Senior IAM Engineer

About the role

We are looking for a Senior IAM Engineer to own and advance our identity and access management program. You will be the subject matter expert for Okta and the broader IAM ecosystem at Better — administering the platform end to end, integrating it with the systems our teams rely on every day, and partnering closely with Security to ensure our access controls are strong, scalable, and easy to use.

What you'll do

• Administer Okta end to end, including users, groups, applications, authentication policies, sign-on rules, network zones, and Okta Workflows across the full product suite
• Configure and support Okta authentication and access standards, including OAuth/OIDC, SAML, SCIM, Okta FastPass, Device Trust, device-bound SSO, and Device Access
• Integrate and manage third-party SaaS applications in Okta, including SSO setup, SCIM-based provisioning and de-provisioning, group push, and role mapping
• Own Okta's integrations with core enterprise systems, including Microsoft (Entra ID / Active Directory) and Workday as the HR system of record driving joiner, mover
• Design and operate the joiner/mover/leaver lifecycle, ensuring timely, accurate, and auditable provisioning and de-provisioning across all in-scope applications

What you need

• 5–9 yrs of experience
• IAM
• Active Directory
• Workday
• SOX
• Compliance
• Root cause analysis
• Any graduate

Good to have

• Python
• REST APIs
• JavaScript