Principal Identity & SaaS Platform Engineer

Fox Sports Interactive Media, LLC
Los Angeles, United States of America
2 days ago

Role details

Contract type
Permanent contract
Employment type
Full-time (> 32 hours)
Working hours
Regular working hours
Languages
English
Experience level
Senior
Compensation
$ 267K

Job location

Los Angeles, United States of America

Tech stack

API
Artificial Intelligence
Amazon Web Services (AWS)
Azure
Software as a Service
Computer Security
Cursor (Graphical User Interface Elements)
DevOps
Programming Tools
Identity and Access Management
Python
OAuth
OpenID
Powershell
Security Assertion Markup Language (SAML)
Software Engineering
Data Streaming
Google Cloud Platform
Okta
Large Language Models
Infrastructure as Code (IaC)
Gsuite
Virtual Agents
Api Design
GPT

Job description

As a Principal IAM & SaaS Engineer, you will serve as a senior technical leader responsible for the architecture, implementation, and ongoing evolution of Fox's Identity and Access Management (IAM) ecosystem and SaaS application portfolio. This role will drive secure, scalable identity solutions that enable the business while protecting enterprise assets, partnering closely with Security, Infrastructure, Engineering, and business stakeholders across the organization., * Architect & Optimize: Work with tech leadership to drive the strategic roadmap for our Okta IAM architecture and core SaaS platforms (Google Workspace, Slack, Zoom), ensuring high availability, scalability, and seamless user experiences.

  • Zero Trust & Access Control: Design and enforce granular access control policies, adaptive Multi-Factor Authentication (MFA), and Just-In-Time (JIT) provisioning models across all corporate and production systems.
  • Complex Lifecycle Governance: Partner with HR Ops to architect automated lifecycle workflows for a diverse workforce, including full-time employees, high-turnover production crews, freelancers, and third-party media vendors.
  • AI Stack & Non-Human Identity Security: Collaborate with Cybersecurity to establish data-loss prevention (DLP) guardrails and identity governance for enterprise AI tools (Claude, Cursor, ChatGPT, Gemini Enterprise). Define and manage lifecycle frameworks for Non-Human Identities (NHIs) like agents, service accounts, API tokens, and secrets.
  • Compliance & Technical Leadership: Act as the technical authority on SOX and regulatory compliance within the IAM space for a publicly traded media company. Document architectures, review controls, and provide technical guidance and mentorship to an existing team of Senior IAM Engineers.
  • Drive continuous improvement through automation, monitoring, and operational excellence.

Requirements

  • Experience: 10+ years of dedicated experience in Identity & Access Management (IAM) and SaaS engineering within a fast-paced, tech-forward enterprise environment.
  • Okta Mastery: Expert-level engineering and architectural experience with Okta (ISPM, Okta Workflows, IGA, and complex inbound/outbound provisioning setups).
  • SaaS Ecosystems: Deep administrative and security knowledge of Google Workspace, Slack, Zoom, and developer tools. Experience implementing enterprise guardrails around LLM and AI assistant tools is highly desirable.
  • Modern Identity Protocols: Strong fundamental knowledge of SAML 2.0, OIDC, OAuth 2.0, SCIM, and API-driven integrations.
  • Public Company Compliance: Proven experience designing, auditing, and maintaining IAM controls aligned with SOX, SOC 2, or equivalent frameworks required in a publicly traded landscape.
  • Collaborative Influencer: Exceptional communication skills with a track record of driving cross-functional initiatives across HR, Security, Software Engineering, and Creative Production teams without direct authority along with the ability to translate technical concepts for both technical and non-technical audiences.
  • Regular, on-site attendance at the workplace a minimum of 3 days per week is an essential function of the position. Selected candidate must be able to reliably meet this requirement.

NICE TO HAVE, BUT NOT A DEALBREAKER

  • Experience with Privileged Access Management (PAM) solutions.
  • Familiarity with AWS, Google Cloud Platform (GCP), or Microsoft Azure security services.
  • Experience supporting compliance frameworks such as SOX, ISO 27001, SOC 2, or similar standards.
  • Experience in media, entertainment, streaming, or technology organizations.
  • Strong scripting and automation experience using tools such as PowerShell, Python, or similar languages.
  • Familiarity with Infrastructure as Code (IaC) and DevOps practices.
  • Experience leading large-scale IAM modernization or cloud transformation initiatives

Benefits & conditions

Pursuant to state and local pay disclosure requirements, the pay rate/range for this role, with final offer amount dependent on education, skills, experience, and location is $160,000.00-267,000.00 annually. This role is also eligible for an annual discretionary bonus, various benefits, including medical/dental/vision, insurance, a 401(k) plan, paid time off, and other benefits in accordance with applicable plan documents. Benefits for Union represented employees will be in accordance with the applicable collective bargaining agreement.

About the company

Under the FOX banner, we produce and distribute content through some of the world's leading and most valued brands, including: FOX News Media, FOX Sports, FOX Entertainment, FOX Television Stations and Tubi Media Group. We empower a diverse range of creators to imagine and develop culturally significant content, while building an organization that thrives on creative ideas, operational expertise and strategic thinking.

Apply for this position