Identity Governance Engineer

The Identity Governance Engineer drives systematic initiatives in designing, building, and supporting Role-Based Access Controls, automated and manual procedures for provisioning and deprovisioning, and access control for all organizational applications.

Job Responsibilities:

• Administers user identity lifecycle procedures, including onboarding, offboarding, temporary leave, and role changes.
• Designs and administers roles and role-based access control mechanisms and entitlement assignment.
• Designs and enforces access control policies based on the principle of least privilege and separation of duties.
• Ensures compliance with industry regulations and internal security policies related to identity and access management.
• Interfaces with HCM systems and HR professionals to design MACD with identities based on hiring and terminations.
• Collaborates with legal and procurement teams to assess and manage the identity and access practices of third-party vendors.
• Generates regular reports on identity and access management metrics, highlighting trends and areas for improvement.
• Assists with all Governance, Risk and Compliance activities, including various audits or assessments (e.g. PCI, Financial, risk), and documents and maintains records for them.

How we reward you:

• Hybrid Work schedule
• 401K with company match
• Yearly bonus opportunity*
• Full medical, dental, and vision insurance *
• On-site fitness center, biometric screen, and flu shot clinic
• Discounts at Panda restaurants, theme parks, and gym memberships
• Paid time off starting at 15 days with 7 federal holidays*
• Continuous education assistance and scholarships*
• Income protection including Disability, Life and AD&D insurance*
• Bereavement leave
• Benefits available for eligible permanent full time associates

Your background and experience: 

• Bachelor’s degree preferred
• 3+years of IT experience; experience as an Identity Governance Engineer and with Okta, CyberArk, and Workday preferred
• ITIL Foundation and IT Security (CISSP, CISM, CISA, etc.) certifications preferred.
• Successful completion of initial and periodically required trainings.
• Obtaining a valid Food Handler's Card within 30 days of employment is a requirement of this position.