IAM Security Engineer, Flock Safety

• Strong interpersonal skills, with the ability to work effectively with stakeholders
• Broad understanding of Identity and Access Management, and requirements for deploying IAM in a regulated environment (SOC2, FedRAMP, ISO27001)
• Detail-oriented, organized, with a proven track record of managing programs with a spirit of continuous improvement
• 5+ years in Identity Management, including experience:
• 3+ years of experience or related experience administering Okta including advanced configurations such as OIDC/Oauth, SCIM, cross-tenant federation, Okta Workflows, and APIs
• 3+ years of experience or related experience administering identity for systems including IAM configuration for SaaS and/or a subset of PAM, LDAP, Cert-based, Radius, and network infra
• 2+ years of experience scripting in BASH or Python, or developing in a language such as Python, GO or node.js
• Experience implementing Multi-Factor Authentication with context-based policies (Adaptive MFA, Duo Mobile Security, etc)
• Familiar with IAM concepts of least privileged access, Federation, Assurance, Reconciliation, and evidence collection for Audits
• Familiarity with APIs with a track record of leveraging them to improve efficiency through automation or data quality
• Experience in IT and IAM automation (tooling such as Workato, Okta Workflows, Tines)
• Experience deploying Identity Governance platforms
• Experience with Cloud Infrastructure (AWS, GCP, Azure/Entra) with expertise or certification in at least one vendor domain
• In-depth knowledge of identity protocols such as, SAML, OAuth 2.0, OIDC, and SCIM API
• Hands-on experience with identity management tools and platforms (e.g., Entra AD, Okta, Ping Identity)
• Strong understanding of cybersecurity principles and practices, particularly as they relate to identity and access management
• Excellent problem-solving skills and the ability to troubleshoot complex identity management issues
• Effective communication skills with the ability to explain technical concepts to non-technical audiences

Desirable

• Our Security team is looking to hire a IAM Security Engineer to help build IAM and Identity Governance solutions that will impact our workforce and customer identity platforms
• This person will partner closely with GRC, security, engineering and IT teams, and will work cross-functionally with identity stakeholders across the organization to champion and build a next generation identity fabric and counter identity cybersecurity threats
• The First 30 Days
• Get hands on with the tools, learn them inside and out
• Document findings and recommendations
• Build diagrams highlighting onboarding and offboarding processes
• Leverage SIEM to identify and mitigate identity threats
• Evaluate and highlight access gaps in RBAC “mover” events
• Evaluate device trust capabilities and develop a rollout plan
• The First 60 Days
• At the end of 60 Days, we should have issues that have been identified resolved
• Identity projects to take on
• Identity threat SOAR improvements (automated mitigations)
• Testing of Device trust capabilities with early adopters / high risk device groups
• Testing of passwordless (fastpass) experience for trusted devices
• Rollout and implementation plan defined for revamped IGA program
• 90 Days & Beyond
• At the end of 90 Days, you are rolling. You know what tools and processes we have in place and you have identified and resolved any major problems
• Device trust is rolled out to high privilege user devices and is used to protect access on SOC2 applications, passwordless implementation is underway for trusted devices
• Revamped IGA Program Rollout is underway
• Work with Identity team to identify high priority/SOC2 scoped apps for RBAC/UARs
• Working with Technology Experience to custom tailor the end user experience for IGA
• Work with 5-7 targeted cross functional teams to refine Entitlements Policies
• Identify areas for improvement with automation
• Flock is protected from identity based attacks
• High risk identity threats are identified and mitigated with SIEM automations
• Inappropriate access from Mover operations is reduced by IGA tooling

• We want our interview process to be a true reflection of our culture: transparent and collaborative
• Throughout the interview process, your recruiter will guide you through the next steps and ensure you feel prepared every step of the way
• Our First Chat: During this first conversation, you’ll meet with a recruiter to chat through your background, what you could bring to Flock, what you are looking for in your next role, and who we are
• The Hiring Manager Interview: You will meet with your potential future boss to really dive into the role, the team, expectations, and what success means at Flock
• This is your chance to really nerd out with someone in your field
• The Technical Assessment: Our technical assessments seek to test the hard skills required to do the job
• Engineers may find themselves in coding interviews or architecture discussions, sales roles may present mock discovery calls, and leadership roles may craft 90 day plans
• Your recruiter will inform you of which assessment you will be assigned and ensure you are fully prepared for your big day
• The Panel: Learn more about the team, responsibilities, and workflows
• You should be prepared to speak about past projects, how you collaborate and communicate with others, and how you live our values
• Depending on the team and role you are interviewing for, you may meet with several teammates as well as cross-functional partners
• The Executive Review: A chance to meet an executive and view Flock from a different lens
• Be prepared to ask well-thought-out questions about the company, culture, and more