IAM Engineer

About the Role

InvestCloud is a leader in the business to business and back-office solution space with a large, well-established client base that is primed for continued growth. The ideal IAM Engineer candidate will be the primary architect and administrator of our identity and access management infrastructure, leveraging Ping Identity and Ping Federate solutions to establish and maintain secure, efficient, and scalable IAM capabilities. This role will play a pivotal role in shaping our IAM strategy and roadmap, with a focus on optimizing the integration, configuration, and customization of Ping solutions to meet our unique business needs and compliance requirements.

What does a great Ping IAM Engineer do?

The successful Ping IAM Engineer collaborates closely with cross-functional teams to design and implement IAM solutions that align with industry best practices and standards, ensuring seamless user experiences and robust security controls across our organization's digital ecosystem. Additionally, this role will have the opportunity to lead the evaluation and adoption of additional Ping products and features to enhance our IAM capabilities and address emerging security challenges.

How you will provide meaningful contributions:

• Design, architect, and implement scalable and resilient identity and access management solutions using Ping Identity and Ping Federate technologies.

• Develop IAM architecture blueprints, standards, and best practices aligned with industry standards and regulatory requirements.

• Deploy and configure Ping Identity and Ping Federate products to enable seamless user authentication, single sign-on (SSO), and secure access controls.

• Integrate IAM solutions with existing and future enterprise systems, applications, and cloud services to enforce consistent identity and access policies.

• Establish and maintain processes for user provisioning, deprovisioning, and lifecycle management, ensuring timely and accurate access rights assignments and revocations.

• Implement self-service capabilities for user account management, password resets, and access requests to enhance user productivity and reduce administrative overhead.

• Enforce strong authentication mechanisms, multi-factor authentication (MFA), and adaptive access controls to mitigate security risks and prevent unauthorized access.

• Monitor IAM systems for security incidents, anomalies, and compliance violations, and coordinate response and remediation efforts as needed.

• Document IAM architectures, configurations, policies, and procedures to facilitate knowledge transfer and ensure compliance with audit and regulatory requirements.

• Provide training and guidance to internal stakeholders, IT teams, and end-users on IAM best practices, security awareness, and compliance requirements.

• Identity and Access management (IAM) operations for onboarding and offboarding processes, this tool aids in comprehending the IAM domain and is technically supported by Ping Federate and identity solutions.

• Oversees a group of identities and facilitates federation with clients.

Basic Qualifications for Consideration:

• Bachelors degree or 10+ years with identity and access exp.

• 5+yrs hands-on experience with Ping Identity and Ping Federate products, including installation, configuration, and administration.

• Strong understanding of identity and access management principles, standards, and protocols (e.g., SAML, OAuth, OpenID Connect).

• Proven track record of successfully implementing and managing IAM solutions in enterprise environments, preferably in a cloud-based or hybrid environment.

• Knowledge and experience of Fiserv financial services technology solutions.

• Excellent communication skills with the ability to collaborate effectively with cross-functional teams, stakeholders, and vendors.

• Experience with and strong understanding of identity automation platforms.

• Strong analytical and problem-solving skills, with a keen attention to detail and commitment to delivering high-quality solutions.

Preferred Skills

• Master's degree a plus

About InvestCloud

InvestCloud is the global technology leader in digital transformations for the financial services industry, supporting over $6 trillion of assets with over 550 direct clients, from wealth managers, institutional investors and asset managers to family offices, asset services companies, financial platforms, and banks. InvestCloud specializes in digital platforms that enable the development of financial solutions, pre-integrated into the cloud. The company offers on-demand client experiences and intuitive operations solutions using an ever-expanding suite of modular products, resulting in best-in-class experiences for the financial services industry. Headquartered in Los Angeles, InvestCloud has over 20 global offices including New York, London, Geneva, Singapore, Tokyo, and Sydney. InvestCloud is backed by Motive Partners (together with its affiliates) and Clearlake Capital Group, L.P. (together with its affiliates). For more information, visit InvestCloud.com.

The actual salary will vary based on applicant's education, experience, skills, and abilities, as well as internal equity and alignment with market data. The salary may also be adjusted based on the applicant's geographic location. Salary range: $110-140k

Invest Cloud is an equal opportunity employer, and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability status, protected veteran status or any other characteristic protected by law.

#LI-BH1