Sr Identity & Access Management Engineer

As the nation's largest community credit union, we begin every day focused on delivering superior financial products and services for our 1.3 million members and more than $30 billion in managed assets. Our work has an economic impact as we support our members' financial goals. We are unapologetic about being devoted to our members and the communities we serve. Our business is guided by our people helping people philosophy - which includes our team members.

BECU has been in business for more than 85 years, driven by unwavering core values and a dedication to improving the communities we serve. While we have a rich history, the future of our company, accelerated by business and technology transformation, is even brighter. There's never been a better time to work for BECU.

To learn more visit becu.org/careers.

PAY RANGE

The Target Pay Range for this position is $134,200.00-$164,000.00 annually. The full Pay Range is $104,200.00 - $194,000.00 annually. At BECU, compensation decisions are determined using factors such as relevant job-related skills, experience, and education or training. Should an offer for employment be made, we will consider individual qualifications. In addition to your salary, compensation incentives are available for the hired applicant. Incentives are performance based and targets vary by role.

BENEFITS

Employees and their eligible family members have access to a wide array of employee benefits, such as medical, dental, vision and life insurance coverage. Employees have access to disability and AD&D insurance. We also offer health care and dependent care flexible spending accounts, as well as health savings accounts, to eligible employees. Employees are able to enroll in our company's 401k plan and employer-funded retirement plan. Newly hired employees accrue 6.16 hours of paid time off (PTO) on a per pay period basis based on hours worked (up to a maximum of 160 PTO hours per year) and receive ten paid holidays throughout the calendar year. Additional details regarding BECU Benefits can be found here.

IMPACT YOU'LL MAKE:

At BECU we are beginning our journey to mature our members' identity security and experience by implementing a Member/Customer Identity Access Management (CIAM) solution to leverage modern authentication options in support of 1.5 million users with the intent to grow. The CIAM solution will consist of a cloud-based set of vendor products, an internally developed API service layer, and a web application for members to manage their identity authentication and security.

We seek a Sr Identity & Access Management Engineer to work within our CIAM DevOps team who will be responsible to find, fix and prevent security flaws across the entire surface of BECU products. The role will run the programs that eliminate structural security flaws, beyond simply pointing out issues, to solve problems through close partnership with product and infrastructure teams and our data security, secure frameworks, and security analysis teams. The role will address identity and data loss through IAM solutions for cloud or data center facilities utilizing proven identification, authorization, access, and directory services and solutions. The role is also expected to scope, prepare, and deliver goal-oriented reviews that positively benefit our prevention, detection, and response capabilities, and constructively deliver and drive post-assessment remediation activities.

WHAT YOU'LL DO:

• Researching Security Threats: Discover and translate novel tactics, techniques, and procedures (TTPs) that could compromise user identities and data into custom security detections.
• Advancing IAM Strategies: Lead the enhancement of IAM strategies for customers/members and automation capabilities, collaborating with customers and business owners to meet integration requirements.
• Work with customers and business owners: Lead program design review on the integration requirements including system integration and user lifecycle into the IAM platform.
• Conducting Technical Reviews: Identify privacy issues in both internal and external systems, working on the development of strategic roadmaps for the IAM systems and program.
• Driving Enterprise-wide Standards: Lead the establishment and maintenance of enterprise-wide standards for identity controls, authentication, access, and authorization management.
• Collaborating with Business Partners: Work closely with key business partners to continuously improve threat and vulnerability visibility to digital assets throughout the organization.
• Ensuring Data Security: Ensure that security-relevant data is appropriately built and routed to be used for monitoring, alerting, and reporting.
• Training and Development: Collaborate across cybersecurity and IT teams for service improvement in data center and cloud technologies.
• Engaging with Vendors: Engage with and manage vendors as needed while keeping current on the IT threat landscape and upcoming security trends.
• Performing Additional Duties: Perform additional duties as assigned, ensuring full-time hours are met and providing support as required.

WHAT YOU'LL GAIN:

• A chance to elevate your career and skills while contributing to the robust technological landscape of BECU.
• An opportunity to be part of a collaborative and innovative team where your ideas and contributions fuel the growth and success of BECU and trust of our members.

QUALIFICATIONS:

Minimum Qualifications:

• Bachelor's degree in computer science, IT, Business or equivalent work or educational experience required.
• Minimum of seven years working with security tools and/or information technology operations required.
• Minimum of five years working with data tools required, including performing deployment and configuration, and maintaining operations and content development.
• Demonstrated understanding of modern Identity & Access Management concepts and best practices required.
• Experience working with system owners and users on the IAM requirements and best use of technology in place. Consult with technology and business leaders as required.
• Knowledge of programming and scripting skills (e.g., PowerShell, Python, JAVA) required.
• Be available on an on-call basis to respond to pending issues or problems arising during non-business hours and provide support and response.

Desired Qualifications:

• Advanced degree preferred.
• Active CISSP, CISM, or equivalent certification preferred.
• Experience in Okta, ForgeRock, PingOne or P1AS preferred.
• Experience in Azure API infrastructure functionality with a strong focus on identity-based security and an excellent user experience preferred.
• Knowledge of or experience in developing processes and flows that support and enhance a secure infrastructure including repair, maintenance and installation of security appliances and systems.

JOIN THE JOURNEY:

Ready to make an indelible impact? Eager to be a part of a collaborative and innovative team where your ideas and contributions don't just fill a role, but fuel the growth and success of BECU? Embrace the opportunity to grow with us. Apply now and bring your expertise to the table. Your journey of influence, innovation, and impactful contribution starts now. #BECU #YourGrowth #BECUJourney

EEO Statement:

BECU is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, veteran status, disability, sexual orientation, gender identity, or any other protected status.