Senior Engineer - IAM

Senior Engineer I at Checkout.com

As a Senior Engineer I specialising in Identity and Access Management (IAM) with a focus on OKTA, you will be responsible for the architecture, implementation, and maintenance of our IAM solutions in support of our internal customers. Your role will involve designing secure and efficient authentication and authorization processes, managing the OKTA environment, and ensuring seamless integration with various applications and systems. You will play a crucial part in safeguarding our organisation's digital assets and enhancing user experiences.

How you’ll make an impact

Design and Implementation:

• Architect and deploy robust IAM solutions with OKTA, ensuring they meet business and security requirements.
• Develop and enforce IAM policies, procedures, and standards to maintain system integrity.
• Contribute to and lead projects to constantly improve the maturity, user experience and capabilities of our Okta implementation based on business needs and stakeholder requirements

Administration and Support:

• Oversee user provisioning, de-provisioning, and access management within the OKTA environment.
• Resolve IAM-related issues promptly to minimise downtime and enhance system reliability.
• Conduct regular system audits and generate compliance reports.
• Design and support Checkout’s regular campaigns to recertify user access
• Provide end user escalation support
• Create and maintain technical documentation for both internal technology teams and customers

Security and Compliance:

• Ensure IAM solutions adhere to security best practices and regulatory standards.
• Perform security assessments and implement necessary improvements to strengthen system security.
• Collaborate with security teams to respond to incidents and perform root cause analysis.

Collaboration and Leadership:

• Partner with IT, security, and application teams to address and fulfil their IAM needs.
• Mentor junior engineers and provide technical guidance to support staff.
• Lead and contribute to IAM-related projects, ensuring successful and timely execution.

Continuous Improvement:

• Stay updated on IAM and OKTA trends and technologies, proposing enhancements for process improvement.
• Engage in continuous learning and professional development to maintain expertise in IAM.

Requirements

Education:

• Bachelor’s degree in Computer Science, Information Technology, or a related field. An advanced degree is a plus.

Experience:

• Proven track record of designing and implementing IAM solutions in complex environments.
• Experience with the OKTA platform strongly preferred

Technical Skills:

• Deep knowledge of IAM concepts and best practices relating to SSO, MFA, Lifecycle Management, Identity Governance and PAM.
• Strong understanding of authentication protocols, and standards (e.g., SAML, OAuth, OpenID Connect).
• Experience with RESTful APIs and a proficiency in scripting languages such as Python or Typescript for automation and integration.
• Knowledge of security and compliance frameworks such as NIST/FedRamp, SOX, SOC, ISO, SOC2, PCI, ZeroTrust, SaaS Security Framework, Data Security Foundations, etc.
• Practical experience with cloud providers (AWS, Azure, etc) to manage containerised applications, serverless code, and databases

Soft Skills:

• Excellent problem-solving and analytical skills.
• Strong communication and interpersonal abilities, with a team-oriented mindset.
• Capability to manage multiple tasks and projects, prioritising workload effectively.
• Fluent in English.

Preferred Certifications:

• OKTA Certified Professional or Administrator
• Certified Information Systems Security Professional (CISSP)
• Certified Identity and Access Manager (CIAM)
• AWS Certified Security – Specialty or equivalent