Senior/Lead - Cyber Security - IAM Engineer - Identity and Governance

FICO is a global analytics software company that helps businesses make better decisions. The Lead IAM Engineer will define enterprise identity and access strategy, design and implement cloud-based Identity Governance and Administration capabilities, and support identity platforms and programs. The role also focuses on reducing governance risks through access analysis, Segregation of Duties, and Least Privilege enforcement.

Responsibilities:

• Design and implement modern, cloud-based IGA (Identity Governance and Administration) platform capabilities that scale across the enterprise
• Partner across Cybersecurity and with business and technology leaders to shape FICO's Identity engineering strategy, including human and non-human identity domains
• Implement and support identity-based platforms, systems, and programs spanning governance, privileged access, and federation.Evaluate identity services on an ongoing basis and drive recommendations that close governance gaps and reduce risk exposure
• Guide engineering decisions using observed access patterns and behavioral data to strengthen Segregation of Duties and Least Privilege enforcement

Requirements:

• In-depth hands-on experience with IGA platforms such as SailPoint or Saviynt
• Strong experience with identity infrastructure including Active Directory, Entra ID, AWS IAM, Okta, and RHIM
• Good working knowledge of federation and access protocols: SAML, SSO, SCIM, LDAP, RADIUS, Kerberos, and MFA/FIDO2 passkeys
• Extensive hands-on experience with AWS Cloud Platform and good scripting and automation skills with Python
• Security analysis experience applying Segregation of Duties and Least Privilege principles
• Experience automating identity processes tied to HRIS systems
• PAM, ITDR, and NHI tooling (CyberArk, Hashi Corp, Delinea, Clutch) are highly desired
• Certificate management, PKI experience, and familiarity with post-quantum cryptography concepts are a plus
• Relevant certifications (SANS, AWS Certified Security) are a plus
• Bachelor's degree in computer science, Cyber Security, Information Technology, or a related field or relevant experience