<h3>Job Description</h3>
Cox Automotive is seeking a talented and experienced Senior Cybersecurity Workforce Identity Engineer to join our Identity and Access Management (IAM) team. In this role, you will be responsible for designing, developing, and maintaining identity management and authentication solutions, including Single Sign-On (SSO) and Multi-Factor Authentication (MFA). You will play a critical role in building secure, scalable access systems that enhance user experience while ensuring compliance with security standards and regulatory requirements. Key success factors include: 
<ul>
<li>A deep understanding of IAM technologies, principles, and best practices is essential. This includes familiarity with various IAM solutions, identity management techniques, and secrets management. </li>
<li>Hands-on experience within a workforce and customer authentication environment </li>
<li>A deep understanding of authentication architecture and design </li>
</ul>
 Key Responsibilities 
<ul>
<li>Design and oversee authentication and SSO solutions across enterprise and applications and platforms. </li>
<li>Oversee integrations of identity providers (IdPs) such as Okta, Azure AD, Ping Identity with internal and third-party applications. </li>
<li>Develop and oversee secure authentication mechanisms using protocols such as SAML, OAuth 2.0, OpenID Connect, and Kerberos. </li>
<li>Collaborate with application owners and developers to enable SSO and federated identity integrations. </li>
<li>Implement and enforce multi-factor authentication (MFA) policies and technologies. </li>
<li>Troubleshoot and resolve authentication and access-related incidents. </li>
<li>Document architecture, configurations, and procedures related to authentication and access systems. </li>
<li>Stay current with emerging authentication technologies, threats, and best practices. </li>
</ul>
 Minimum Requirements: 
<ul>
<li>Bachelor's degree in a related discipline and 4 years' experience in a related field. The right candidate could also have a different combination, such as a master's degree and 2 years' experience; a Ph.D. and up to 1 year of experience; or 16 years' experience in a related field </li>
<li>Must have experience in designing, implementing, and maintaining authentication solutions, ensuring the security of workforce and CIAM personnel </li>
<li>Clearly articulate the objective of specific cybersecurity policies and procedures to technical and non-technical stakeholders. </li>
<li>Excellent customer service skills, writing, and executive presentation skills. </li>
<li>Ability to develop a strong and productive working environment with key stakeholders and collaborate closely with other Cox entities' cybersecurity teams to implement cybersecurity best practices. </li>
<li>Consultative nature to work through controversial or complex topics to employees, leaders, and/or senior leadership. </li>
<li>Ability to evaluate risks and make recommendations based on impact and likelihood of the risk to the business. </li>
</ul>
 Required Technical Skills 
<ul>
<li>Deep understanding of IAM concepts: authentication, authorization, SSO, MFA, RBAC, ABAC. </li>
<li>Experience with IAM platforms such as Okta, Ping Identity, Azure AD, or SailPoint. </li>
<li>Proficiency in modern authentication protocols such as, SAML 2.0, OAuth 2.0, OIDC, Kerberos, Radius </li>
<li>Experience implementing Single Sign-On (SSO) and federated identity solutions. </li>
<li>Knowledge of identity federation standards and cross-domain authentication. </li>
<li>Implementation and management of MFA solutions (e.g., Duo, Microsoft Authenticator, YubiKey, Google Authenticator). </li>
<li>Experience with passwordless authentication (e.g., FIDO2, Windows Hello for Business). </li>
<li>Knowledge of cybersecurity frameworks (e.g., ISO 27000, NIST, FFIEC) and industry relevant regulations that will guide architectural requirements (e.g., GDPR, FFIEC, GLBA) </li>
<li>Familiarity with identity and access management (IAM) systems and protocols </li>
</ul>
 Preferred Technical Skills 
<ul>
<li>Developing connectors for aggregation and user provisioning along with understanding System for Cross-domain Identity Management (SCIM) in detail. </li>
<li>Deep understanding of federating authentication and how the protocols are implemented. </li>
<li>Deploying identity controls and building conditional access policies in Entra ID. </li>
<li>Knowledge of current cybersecurity and technology architectures such as zero trust. </li>
<li>AWS Well-Architected Framework. </li>
</ul>
 Preferred Qualifications 
<ul>
<li>Automotive industry experience. </li>
<li>Big four consulting or Fortune 500 company experience. </li>
<li>Relevant industry certification (e.g., CISSP, CEH, OSCP, Azure, AWS, CISM, CISA). </li>
</ul>
 USD 99,000.00 - 165,000.00 per year Compensation: Compensation includes a base salary of $99,000.00 - $165,000.00. The base salary may vary within the anticipated base pay range based on factors such as the ultimate location of the position and the selected candidate's knowledge, skills, and abilities. Position may be eligible for additional compensation that may include an incentive program. Benefits: The Company offers eligible employees the flexibility to take as much vacation with pay as they deem consistent with their duties, the company's needs, and its obligations; seven paid holidays throughout the calendar year; and up to 160 hours of paid wellness annually for their own wellness or that of family members. Employees are also eligible for additional paid time off in the form of bereavement leave, time off to vote, jury duty leave, volunteer time off, military leave, and parental leave.

Senior Cybersecurity Workforce Identity Engineer

<h3>Job Description</h3>
Full Time Hybrid Onsite in Boston, NYC, or Springfield, MA

Job Description

The Opportunity
The Enterprise Technology Experience organization seeks an experienced and detail-oriented Identity and Access Engineer who can assist with designing and developing the Identity and Access Management environment (IAM). This is an opportunity for you to work in a fast paced, innovative, and collaborative environment on exciting technology directives, directly impacting the way security is integrated into daily business processes. Ideally, you will have a deep understanding of identity lifecycle management, directory services, authentication protocols, and modern IAM platforms.

The Team
This role is a part of the IAM Engineering Team, which is a strategic arm of our Security Platform Engineering organization, and is crucial for maintaining strong security, compliance to security controls, and assisting with operatonal efficiency. This group is responsible for building and maintaining the core identity platforms for MassMutual, as well as designing and deploying strategic solutions that will enable access controls to be embedded into strategic business processes.

The Impact
As an IAM Engineer, you will be responsible for leading project delivery work, partnering with enterprise and solution architects to design and deploy secure solutions, assisting IAM operational support teams as needed for troubleshooting. You will partner with vendors to solve strategic challenges that align with enterprise roadmaps and will have an opportunity to utilize your experience and expertise to improve existing processes, patterns, and infrastructure.
*** This position can be located in our Springfield, MA, Boston, MA, or NYC office.

The Minimum Qualifications
<ul>
<li>8+ years experience in the following areas
<ul>
<li>web infrastructure and web infrastructure design concepts</li>
<li>working with Federation services and Certificate management</li>
<li>working with protocols such as SAML and OIDC</li>
<li>working with Linux and Windows operating systems &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</li>
<li>supporting Directory Services (such as Ping, AD, Okta, Entra, etc.)</li>
<li>with documentation and demonstrated ability in operational hand off</li>
<li>working on Security and Operation Incident objectives</li>
<li>in audit remediation and mitigations</li>
<li>supporting complex environments</li>
<li>designing, implementing, deploying, and maintaining IGA solutions such as SailPoint, Saviynt, Okta</li>
<li>with Identity Lifecycle Management, Access Reviews, Intelligence (Analytics), Roles and Rules management, and Segregation of Duties</li>
</ul>
</li>
<li>Must be authorized to work in the United States without sponsorship both now and in the future</li>
</ul>

The Ideal Qualifications
<ul>
<li>Bachelor of Science in Computer Science or Information Management</li>
<li>7-10 years of experience in a complex web infrastructure environment</li>
<li>Understanding of web security concepts and security in-depth</li>
<li>Ability to collaborate across lines of business to consult and guide projects as needed</li>
<li>Ability to grasp large scale, enterprise class deployments</li>
<li>Software system integration</li>
<li>Troubleshooting and triage of complex production issues, with technical support to operations and supporting teams</li>
<li>Understanding of the Atlassian productivity suite (JIRA, Confluence, Bitbucket, etc)</li>
<li>Excellent Organizational Skills</li>
<li>Excellent written and verbal communication skills. Will be communicating technical information to non-technical end users</li>
<li>Experience maintaining various web proxies using Security Access Manager</li>
<li>Ability to look at the big picture and recommend designs based on industry best practice</li>
<li>Deep understanding SSO solutions using Okta, SAM Federations and Auth0 technologies Experience integrating third party applications with on-prem/AWS deployed solutions</li>
<li>Experience with many of the following: Akamai, NGINX, AWS, F5, IHS/Apache, Python, NodeJS, netmon/wireshark, Auth0, Okta, LDAP, Active Directory, IBM ISAM, F5</li>
<li>Understanding of MFA including RSA adaptive authentication and SecureID</li>
<li>Identity tokenization and underlying standards (SAML, OAuth, Kerberos, etc)</li>
<li>Familiarity with IAM concepts like privileged access, zero trust, and access governance</li>
<li>Familiarity with PKI</li>
<li>Familiarity with security frameworks and regulations (e.g., NIST, GDPR, HIPAA) that impact identity and access management</li>
<li>Comfortable challenging status quo</li>
<li>Ability to support and maintain various LDAP repositories using Security Directory Server and associated utilities</li>
<li>Ability to think critically under pressure and deliver on time</li>
<li>Ability to work independently with minimal supervision</li>
</ul>

#LI-SC1
MassMutual is an equal employment opportunity employer. We welcome all persons to apply. If you need an accommodation to complete the application process, please contact us and share the specifics of the assistance you need. California residents: For detailed information about your rights under the California Consumer Privacy Act (CCPA), please visit our California Consumer Privacy Act Disclosures page.

Identity and Access Management (IAM) Engineer

<h3>Job Description</h3>
Job DescriptionValorem Reply is an award-winning digital transformation firm focused on delivering solutions around data-driven enterprise, IT modernization, customer experience, product transformation and digital workplace by leveraging the power of Microsoft technologies.  We provide hyper-scale and agile delivery of unique digital business services, strategic business models and design-led user experiences. Our innovative strategies and solutions securely and rapidly transform the way our clients do business. As a Product Owner for the Identity &amp; Access Management (IAM) team, you will act as the bridge between business stakeholders and technical teams to deliver enterprise-scale IAM solutions. You’ll drive product roadmaps and agile execution across core IAM capabilities such as Access Controls, Identity Governance, Directory Services, and Cryptographic Controls. This role combines technical fluency in IAM platforms with strong product management and delivery leadership.Responsibilities
<ul>
<li>Serve as liaison between business stakeholders, technical teams, and enterprise architecture</li>
<li>Drive backlog grooming, prioritization, and user story refinement with IAM Feature Teams</li>
<li>Translate business needs into clear, actionable technical requirements and user stories</li>
<li>Manage product roadmaps across Access Controls, Identity Governance, and Directory Services</li>
<li>Maintain detailed dependency tracking and deliverables across IAM programs</li>
<li>Lead Agile ceremonies and manage Azure DevOps (ADO) backlogs including epics, features, and tasks</li>
<li>Partner with Product Managers and Technical Leads to align with business and security objectives</li>
<li>Coordinate with vendors such as Microsoft Entra, Ping Identity, Saviynt, 1Kosmos, Keyfactor, and PlainID</li>
<li>Track and report product KPIs including backlog health, delivery velocity, and release performance</li>
</ul>
Minimum Requirements
<ul>
<li>Bachelor’s degree in Information Systems, Computer Science, Cybersecurity, or related field (or equivalent experience)</li>
<li>10 years in Product Owner, Business Analyst, or similar enterprise/SaaS roles</li>
<li>US citizen or green card holder per client requirements</li>
<li>Expertise with Agile/Scrum delivery and tools such as Azure DevOps (ADO)</li>
<li>Strong knowledge of IAM domains: Access Controls, Identity Governance, Directory Services, Cryptographic Key Management</li>
<li>Hands-on experience with IAM platforms such as Microsoft Entra ID (Azure AD), Ping Identity, Saviynt, 1Kosmos, Keyfactor, or PlainID</li>
<li>Ability to manage complex cross-functional initiatives and dependencies</li>
<li>Strong stakeholder communication and executive reporting skills</li>
</ul>
Preferred Qualifications
<ul>
<li>Experience supporting large-scale IAM transformations or modernization programs</li>
<li>Familiarity with Zero Trust, NIST, or ISO security frameworks</li>
</ul>
About Reply Reply specializes in the design and implementation of solutions based on new communication channels and digital media. Reply is a network of highly specialized companies supporting global industrial groups operating in the telecom and media, industry and services, banking, insurance and public administration sectors in the definition and development of business models enabled for the new paradigms of AI, cloud computing, digital media and the Internet of Things. Reply services include Consulting, System Integration and Digital Services. Reply is an equal opportunity employer. We are committed to provide equal opportunity regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity or Veteran status. If you need assistance and reasonable accommodation due to a disability during the application or the recruiting process, email us at <a href="mailto:jobusa@reply.com" target="_blank">jobusa@reply.com</a>. Visit our website at <a href="http://www.reply.com" target="_blank">www.reply.com</a> to learn more about our open roles.
We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.

784 ping identity Jobs