Staff Identity Governance and Access Engineer

📋 Description

• Own OIG architecture end-to-end — design access request workflows, entitlement/Resource Collections
• Lead lifecycle, birthright, and RBAC strategy — design and deploy automated birthright access
• Drive Workday integration architecture — balance scheduled reconciliation (attribute accuracy) with
• Design and harden mover/leaver automation — implement attribute-driven group re-evaluation on role
• Lead OPA, ISPM, and Zero Standing Privilege initiatives — design privileged session access
• Own privileged access management and identity security posture management telemetry and KPIs —

🎯 Requirements

• Minimum 4+ years of direct, advanced experience managing and administering enterprise IGA, PAM/ISPM
• Demonstrated hands-on experience designing and deploying Birthright Provisioning models and RBAC
• Production experience with OPA or equivalent PAM tooling, including Zero Standing Privilege
• Production experience with ISPM tools (such as Okta ISPM) that integrate with EDR solutions like
• Solid grounding in identity and access standards (SAML, OIDC, OAuth 2.0, SCIM) and
• Track record of owning technical designs for identity lifecycle (joiner/mover/leaver) end-to-end.

🎁 Benefits

• Equity (where applicable), bonus, and benefits including health, dental, and vision insurance