Description

The Opportunity
 

As a Lead IAM Engineer on the Trust - Cybersecurity IAM team, you will help define how FICO manages trust and access across the enterprise. The identity architecture decision this team makes today will shape the security posture of the company for years to come. You will design and implement modern, cloud-based IGA platform capabilities that scale across the enterprise. 

What You'll Contribute
 

• Design and implement modern, cloud-based IGA (Identity Governance and Administration) platform capabilities that scale across the enterprise.
• Partner across Cybersecurity and with business and technology leaders to shape FICO's Identity engineering strategy, including human and non-human identity domains.
• Implement and support identity-based platforms, systems, and programs spanning governance, privileged access, and federation.Evaluate identity services on an ongoing basis and drive recommendations that close governance gaps and reduce risk exposure.
• Guide engineering decisions using observed access patterns and behavioral data to strengthen Segregation of Duties and Least Privilege enforcement.

What We're Seeking

• In-depth hands-on experience with IGA platforms such as SailPoint or Saviynt.
• Strong experience with identity infrastructure including Active Directory, Entra ID, AWS IAM, Okta, and RHIM.
• Good working knowledge of federation and access protocols: SAML, SSO, SCIM, LDAP, RADIUS, Kerberos, and MFA/FIDO2 passkeys.
• Extensive hands-on experience with AWS Cloud Platform and good scripting and automation skills with Python.
• Security analysis experience applying Segregation of Duties and Least Privilege principles.
• Experience automating identity processes tied to HRIS systems. 
• PAM, ITDR, and NHI tooling (CyberArk, Hashi Corp, Delinea, Clutch) are highly desired.
• Strong expertise in non-human identity (NHI) governance, with a focus on securing and managing identities for agentic AI systems, autonomous agents, and machine-to-machine workloads
• Certificate management, PKI experience, and familiarity with post-quantum cryptography concepts are a plus.
• Relevant certifications (SANS, AWS Certified Security) are a plus. 
• Bachelor’s degree in computer science, Cyber Security, Information Technology, or a related field or relevant experience

Key Skills

Education

Any Graduate