Systems Engineer III

We are seeking an experienced, analytical, and security-focused Senior Security IDaaS Systems Engineer to join our Federation Services team. In this role, you will leverage modern technology to improve, streamline, and automate enterprise IT security systems and services. You will develop and maintain the security posture of access controls and safeguards, facilitate secure application integrations, and build IAM infrastructure (including users, groups, service accounts, and API tokens) to protect critical information assets.

This is a high-impact security engineering position for a dedicated professional who excels at automated access management and cross-functional collaboration. You will partner closely with engineering teams to implement secure Authentication, Authorization, IDaaS, and API services-reducing manual bottlenecks, accelerating time-to-market, and fortifying enterprise resilience. If you possess deep expertise in Okta, OAuth, and cloud identity ecosystems, we want to hear from you.

Key Responsibilities Identity & Access Management Engineering Application Integrations: Facilitate and configure secure enterprise application integrations, establishing robust identity federation pathways across cloud and hybrid environments. IAM Object Management: Create and maintain IAM objects, including users, groups, service accounts, and API tokens, adhering to strict least-privilege security standards. Security Posture & Safeguards: Develop, maintain, and audit security rules, controls, and safeguards to protect banking and enterprise information assets. Code & Automation Development: Design and develop the code required to build and maintain scalable Access Management Services, leveraging scripting tools and automation to streamline workflows.

Operations, Compliance & Change Management Incident & Change Management: Manage support incidents, adhere strictly to enterprise change management (CM) processes, and contribute to rapid-recovery protocols for critical incidents. Governance & Reviews: Conduct security reviews, support compliance evaluations, and maintain thorough documentation of all IAM architectures and workflows. Knowledge Sharing: Act as a technical mentor, sharing IAM knowledge, building team capabilities, and continuously driving operational improvements.

Citizenship / Status: U.S. Citizenship or U.S. Permanent Resident status is required. Education: Bachelor’s degree in Information Technology, Computer Science, Cybersecurity, or a related field (or equivalent practical experience; Master’s degree preferred). Experience Baseline: Minimum of 5+ years of relevant professional experience in security engineering, Identity and Access Management (IAM), or enterprise IT systems. Technical Mastery: oIDaaS & Federation: Deep hands-on experience with Identity-as-a-Service platforms (Okta) and core federation protocols (OAuth, SAML). oGovernance & Provisioning: Working knowledge of Identity Governance & Administration (IGA) and Identity Management (IDM) frameworks. oCloud Platforms: Proven engineering experience across major cloud infrastructure environments (AWS / Azure). oScripting & Tools: Strong proficiency in scripting, API testing, and automation utilizing Postman and PowerShell. oMethodologies: Experience working within Agile development and project delivery environments. Core Competencies: Excellent business and organizational skills; strong time-management capabilities; ability to prioritize competing workloads and collaborate effectively in a team setting.

Preferred Attributes Experience with Microsoft Entra ID and governance platforms such as Saviynt. Familiarity with security frameworks and compliance standards, including NIST, FedRAMP, and the NIST Cybersecurity Framework (CSF). Proficiency in Python scripting and REST API development. Understanding of Role-Based Access Control (RBAC) models and enterprise network/infrastructure security.

For temporary assignments lasting 13 weeks or longer, AllSTEM Connections is pleased to offer major medical, dental, vision, 401k and any statutory sick pay where required.

We are committed to working with and providing reasonable accommodations to individuals with disabilities. If you need a reasonable accommodation for any part of the employment process, please contact your staffing representative who will reach out to our HR team.

AllSTEM Connections participates in the E-Verify program in certain locations as required by law. Learn more about the E-Verify program. _Participation_Poster_ES.pdf

We also consider for employment qualified applicants regardless of criminal histories, consistent with legal requirements, including, if applicable, the City of Los Angeles’ Fair Chance Initiative for Hiring Ordinance. Pursuant to applicable state and municipal Fair Chance Laws and Ordinances, we will consider for employment-qualified applicants with arrest and conviction records, including, if applicable, the San Francisco Fair Chance Ordinance. For Los Angeles, CA applicants: Qualified applications with arrest or conviction records will be considered for employment in accordance with the Los Angeles County Fair Chance Ordinance for Employers and the California Fair Chance Act.