Senior IAM Engineer

Summary

Join Databricks as a Senior Identity and Access Management Engineer and contribute to building and maintaining our critical IAM infrastructure. You will collaborate with various teams to ensure efficient and scalable IAM services, implement secure identity lifecycle processes, and provide Tier 3 support. This role involves working with systems like Okta and Opal, developing automation solutions, defining service level agreements, and contributing to Infrastructure as Code. The ideal candidate possesses extensive experience in Okta administration, identity system management, and programming. U.S. citizenship is required for this position.

Requirements

• 5+ years of experience or related experience administering Okta including advanced configurations such as OIDC/Oauth, SCIM, cross-tenant federation, Okta Workflows, and APIs
• 5+ years of experience or related experience administering identity for systems including IAM configuration for Saas and/or a subset of PAM, LDAP, Cert-based, Radius, and network infra
• 2+ years of experience programming in a language such as Python, or node.js is required
• U.S. Citizenship

Responsibilities

• Work with different teams to ensure that the IAM services we offer the business are built for efficiency and scale
• Work closely with IT and Security teams to ensure the secure implementation of identity lifecycle processes (provisioning, updates, de-provisioning)
• Provide Tier 3 support for IT support and partner with IT support leads to understand the identity trends and implement solutions to improve them through process or automation
• Work with internal IT teams to support and implement advanced configurations for identity systems such as Okta, and Opal, implementing access controls for SaaS applications
• Develop solutions or applications necessary to facilitate identity automation securely across Databricks Identity infrastructure
• Help define Service level agreements and processes working with IT support to streamline access requests and improve transaction transparency
• Contribute to developing IAC (Infrastructure as Code) around IaaS systems
• Strive toward making our processes better to provide a smooth and automated user LCM experience

Preferred Qualifications

• Familiar with IAM concepts of least privileged access, Federation, Assurance, Reconciliation, and evidence collection for Audits
• Familiar with design patterns to implement RBAC vs ABAC vs PBAC
• Familiar with customer identity and access management
• Familiarity with APIs with a track record of leveraging them to improve efficiency through automation or data quality

Benefits

• Annual performance bonus
• Equity
• $114,600 — $202,700 USD (Zone 1 Pay Range)
• $103,100 — $182,400 USD (Zone 2 Pay Range)
• $97,400 — $172,300 USD (Zone 3 Pay Range)
• $91,700 — $162,200 USD (Zone 4 Pay Range)