IT Engineering Lead, Identity and Automation

The Enterprise Technology team at Hudson River Trading (HRT) is looking for an IT Engineering Lead to join their growing team. In this role you will architect, engineer, and implement a variety of automations as they relate to IT operations, identity and access management, and more. We’re looking for someone with strong knowledge of IAM best practices, the desire to lead and grow a team over time, as well as the ambition to automate day-to-day technical operations as much as possible.

The role requires strong SaaS administration and integration experience (E.g., Okta, Google Workspace, Jira, Active Directory), as well as exceptional organizational, communication, and project management skills. It’s critical that the individual in this role has a deep functional knowledge of IAM, user lifecycle management, and the ability to troubleshoot complex technical issues.

Responsibilities

• Own the architecture, configuration, and administration of all IT automation including authentication/authorization workflows and integration of various SaaS applications, IdP (Okta), and our HRIS (Workday)
• Develop complete employee lifecycle automation - onboarding, offboarding, transitions - leveraging APIs, scripting, no-code/low-code platforms, and other tooling
• Utilize Jira automation, as well as no-code/low-code platforms such as Okta Workflows, Tines, Zapier, GAM, and/or other tools to automate IT support ticket resolutions
• Reconcile, consolidate, and/or replicate disparate directory services and security groups to provide a seamless user log on and permissioning experience
• Provide ongoing technical and operational support for automations
• Work with Information Security to plan and implement our identity and access management vision

Qualifications

• 7+ years of hands-on experience in automating a variety of IT operations processes, including user lifecycle management, support resolutions, and more
• Proficiency with Python
• Extensive working knowledge of various aspects of IAM, RBAC, and IdPs
• Expert knowledge of different authentication and authorization methods: OAuth, SAML, OIDC
• Expert knowledge of different provisioning methods: SCIM, JIT
• Substantial awareness of security, data governance, change management, and other risk-related philosophies
• Familiarity with a multitude of different SaaS platforms including but not limited to Workday, Okta, Google Workspace, Jira, Active Directory, Zoom, and Slack
• Nice to haves:
  
  • Experience integrating Workday as a profile source with Okta
  • Experience with OpenLDAP
  • Strong Linux experience

Annual base salary range of $150,000 to $225,000. Pay (base and bonus) may vary depending on job-related skills and experience. A sign-on and discretionary performance bonus may be provided as part of the total compensation package, in addition to company-paid medical and/or other benefits.