IAM Security Engineer
Brandwatch · Remote - Hungary; Sofia, Bulgaria
About this role
**IAM Security Engineer — Cision** Cision is seeking an **IAM Security Engineer** to help build and maintain a robust **identity and access management (IAM)** ecosystem across our global footprint, with a strong focus on **Okta**. --- **What you’ll do** - Design and implement IAM solutions using **Okta** (SSO, MFA, lifecycle management) - Manage identity lifecycle processes (**Joiner, Mover, Leaver**) across enterprise systems - Integrate Okta with **cloud platforms** (e.g., **Azure AD**, **AWS IAM**), **directory services** (e.g., **Active Directory**), and **third-party applications** - Support audits and compliance initiatives (e.g., **SOC 2**, **ISO 27001**) and security assessments - Monitor and respond to **IAM-related incidents** and vulnerabilities - Define and enforce access policies and **RBAC** within Okta, and maintain existing IdP instances - Contribute to IAM roadmaps and strategic initiatives --- **What you bring** - **3–5 years** of experience in IAM engineering or related security roles - Certifications (e.g., **Okta Certified Professional**, **CISSP**, **Azure Security Engineer**) are a plus - Strong experience with **SAML** and **OIDC** federation protocols and working with federated Identity Providers (e.g., Okta) - Familiarity with **Okta Workflows**, **API integrations**, and **SCIM provisioning** - Experience with scripting/automation (e.g., **PowerShell**, **Python**) - Knowledge of regulatory frameworks (e.g., **GDPR**, **ISO 27001**, **SOC 2**) - Bachelor’s degree in Computer Science, Information Security, or related field --- **About Cision** Cision is a global leader in media intelligence and communications solutions. We’re committed to fostering an inclusive environment and providing reasonable accommodations for qualified individuals. *Note: Cision communicates with candidates and extends job offers through direct channels, not third parties.*
Listing freshness
CronJobs last confirmed this listing 2h ago. If its source stops confirming the opening for seven days, this page is removed from active inventory.