Senior Identity And Access Engineer

About the team/role
Checkr is looking to grow our IT Engineering team! We are looking for someone excited by the opportunity to be part of a fast-paced environment that pushes you to learn while doing. This role needs to be great with people and intensely focused on identity and access management with an emphasis on self-service.  

In the Senior Identity and Access Engineer role, you will focus on managing our corporate workforce identity, maintaining our corporate identity provider system (Okta), access management, and implementing integrations with corporate and business SaaS systems. As the lead architect for Checkr's IAM strategy, you will be responsible for shaping the future of our identity and access management ecosystem, driving innovation, and ensuring our systems can scale with our rapid growth.  You will own or assist with the administration of other core SaaS corporate systems for communications (email, chat, video) and productivity (file sharing and collaboration). You will participate in other corporate engineering initiatives and projects to support growth, scale, and innovation across our corporate systems and infrastructure, as needed. You will also partner extensively with our Information Security, Business Systems, and Integration teams to ensure that Checkrs can accomplish their goals safely.

What you’ll do

• Administer, design, configure and maintain our identity and access management systems and infrastructure to support identity provider (IDP), single sign-on (SSO), multi-factor authentication (MFA), and privileged access management (PAM). 
• Support implementation of corporate workforce identities and authentication in current and new information technology systems, applications, and infrastructure. 
• Document standards, guidelines, technical configurations and runbooks, and operating procedures for admins and end-users. 
• Work closely with other system engineers, admins, business owners, and security teams to ensure technical solutions meet business and compliance requirements while considering the current environment and any potential constraints. 
• Administration of core SaaS communication and productivity systems and applications. 
• Become a mentor and trainer to the IT team and support escalated issues and incidents. 
• Conduct regular audits and assessments to ensure compliance readiness and address identified gaps.
• Collaborate with internal stakeholders to understand business needs and translate them into IAM solutions that enhance security and compliance.
• Lead initiatives to redesign or re-architect existing systems for optimal performance, simplicity, and user experience.
• Oversee the implementation of robust monitoring and alerting mechanisms to ensure continuous compliance and operational efficiency.
• You'll be working in a complex, multi-cloud environment with diverse applications and integrations, requiring a deep understanding of modern architectures and the ability to design elegant solutions for intricate problems.
• As we prepare for future growth, you'll need to anticipate future needs and design systems that can adapt to changing regulatory and business requirements.
• You'll be tasked with striking the perfect balance between robust security measures and frictionless user experiences, requiring a nuanced understanding of both technical capabilities and human factors.
• You'll be a key liaison between IT, Information Security, Business Systems, and executive leadership, translating complex technical concepts into business value and driving buy-in for your vision.
• In this rapidly evolving field, you'll need to stay at the forefront of IAM trends and technologies, constantly evaluating and implementing new solutions to keep Checkr ahead of the curve.
• You'll be the key architect in designing and implementing IAM controls that not only meet but exceed SOC2, SOX, and ISO standards, playing a crucial role in Checkr's overall risk management strategy.

What you bring

• 7+ years of advanced IAM experience (implementation, configuration, and coding) with 5+ years of that experience administering IAM using Okta.
• Deep knowledge of IAM protocols and technology (SSO, OAuth, OIDC, SAML, SCIM, MFA, PAM,  etc.).
• Strong understanding of full user/identity lifecycle management and the challenges of comprehensive and effective automated onboarding/provisioning and offboarding/deprovisioning (ideally using Workday). 
• Strong technical developer experience with APIs, scripting and web services (bash, shell, Java, JavaScript, Python, Ruby, REST, SOAP, etc.) to implement custom integrations and automation of system administrator tasks.
• Comfortable driving multiple simultaneous projects and initiatives while effectively managing operational escalations. 
• Security-minded approach and experience developing multi-layered and auditable system controls, integrations, processes, and procedures. 
• Exceptional communication, teamwork, and influencing skills to build an environment of collaboration and continuous improvement. 
• Demonstrated ability to simplify complex systems and implement clean, efficient architectures.
• Strong expertise in regulatory requirements and best practices for compliance in a corporate environment.
• Experience in leading IAM strategy in an organization preparing for an IPO or other major regulatory milestone.

What you’ll get

• A fast-paced and collaborative environment
• Learning and development allowance
• Competitive cash and equity compensation and opportunity for advancement
• 100% medical, dental, and vision coverage
• Up to $25K reimbursement for fertility, adoption, and parental planning services
• Flexible PTO policy
• Monthly wellness stipend, home office stipend

At Checkr, we believe a hybrid work environment strengthens collaboration, drives innovation, and encourages connection. Our hub locations are Denver, CO, San Francisco, CA, and Santiago, Chile. Individuals are expected to work from the office 2 to 3 days a week. In-office perks are provided, such as lunch four times a week, a commuter stipend, and an abundance of snacks and beverages. 

One of Checkr’s core values is Transparency. To live by that value, we’ve made the decision to disclose salary ranges in all of our job postings. We use geographic cost of labor as an input to develop ranges for our roles and as such, each location where we hire may have a different range. If this role is remote, we have listed the top to the bottom of the possible range, but we will specify the target range for an exact location when you are selected for a recruiting discussion. For more information on our compensation philosophy, see our website.

The base salary range for this role is $162,866 to $220,348 in San Francisco.