Interview integrity requirementCandidates must personally complete all interviews and technical assessments. The use of proxies or third-party representatives during any stage of the hiring process is prohibited and will result in disqualification. Final candidates will be required to participate in at least one in-person interview. Some travel for this role is expected. Reasonable accommodations will be provided in accordance with applicable laws. About the RoleYou’ll own and evolve OEC’s enterprise identity platform—the core security control plane that protects everything we do. This role goes beyond administration: you’ll shape architecture, strengthen our security posture, and drive scalable identity solutions across Active Directory, Microsoft Entra ID, and Okta.You’ll operate in a distributed U.S./India environment where autonomy, strong documentation, and thoughtful engineering are key. If you enjoy balancing security with user experience and want true ownership of a critical platform, this is that role. What You’ll Do Own the identity platform end-to-end: availability, performance, and security across AD, Entra ID, and OktaDesign modern access controls: MFA, passwordless, Conditional Access, and adaptive authenticationEnforce least privilege at scale using RBAC/ABAC and automate Joiner/Mover/Leaver (JML) processesLead cloud identity strategy across Entra ID and AWS IAM, including federation and workload identitiesSecure privileged access with PIM/PAM and resilient break-glass patternsDetect and respond to threats using SIEM/log platforms; lead identity-related incident investigationsOwn SOC 2 identity controls including access reviews, certifications, and audit readinessAct as a subject matter expert: build architecture diagrams, runbooks, and integration standardsCollaborate and mentor through peer reviews, knowledge sharing, and team upskillingParticipate in an on-call rotation supporting a critical security platform What You Bring 7+ years of hands-on IAM experience in enterprise environmentsDeep expertise across Active Directory, Entra ID, and OktaExperience designing hybrid identity architectures and modern access strategiesStrong background in identity security, incident response, and compliance frameworks (SOC 2, NIST, ISO)Proven ability to own and evolve platforms, not just support them Technical SkillsYou don’t need everything, but strong experience in most of the below: Active Directory: domains, forests, GPOs, Kerberos, LDAPMicrosoft Entra ID: Conditional Access, MFA, Identity Protection, PIM, Entra ConnectOkta: SSO, lifecycle management, integrations, federation, WorkflowsProtocols: SAML, OAuth 2.0, OIDCAccess Models: RBAC/ABAC, entitlement design, JML automationPrivileged Access: PIM, PAM, break-glass strategiesCloud IAM: AWS IAM, federated identity, cross-platform trustSecurity Monitoring: SIEM tools (Sentinel, Splunk), Entra & Okta logsIGA Tools: SailPoint, Saviynt, or Entra ID GovernancePAM Tools: CyberArk, BeyondTrust, or DelineaAutomation: SCIM provisioning, scripting (PowerShell required)Familiarity with AI-assisted scripting/tools (e.g., Copilot, Claude) is a plusExternal identity (B2B): guest access, federation, Entra External ID How You Work Communicate clearly and constructively—even in high-pressure situationsAdapt quickly as priorities shift in a fast-moving environmentThrive in a remote-first, highly autonomous team Requirements Bachelor’s degree in Computer Science, IT, or related field (or equivalent experience)Relevant certifications preferred: SC-300, AZ-500, Okta Certified Professional/Admin Additional Details Remote role (U.S.-based) with collaboration across global teamsOccasional travel (potentially international)Camera-on participation expected for key meetings Why This RoleThis is a high-impact, high-ownership position where you’ll directly influence the security and scalability of a growing enterprise platform. You won’t just maintain systems—you’ll design, improve, and lead. What We Offer: Full benefits starting Day 1: Medical, Dental, and Vision401(k) with company matchUnlimited Flex Time Off plus 10 company-paid holidaysProfessional development programs, tuition assistance, and quarterly book programFree wellness coaching and pet insuranceHome office equipment stipendEmployee resource groups and exclusive employee discounts