Senior Identity & Access Management (IAM) Engineer

At Edelman Financial Engines (EFE), we believe everyone deserves to move their financial life forward.

We know that assets have the power to fund goals. Those numbers represent individual lifetimes filled with hard work and dreams for our clients and generations to follow. Our clients trust us to guide them forward with empathy, integrity, and invention. We uphold that same standard of respect and commitment for clients and colleagues alike.

Founded on the idea that financial education is a fundamental right for everyone—not just the wealthy, EFE continues to grow and challenge the status quo. We’re moving forward, together. If our purposeful commitment inspires you, we invite you to consider joining our team!

As a on the Enterprise IT Server Team, the identity and access management engineer is responsible for the development and implementation of IAM systems including SSO, authentication and access controls ensuring confidentiality, integrity and availability of IAM systems and data

In addition to an earnest desire to help people, we are looking for the ideal candidate to complement the team’s existing talents. For this role, we are looking for someone who has a creative spirit and new insights to help us continuously improve and accelerate our focus on innovative, best-in-class integrations, and support. If you have a 6+ years’ experience in information technology or equivalent technical experience – this may be the opportunity for you!

Responsibilities:

• Designing, implementing, and supporting the SSO, MFA, Zero Trust, Active Directory, Azure AD, Okta, and user access provisioning services, automation, integrations, and lifecycle management.
• Provision, configure & support resilient cloud deployment architecture, keep it compliant with regulations like SOC2 and make it more efficient.
• Manage scalability, capacity planning, redundancy, and resiliency.
• Maintain service availability and performance SLAs based on business and product requirements.
• Manage SSO/identity services vendor platforms specifically for multiple SOC2 controlled environments, work with other Identity Platform engineers in deploying and maintaining services and create and review operational runbooks.
• Participate and contribute to periodic SOC2 audit processes.
• Partner with IT and product teams for SSO and user registration integration

Requirements:

• 6+ years of hands-on experience in managing, implementing, and supporting identity & access technologies,
• Enterprise experience in Identity and Access Management with working knowledge of enterprise hybrid cloud environments and other PAM toolsets
• Experienced with Services based Integration (e.g. REST) of role-based access control, Active Directory, Azure AD, Okta, LDAP, Single Sign-On, End-User provisioning, identity and access governance, Privileged Identity Management, Privileged Access Management, Lifecycle Management and identity data synchronization services with existing applications and systems
• API Gateways, Enterprise Directories, Enterprise Databases, SSO and Access Management systems, identity federation protocols (SAML), and LDAP.
• Ability to work cross-functionally across multiple business units, such as IT application and infrastructure, product development teams, primarily integrating applications and users with identity services.
• Strong technical writing skills to support required documentation.
• Passion, drive, energy, a sense of humor and a great attitude.

For California residents, please see the link for the Privacy Notice for Candidates. California law requires that we provide you this notice about the collection and use of your personal information as well as the privacy rights afforded to you. Please read it carefully and reach out to the Data Privacy Team at (877) 711-4472 or [email protected] with any questions.  

Edelman Financial Engines encourages success based on our individual merits and abilities without regard to race, color, religion, creed, sex, gender identity or expression, sexual orientation, pregnancy; marital, domestic partner or civil union status; national origin, citizenship, ancestry, ethnic heritage, genetic information, age, legally recognized disability, military service or veteran status.

Accommodations are modifications or adjustments to the hiring process that would enable you to fully participate in that process.  If you need assistance to accommodate a disability, you may request one at any time by either contacting your recruiter or [email protected].

¹ The 2021 Top 100 Independent Advisory Firm Ranking issued by Barron’s is qualitative and quantitative, including assets managed, revenue generated, regulatory record, staffing levels and diversity, technology spending and succession planning. Firms elect to participate but do not pay to be included in the ranking. Compensation is paid for use and distribution of the rating. Investor experience and returns are not considered. 

² Firm stats as of Dec. 31, 2021.

³ Firm stats as of March 31, 2022.