> Markdown version of [/jobs/ext/2097102-identity-governance-engineer](https://www.wearedevelopers.com/jobs/ext/2097102-identity-governance-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Identity Governance Engineer - **Company:** Propertyvalue Wonder Group, Inc. - **Location:** New York, United States - **Experience:** Experienced - **Salary:** $176,000.0 - $183,500.0 - **Contract:** Permanent contract - **Skills:** Spreadsheets, Cyber Security, Data Mining, Identity and Access Management, Python (Programming Language), OAuth, OpenID, Windows PowerShell, Role-Based Access Control, Azure Active Directory, Security Assertion Markup Language (SAML), Scripting, Google Cloud, Cloud Platform System, IT General Controls (ITGC), Okta - **Published:** August 17, 2026 - **Apply:** https://www.dice.com/job-detail/e6cbc9ec-3202-4c88-9118-b03d0c10f019 ## About the Role * 3-5 years of experience in identity and access management, information security, or GRC with a direct focus on identity governance * Demonstrated experience administering Okta in a production environment, including lifecycle management, SAML/OIDC app integrations, group rules, and access policies * Hands-on experience owning or contributing to access certification campaigns (joiner/mover/leaver processes, periodic access reviews) * Experience supporting or directly responding to SOX IT General Controls (ITGCs) audits, including access controls and user access review (UAR) evidence * Proven ability to document IAM policies, procedures, and control narratives suitable for external auditor consumption Technical Skills * Working knowledge of SAML 2.0, OIDC, OAuth 2.0, and SCIM provisioning * Familiarity with IAM governance across at least one major cloud platform (AWS IAM, Azure Entra ID / PIM, or Google Cloud Platform Cloud IAM) * Scripting or automation experience - Python or PowerShell applied to identity workflows (access reporting, entitlement data extraction, lifecycle automation). This is a required skill, not a preference. * Proficiency with spreadsheet tools for managing entitlement inventories, access review tracking, and audit evidence preparation * Understanding of role-based access control (RBAC), least privilege, and segregation of duties (SoD) concepts Soft Skills & Attributes * Able to work independently with minimal supervision on concurrent workstreams * Strong written communication skills - can produce clear policy documents, control narratives, and audit evidence packages without significant editing * Comfortable engaging application owners and business stakeholders to complete access reviews, including following up to meet deadlines * Detail-oriented with a documentation-first mindset appropriate for a SOX-controlled environment * Judgment to escalate appropriately when access anomalies or control gaps are identified ## Related Videos - [Keeping applications secure by evolving OAuth 2.0 and OpenID Connect](https://www.wearedevelopers.com/videos/100152-keeping-applications-secure-by-evolving-oauth-2-0-and-openid-connect) - [Un-complicate authorization maintenance](https://www.wearedevelopers.com/videos/889-un-complicate-authorization-maintenance) - [Delegating the chores of authenticating users to Keycloak](https://www.wearedevelopers.com/videos/1558-delegating-the-chores-of-authenticating-users-to-keycloak) - [Get started with securing your cloud-native Java microservices applications](https://www.wearedevelopers.com/videos/123-get-started-with-securing-your-cloud-native-java-microservices-applications) - [Delay the AI Overlords: How OAuth and OpenFGA Can Keep Your AI Agents from Going Rogue](https://www.wearedevelopers.com/videos/1637-delay-the-ai-overlords-how-oauth-and-openfga-can-keep-your-ai-agents-from-going-rogue) - [How to govern Vibe Coding for the Enterprise](https://www.wearedevelopers.com/videos/100290-how-to-govern-vibe-coding-for-the-enterprise) ## Related Articles - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again) - [The Best X (Twitter) Accounts for Developers](https://www.wearedevelopers.com/magazine/294-the-best-x-twitter-accounts-for-developers) - [Dev Digest 119 - ❤️ === ❤️](https://www.wearedevelopers.com/magazine/454-dev-digest-119) - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities)