Remote - Lead IAM Engineer (USA - Remote, CA, US)

About Us

Data Analysis Incorporated (DAI) is the controlling entity of the O’Neil family of businesses. DAI and its subsidiaries operate in diverse industries worldwide, including global equity markets, health care, financial services, digital news, and insurance. Our global footprint allows our teams to be responsive to customer needs in a timely and efficient manner. We are dedicated to using technology and innovation to bring change and growth to our businesses. We believe in a dynamic workplace, creating engaging, informative products and services that help our customers succeed. Integrity is an essential characteristic for our firms and our associates; if this describes you, please apply!

Summary

Duties and Responsibilities

• Design, implement, and maintain IAM solutions across PingID, Auth0, Duo, Microsoft Entra ID, and AWS IAM environments.
• Serve as the technical lead for IAM, defining architecture, standards, and the overall operating model.
• Develop and enforce IAM processes and governance frameworks, including oversight of offshore operations, SLAs, and quality controls.
• Own identity lifecycle management (joiner, mover, leaver), including automation of provisioning and deprovisioning.
• Lead identity governance efforts, including access reviews, RBAC/ABAC models, and compliance with regulatory requirements.
• Manage authentication and access controls, including SSO, MFA, conditional access, privileged access, and non-human identities (APIs, service accounts).
  • Design, implement, and govern AWS IAM including roles, policies, permission boundaries, and identity federation.
  • Manage AWS IAM roles for human and non-human identities, including service roles, cross-account access, and workload identities.
  • Implement and enforce least privilege access within AWS through policy design and role scoping.
  • Integrate AWS IAM with enterprise identity providers (Entra ID, Auth0) for federated access and SSO.
  • Govern access to AWS resources including management of access keys, role assumption, and temporary credentials.
  • Define and enforce controls for AWS service identities, including Lambda, EC2, and container-based workloads.
• API / Token / Secrets
  • Align AWS IAM roles and temporary credential usage with token lifecycle and secrets management strategies.
• Priviledged Access Management
  • The role includes ownership of cloud identity platforms, including AWS IAM, with responsibility for managing identities, roles, and access controls across multi-cloud environments.
• Partner cross-functionally to integrate modern authentication protocols (SAML, OAuth, OIDC, SCIM), drive automation, support audits, and mentor IAM team members.

Qualifications & Requirements

Required Education, Experience, Certification/Licensure

• Bachelor’s degree in Computer Science, Cybersecurity, Information Systems, or related technical field, or equivalent practical experience.
• 7+ years of experience in cybersecurity or IT, with at least 5 years focused on Identity and Access Management.
• Demonstrated hands on experience with PingID, Auth0, Duo, and Microsoft Entra ID.
• Proven experience designing and operating IAM programs, including governance, lifecycle management, and offshore operating models.
• Experience managing both human and non-human identities including service accounts, API identities, and application identities.
• Strong understanding of authentication and authorization protocols including SAML, OAuth 2.0, OIDC, LDAP, and Kerberos.
• Experience implementing identity lifecycle automation and provisioning frameworks.
• Experience with privileged access management concepts and technologies.
• Experience supporting hybrid environments integrating on premises Active Directory with Entra ID.

Preferred Education, Experience, Certification/Licensure

• Industry certifications such as CISSP, CISM, Microsoft Identity and Access Administrator, or relevant IAM certifications.
• Experience with identity governance and administration platforms.
• Experience in regulated environments aligned to SOX, HIPAA, PCI DSS, or NIST frameworks.
• Experience with secrets management and vault technologies.
• Experience with scripting or automation using PowerShell, Python, or similar tools.

KNOWLEDGE, SKILLS AND ABILITIES (KSAs)

• Deep expertise in identity security, zero trust architecture, and access governance frameworks.
• Strong understanding of AWS IAM concepts including roles, policies, trust relationships, and cross-account access.
• Knowledge of cloud identity patterns including federated access and workload identity in AWS.
• Strong knowledge of modern authentication and access controls, including MFA, passwordless, API security, and service-to-service authentication.
• Ability to design scalable IAM architectures and operating models supporting both human and non-human identities across distributed environments.
• Strong analytical, problem-solving, and process design skills, with the ability to translate complex requirements into standardized procedures and runbooks.
• Effective communication, documentation, and stakeholder management skills, with the ability to drive accountability and consistency across teams.

Working Conditions

Must be able to perform essential job duties. Work is performed primarily in an office environment. Typically requires the ability to sit for extended periods of time (66%+ each workday), hear the telephone, and enter data on a computer and may also require the ability to lift up to 10 pounds.

Equal Opportunity Employer

Data Analysis Inc is an equal opportunity employer. All aspects of employment, including the decision to hire, promote, discipline, or discharge, will be based on merit, competence, performance, and business needs. We do not discriminate on the basis of race, color, religion, marital status, age, national origin, ancestry, physical or mental disability, medical condition, pregnancy, genetic information, gender, sexual orientation, gender identity or expression, veteran status, or any other status protected under federal, state, or local law.