Identity & Access Management EngineerPosted today

Culture Amp
Apply now

The opportunity

We’re big believers in the power of IRL, so for most roles we ask Campers to work from their local Culture Amp office an average of 2 days a week to unlock connection, pace and culture together.

What you'll do

  • Manage day-to-day identity and access administration in Okta, including: provisioning, deprovisioning, MFA resets, application access requests, and authentication, session, and device trust policies.

  • Full lifecycle management of SaaS applications and maintain existing SAML,: SCIM, and OIDC configurations and group mappings as Culture Amp’s technology environment evolves.

  • Build and own joiner, mover, and leaver workflows end to end, including: automated pipelines using Okta Workflows, APIs, and SCIM to connect the HRIS to Okta.

  • Configure, deploy, and continuously improve Okta Identity Governance,: including access request workflows and self-service or automated approval paths aligned to access policy.

  • Support audit and compliance activities by automating access certification: reporting, gathering system and directory log evidence for SOC 2 and ISO 27001 audits, and reviewing inactive SaaS licences and unapproved OAuth integrations.

  • Contribute to configuration, optimisation and troubleshooting for other: ancillary platforms as required, such as Google Workspace, Active Directory / MS Entra, Island & Jamf.

What they're looking for

  • Hands-on experience administering Okta or a similar identity provider,: including SAML, SCIM, OIDC, MFA, lifecycle policies, and authentication, session, and device trust policies.
  • Proven experience onboarding SaaS applications end to end, including SSO: setup, SCIM attribute and group mapping, and troubleshooting provisioning issues.
  • Experience with Okta Identity Governance or equivalent access request and identity governance tooling.
  • Experience building identity lifecycle automation pipelines that connect HRIS: systems to an identity provider using tools such as Okta Workflows, APIs, or SCIM.