Offer summary

Qualifications:

Bachelor's degree in Computer Science, Information Technology, or a related field, or equivalent experience., 5+ years of experience with IAM technologies such as SSO, MFA, LDAP, SAML, OAuth, and OpenID Connect., 5+ years of experience with IAM tools like Okta, SailPoint, or Ping Identity., Strong problem-solving skills and excellent communication abilities..

Key responsabilities:

Design, develop, and implement IAM solutions including identity governance and access management.

Manage and maintain IAM platforms to ensure stability and security.

Conduct security assessments and collaborate with teams to integrate IAM solutions.

Provide mentorship to junior engineers and identify opportunities for automation.

Job description

The work we do has an impact on millions of lives, and you can be a part of it.

We help protect our customers against life’s uncertainties. Regardless of where you work within the company, you’ll be helping provide protection and peace of mind when our customers need it most.

The Senior IAM Engineer will be responsible for designing, implementing, and managing the IAM infrastructure to ensure the security and efficiency of our systems. This role requires a deep understanding of IAM technologies, strong problem-solving skills, and the ability to work collaboratively with cross-functional teams.

Roles and Responsibilities

Design, develop, and implement IAM solutions, including identity governance, access management, and authentication systems.

Manage and maintain IAM platforms, ensuring their stability, security, and performance.

Develop and enforce IAM policies, standards, and procedures to ensure compliance with regulatory requirements and industry best practices.

Conduct regular security assessments and audits to identify and mitigate potential risks.

Collaborate with IT, security, and business teams to integrate IAM solutions with existing systems and applications.

Provide technical guidance and mentorship to junior IAM engineers and other team members.

Stay current with emerging IAM technologies and trends, and recommend improvements to enhance our IAM capabilities.

Support the rollout and onboarding of new applications.

Identify opportunities for automation, evaluate new tools, and drive implementation of technology that creates value for the organization.

Work with IAM team to implement additional Role Based Access Controls (RBAC) roles within SailPoint including the development of the Segregation of Duties matrix.

Skills and Qualifications Required

Bachelor's degree in Computer Science, Information Technology, or a related field. 5-10 years of equivalent job experience is also acceptable.

5+ years of experience using IAM technologies, including SSO, MFA, LDAP, SAML, OAuth, and OpenID Connect.

5+ years of experience with IAM tools such as Okta, SailPoint, Ping Identity, or similar platforms.

Excellent problem-solving skills and attention to detail.

Strong communication and interpersonal skills, with the ability to work effectively in a team environment.

Skills and Qualifications Preferred

Familiarity with regulatory requirements and industry standards (e.g., GDPR, HIPAA, NIST).

5+ years of experience troubleshooting SailPoint workflows and customizations

5+ years of experience with Role Based Access Controls (RBAC), role mining, etc.

5+ years of experience troubleshooting end user issues in Access Certifications

5+ years of experience provisioning or scripting user access to applications/tools

Certifications Preferred

SailPoint Certified IdentityIQ Engineer OR SailPoint Certified Identity Security Engineer badges

ITIL Foundations Certification

Relevant certifications (e.g., CISSP, CISM, or similar)

Work Conditions

Meetings to be held outside of core working hours to adjust to other group companies’ time zones.

Will work closely with existing IAM Engineer and report regular updates to IAM team/director.

#LI-VG1

Employee Benefits:

We aim to protect our employees' wellbeing through a broad benefits offering. For example, we protect physical wellbeing through health, dental and vision insurance. We protect mental wellbeing through mental health benefits and an employee assistance program. We protect time away from work with a variety of paid time away benefits (e.g., paid time off, paid parental leave, short-term disability, and a cultural observance day). We protect financial wellbeing through contributions to healthcare accounts, a pension plan, and a 401(k) plan with Company matching. All employees are encouraged to protect their overall wellbeing by engaging in ProHealth Rewards, Protective’s platform to improve wellbeing while earning cash rewards.

Eligibility for certain benefits may vary by position in accordance with the terms of the Company’s benefit plans.

Diversity and Inclusion:

At Protective, we are committed to providing an inclusive culture where all employees are able to fully contribute and thrive. Our goal is to grow and develop our people, attract diverse talent and support strong, diverse communities.

We support diversity, equity, and inclusion by working to develop a culture of inclusion and belonging led by leaders who develop potential and embrace all skills and abilities. Our aim is to create an equitable environment for all leaders and employees that will drive performance and impact business strategy. In this way, we can increase overall diversity for leadership roles and pipelines of talent by maturing our hiring practices, robust development opportunities and focus on retention of key talent.

We are proud to be an equal opportunity employer committed to being inclusive and attracting, retaining, and growing the talents of a diverse and inclusive workforce.

Accommodations for Applicants with a Disability:

If you require an accommodation to complete the application and recruitment process due to a disability, please email martina.winston@protective.com.This information will be held in confidence and used only to determine an appropriate accommodation for the application and recruitment process.

Please note that the above email is solely for individuals with disabilities requesting an accommodation. General employment questions should not be sent through this process.

Required profile