Identity Engineer - SailPoint ISC
IDMWORKSSalary not specified
Not SpecifiedCompensation
Senior (5 to 8 years)Experience Level
Full TimeJob Type
UnknownVisa
FintechIndustries
Requirements
- Hands-on experience with Okta, including Okta Identity Engine, Okta Org-to-Org, Okta Workflows, and Okta Device Access
- Strong background in integrating identity applications using protocols such as SAML, OIDC/OAuth, and SCIM
- Proven expertise in managing platform identity and access controls across cloud environments, including AWS IAM, GCP IAM, and other major platforms
- Proficiency in scripting and automation using languages like Node.js, Python, or PowerShell, leveraging config-as-code and policy-as-code principles (e.g., Terraform, CI/CD pipelines) to operate consistently at scale
- Excellent problem-solving and troubleshooting skills, with the ability to resolve complex IAM-related issues
Responsibilities
- Administration of Checkout’s Identity platform, including Okta and joiner, mover, leaver processes
- Collaborate with cross-functional teams to gather IAM requirements and translate them into technical designs
- Ongoing integration of applications to use SSO with Okta, including liaising with application owners to gather requirements and develop integration approaches
- Develop and maintain user account provisioning and deprovisioning processes
- Implement automated workflows and approval processes using Okta workflows for user onboarding, role changes, and offboarding
- Conduct periodic access reviews to ensure adherence to least privilege and separation of duties principles
- Manage user identities, roles, groups, and access policies across various systems and platforms
- Establish and enforce access control policies, including role-based access control (RBAC) and attribute-based access control (ABAC)
- Implement and manage device trust and assurance rules within Okta Identity Engine
- Monitor IAM systems and processes for security vulnerabilities, potential threats, and compliance issues
- Develop and maintain documentation, including policies, procedures, and guidelines related to IAM practices
- Work closely with InfoSec team to ensure seamless execution of IAM-related tasks and controls for audits such as PCI DSS, ISO 27001, and SOC 2 Type II
- Collaborate with Security Operations team to respond to security incidents and conduct forensic investigations, if required
- Collaborate with internal stakeholders, including IT teams, application owners, and business units, to understand their IAM needs
- Provide support and troubleshooting assistance for IAM-related issues and incidents
- Train end users on IAM practices, tools, and self-service capabilities
Skills
Key technologies and capabilities for this role
Questions & Answers
Common questions about this position
What are the key responsibilities of the Senior IAM Engineer role?
The role involves administering Checkout’s Identity platform including Okta and joiner/mover/leaver processes, integrating applications with SSO, developing provisioning workflows, conducting access reviews, and collaborating with InfoSec and Security Operations teams.
What technical skills are required for this position?
Proficiency with Okta Identity platform, SSO integration, user provisioning/deprovisioning, RBAC/ABAC access controls, Okta workflows, and device trust rules is essential.
Is this a remote position or does it require office work?
This information is not specified in the job description.
What is the salary or compensation for this role?
This information is not specified in the job description.
What kind of team will I be joining?
You will join the IT Engineering team, collaborating closely with cross-functional teams, InfoSec, and Security Operations to deliver world-class end-user technology experiences.
Checkout.com
High-performance payments platform for enterprises
About Checkout.com
Checkout.com provides a payments platform that helps businesses process payments, send payouts, and manage card programs. The platform is designed for large enterprises and growing businesses, allowing them to handle high volumes of transactions quickly and reliably. It integrates with clients' existing systems and offers a range of payment services, generating revenue through transaction fees and subscriptions. Unlike many competitors, Checkout.com focuses on providing a comprehensive, cloud-based solution that supports the financial operations of its clients across the globe. The goal of Checkout.com is to streamline payment processes and enhance the payment experience for both businesses and their customers.
London, United KingdomHeadquarters
2012Year Founded
$1,780.1MTotal Funding
SERIES_DCompany Stage
Fintech, Financial ServicesIndustries
1,001-5,000Employees
Benefits
Work-life balance - Flexible working and plenty of time off to unwind. We’ll even give you your birthday off.
Recognition - Peer recognition program and quarterly Hero Awards. We celebrate success together.
Career development - Tailored career development and learning pathways. We’ll help you unlock your potential.
Celebrating diversity - Internal community groups and cultural events. We celebrate our differences.
Staying healthy - A global wellness programme and private health insurance. We support your wellbeing.
Security for the future - Comprehensive plans for you and your loved ones. We’ll take care of you.
Giving back - Employee-led community outreach, payroll giving and a volunteering day. We care about your causes.
Risks
Checkout.com faces increased competition from emerging fintech startups.
Economic instability in the UK and EU may impact Checkout.com's revenue.
Regulatory scrutiny on data privacy could increase compliance costs.
Differentiation
Checkout.com offers payments in over 150 currencies with in-country acquiring.
The platform integrates fraud filters and reporting through a single API.
Checkout.com supports major international cards and local payment methods.
Upsides
Checkout.com is expanding in Japan, enhancing its global presence.
The partnership with Zing increases digital payment methods and product growth.
Checkout.com launched Octopus for online payments, a first for global PSPs.
Related Jobs
RemoteRemoteSecurity Architect
EarnestSalary not specified
Full Time
Expert & Leadership (9+ years)
RemoteIAM Engineer - Saviynt
IDMWORKSSalary not specified
- Full Time
- Entry Level & New Grad
RemoteStaff Identity & Access Management Engineer
Lime$142,000 - $195,000/year
- Full Time
- Expert & Leadership (9+ years)
RemoteIT Engineer
ChainguardSalary not specified
- Full Time
- Senior (5 to 8 years), Expert & Leadership (9+ years)
RemoteDirector, Security Operations Center (SOC)
UltraViolet CyberSalary not specified
- Full Time
- Senior (5 to 8 years)