrating multiple SaaS and on-prem systems.
• Build and maintain integrations using:
  • REST/SOAP APIs, LDAP, RADIUS, SFTP, SSH
  • Data formats such as JSON, XML, YAML
• Utilize synchronization tools including:
  • GAM/GADS (Google), Okta APIs, Okta Workflows, Google APIs

Security Analytics & Monitoring

• Develop security analytics and reporting using:
  • Python (Pandas)
  • Log aggregation tools such as Sumo Logic
  • XDR query frameworks
• Monitor system health, user activity, and identity risks.

Collaboration & Stakeholder Engagement

• Partner with senior leaders, operations teams, and cross-functional stakeholders to deliver scalable SaaS solutions.
• Act as a technical advisor on IAM and SaaS strategy.

Documentation & Enablement

• Produce clear and comprehensive technical documentation including:
  • Architecture diagrams
  • Integration templates
  • Runbooks and SOPs
• Develop training materials and provide knowledge transfer to operations/support teams.

Required Qualifications

• 8+ years of experience in Identity & Access Management, SaaS administration, or DevOps automation
• Strong expertise in IAM platforms, especially Okta
• Hands-on experience with:
  • SAML, OIDC, SCIM, and modern authentication protocols
  • Enterprise identity integrations
• Advanced scripting experience in:
  • Python, Bash, PowerShell, Java
• Deep knowledge of networking and integration protocols:
  • LDAP, RADIUS, REST, SOAP, SSH, SFTP
• Experience building automation using APIs and workflow engines
• Strong understanding of security best practices and identity governance

Preferred Qualifications

• Experience with cloud platforms (Azure, GCP, AWS IAM)
• Familiarity with Zero Trust security models
• Previous experience with enterprise-scale automation and DevOps pipelines
• Knowledge of log analytics and SIEM/XDR tools
• Certifications such as:
  • Okta Certified Professional / Administrator
  • Certified Identity and Access Manager (CIAM)