Impress employers and recruiters.
Choose from hundreds of resume examples.
Impress employers and recruiters.
Choose from hundreds of resume examples.
Target Resume Now
Tailor your resume to this Senior Workforce IAM Engineer role.
Rezi rewrites your resume against College Board's job description. Free.
Tailor your resume to this Senior Workforce IAM Engineer role.
Rezi rewrites your resume against College Board's job description. Free.
Don't guess if your resume is good enough.
See how it scores against the Senior Workforce IAM Engineer posting at College Board — free, in seconds.
Don't guess if your resume is good enough.
See how it scores against the Senior Workforce IAM Engineer posting at College Board — free, in seconds.
About the Role
As a Senior Engineer on the WIAM team, you will own the Governance and Compliance pillar, ensuring its goals are met. This involves managing access reviews, security attestations, and least-privilege enforcement for human, service, and AI agent identities. You will also contribute to broader WIAM team tasks, including access provisioning, identity management, and automation, always with a governance lens.
Responsibilities
- Plan and forecast the year's review cycle in Okta, including annual recurring reviews and new work.
- Design, configure, launch, monitor, and close access reviews, account reviews, and security attestations in Okta across human, service, and AI agent identities.
- Bring new account types into the recurring review cycle as they come into scope.
- Run the annual user access review cycle end to end, from scoping and reviewer assignment through remediation, closure, and delivery of the auditor reporting package.
- Fulfill evidence requests from internal College Board groups and external auditors by the agreed due date.
- Verify requirements and review data before launch, and bring any issues you spot to the review owner.
- Maintain the job guides and documentation that let another engineer run a review cycle correctly without you.
- Partner with Security, Risk, Audit, Technology and business teams to translate security, compliance and technical requirements into workable identity controls.
- Keep WIAM's practices aligned to College Board information security policy, tracking policy changes and flagging where team practice needs to move.
- Integrate AI agent identities into the IGA platform as they come online, with defined owners, lifecycle states, and reviewable access.
- Define the ownership model for AI agents: who is accountable for an agent's access, and what happens when its purpose or owner changes.
- Bring AI agent identities under access review and least-privilege enforcement on the same cycle as human and service accounts.
- Govern the access AI tools and agents hold to College Board systems and data.
- Build and run the attestation flows for AI tools as the organization adopts them, reusing patterns rather than rebuilding per tool.
- Partner with AI governance stakeholders and Risk Engineering so identity controls for agents are designed once and land in the right place.
- Work alongside the team on day-to-day identity engineering, including onboarding, offboarding, and access requests.
- Direct and review governance pillar work carried out by other engineers on the team, remaining accountable for the outcome.
- Establish and maintain account ownership and accountability across identity types: named owners and defined lifecycle states for human, service, and workload identities, extending to API identities as they come into scope.
- Enforce least privilege with exceptions documented and tracked.
- Monitor and correct any unintended changes between approved and actual entitlements across centralized applications.
- Automate enforcement and evidence with Okta Workflows and platform APIs.
- Measure the team's controls against recognized industry frameworks such as NIST, identify gaps, and propose how to close them.
- Report on the enforcement of the pillar's controls with documented, traceable data.
- Analyze access and entitlement data to support troubleshooting, audits, and continuous improvement.
- Participate in the team's on-call rotation, responding to identity platform incidents and following established escalation procedures.
Requirements
- 5+ years of identity and access management and/or security engineering experience, including hands-on work with Active Directory, Entra ID, and Okta.
- Experience designing and running access reviews, certifications, or attestation campaigns at scale, including scoping, reviewer assignment, remediation, and closure, and delivering the evidence to internal or external auditors.
- Working knowledge of policy and compliance frameworks such as NIST, and the judgment to translate framework guidance into practical control requirements.
- Hands-on production experience with Okta, especially Okta Identity Governance and Okta Workflows.
- Experience with agentic AI governance: treating agents and workload identities as governed identities with owners, lifecycle states, and certifiable access.
- Solid grounding in identity and access standards (SAML, OIDC, OAuth 2.0, SCIM) and in role- and attribute-based access control, SSO, MFA, and least privilege.
- A secure-by-design mindset, with security built in as a system is designed, and a habit of checking a system’s actual state rather than what the configuration screen reported and of tracing a number back to the record it came from.
- Strong written communication and the ability to see a control from the business and end-user perspective as well as the engineer's, including explain a control to someone who does not work in identity.
- Experience as an IT auditor or in a GRC function, testing controls over identities, provisioning, and access (Preferred).
- Enterprise security certifications or recent coursework (e.g., CISSP, CISA, CRISC, Okta certifications, or similar) (Preferred).
- A working understanding of defense in depth and how to implement layered controls in practice (Preferred).
- A passion for expanding educational and career opportunities and mission-driven work.
- Authorization to work in the United States for any employer.
- Curiosity and enthusiasm for emerging technologies, with a willingness to experiment with and adopt new AI-driven solutions and comfort learning and applying new digital tools independently and proactively.
- Clear and concise communication skills, written and verbal.
- A learner's mindset and a commitment to growth: welcoming diverse perspectives, giving and receiving timely, respectful feedback, and continuously improving through iterative learning and user input.
- A drive for impact and excellence: solving complex problems, making data-informed decisions, prioritizing what matters most, and continuously improving through learning, user input, and external benchmarking.
- A collaborative and empathetic approach: working across differences, fostering trust, and contributing to a culture of shared success.
Skills
- Active Directory
- Entra ID
- Okta
- Okta Identity Governance
- Okta Workflows
- SAML
- OIDC
- OAuth 2.0
- SCIM
- Role-based access control
- Attribute-based access control
- SSO
- MFA
- Least privilege
- PowerShell
- ADManager Plus
- CyberArk
- 1Password
Location
- Remote
Work Type
- Full-time
- Remote
- Hybrid
Experience Level
- Senior
Salary/Compensations
- $153,000 – $166,000
About the Company
- College Board is a self-sustaining nonprofit that believes in fair and competitive compensation.
- We offer a meaningful career, a supportive team, and a comprehensive package designed to help you thrive.