IAM Engineer

Description

Identity Engineer We are a small, agile team responsible for building and maintaining next generation platform services that enable over 90k+ employees and external vendors to securely access Nordstrom applications and resources.

Responsibilities

• Our identity systems are central to ensuring secure and seamless access while maintaining a strong focus on user experience, security, and scalability.
• As an Identity Engineer, you will be responsible for architecting and supporting identity systems, including Okta, SailPoint Identity Now, Active Directory, and Azure Active Directory.
• You will work on integrating Privileged Access Management (PAM) solutions and driving the adoption of Zero Trust architecture.
• Additionally, you will consult on and implement authorization models such as RBAC, ABAC, ReBAC.
• You will enable continuous access reviews and automate manual work.
• Experience with CIAM and B2B identity solutions is highly valued.
• A day in the life... Design, deploy, and maintain secure identity platforms such as Okta, SailPoint Identity Now, Active Directory, and Azure AD.
• Implement and consult on authorization models like RBAC, ABAC, ReBAC to enable dynamic and scalable access control.
• Drive continuous authentication and continuous access reviews, ensuring that identity and access policies remain up to date and secure.
• Architect and support Privileged Access Management (PAM) using CyberArk to protect critical systems and privileged credentials. Automate identity lifecycle management processes, focusing on provisioning, de provisioning, and continuous access review.
• Develop and maintain solutions using Node.js, Java, Spring Boot, and React; focus on backend development with full stack capabilities as a plus.
• Implement secrets automation in CI/CD pipelines, ensuring security throughout the development lifecycle.
• Collaborate on CIAM and B2B identity solutions, integrating them into the identity architecture. You own this if you have...
• 5+ years of experience working in identity and access management (IAM), supporting platforms like Okta, SailPoint Identity Now, Active Directory, and/or Azure AD.
• Expertise in authorization models like RBAC, ABAC, and ReBAC with a focus on continuous authentication and access review.
• Hands on experience with Privileged Access Management (PAM) solutions like CyberArk.
• Experience with CIAM and B2B identity solutions. Working knowledge of object-oriented programming languages such as Node.js, Java, Spring Boot, and React.
• Familiarity with automating secrets management in CI/CD pipelines.
• Expertise in identity protocols like OIDC, OAuth, SAML, and SCIM.