Sr. Identity Access Management Engineer

Alkami is a leading cloud-based digital banking solutions provider for financial institutions in the United States that helps clients to transform through retail and business banking, digital account opening and loan origination, payment fraud prevention, and data analytics and engagement solutions.

Founded in 2009, we continue to be recognized for our intentional culture and tremendous growth (Best Place to Work in Fintech; Best & Brightest to Work For Nationally; and Comparably's Best Company Culture, Best Career Growth, Best Engineering Team, and Best Places to Work in Dallas, among others). Through our bold investments in technology and people, we empower our clients to grow confidently, adapt quickly, and build thriving digital banking communities through tailored experiences for over 18.1M users.

As a remote-first company, this position can sit in Plano, TX or remote in the US.

Position Overview:

The Sr. Identity Access Management Engineer will join the Identity and Access Management (IAM) team, providing advanced engineering and operational support for Identity and Access Management (IAM) services used to support the enterprise. This includes managing Identity Management platforms used to provide authentication and authorization services. Responsibilities include supporting Alkami's IAM strategies, including contributing to the IAM program, by managing operational work backlog, and coordinating with end users to ensure granted permissions follow the principle of least privilege.

Key Responsibilities & Duties:

• Work with IAM program team on activities supporting the mission and goals of the organization

• Collaborate with peers to maintain the IAM strategy to support the enterprise

• Efficiently provide Identity and Access Management (IAM) services, encompassing Multi-Factor Authentication (MFA), Single Sign-On (SSO), Role-Based Access Control (RBAC), and user provisioning/de-provisioning.

• Manage implementation of new IAM tools that align with the goals of the Information Security team.

• Communicate progress through regular governance and status updates, and advise leaders on key issues/constraints

• Continual identification, qualification, and tracking of risks, define mitigation and contingency plans, and constantly communicate status

Qualifications:

• 5+ years of relevant work experience focused on IAM platforms and services

• Experience with AWS or similar enterprise cloud computing platforms

• Strong ability designing and implementing complex IAM policies in a multi-account environment

• Knowledge or familiarity with Authentication and Authorization concepts, such as: Identity Federation, Multi-Factor Authentication, RADIUS/TACACS, SAML, OAUTH2, OpenID based on Azure AD/AWS and ADFS

• Experience in Active Directory, Azure AD Administration, and Sailpoint

• Understanding of Role-based access control (RBAC) methodologies

• Experience in managing and maintaining Identity Management, Federation, and Synchronization solutions

• Experience in gathering requirements, documenting, and assessing information for implementing information security policies and standards

Desired Skills:

• A broad knowledge of information security principles (e.g. access control, least privilege)

• Familiarity with Cloud Orchestration with Terraform

• Hands-on experience with SailPoint, Savynt, Okta, Omada, Oracle IM, or other products in this space

• Hands-on experience with OAuth 2.0, OpenID Connect and SAML 2.0 protocols and deployments.

• Hands-on experience with MFA solutions like Ping, Okta, and Duo

• Experience with user provisioning, system authorization, MFA, AAA solutions, and password vaulting systems and services

• Thorough understanding of Information Security frameworks and best practices (e.g. ISO, NIST, PCI)

• User identity lifecycle management solutions including managed services and implementation knowledge of products in this space

• Directory services products including managed services and implementation knowledge of products in this space

• Role-based access control solutions including managed services and implementation knowledge of products in this space

• Single sign-on and federation solutions including managed services and implementation knowledge of products in this space

Cool Things to Know

Not Just Any Company: Alkami has an awesome diverse and inclusive environment. We have a FUN culture and offer great benefits, including remote-first environment, unlimited paid time off, 401(k) with employer match, and more.

Work Authorization: We cannot offer employment sponsorship at this time. Candidates must be eligible to work in the US for full-time employment.

Recruiters: We are not looking for outside recruiting firms to help us in this search. Thank you for understanding.

Pay Transparency: As of January 1, 2023, new states and locales have enacted pay equity laws that require more pay transparency by employers in the following states: California, Colorado (effective January 1, 2021), Connecticut, Maryland, Nevada, New Jersey, New York, Ohio, Rhode Island and Washington. [$113,712.00 - $170,568.00]

The Important Stuff

Alkami Technology is an Equal Opportunity Employer and Prohibits Discrimination and Harassment of Any Kind: Alkami is committed to the principle of equal employment opportunity for all employees and to providing employees with a work environment free of discrimination and harassment. All employment decisions at Alkami are based on business needs, job requirements and individual qualifications, without regard to race, color, religion or belief, national, social or ethnic origin, sex (including pregnancy), age, physical, mental or sensory disability, HIV Status, sexual orientation, gender identity and/or expression, marital, civil union or domestic partnership status, past or present military service, family medical history or genetic information, family or parental status, or any other status protected by the laws or regulations in the locations where we operate. Alkami will not tolerate discrimination or harassment based on any of these characteristics. Alkami encourages applicants of all ages.

#LI-REMOTE