IAM Engineer III

At Jack Henry, we deliver technology solutions that are digitally transforming and empowering community banks and credit unions to provide enhanced and streamlined user experiences to their customers and members. Our best-in-class products are just the start as we lay the groundwork for the future of digital banking and payments. We hope you'll join us. We can't do it without you.

Engineer, Identity and Access Management (IAM), working under minimal supervision, will assist in the development and enhancement of IAM products, specifically Okta. They will support Single Sign-On integrations with SAML, OIDC, API authentication, lifecycle management integrations, workflows, and MFA policies, and make recommendations for improving the Okta service. They will provide operational support to the business, coach peers, and participate in discussions with various stakeholders on integration plans. Additionally, they will stay updated on industry trends and solve technical issues.

Assesses various circumstances and uses sophisticated analytical and problem-solving techniques to identify root cause. Resolves and assesses a wide range of issues in creative ways and suggests variations in approach. This job is the fully qualified and experienced professional. Works on problems of diverse scope where analysis of information requires evaluation of identifiable factors. Devises solutions based on limited information and precedent and adapts existing approaches to resolve issues. Uses evaluation, judgment, and interpretation to select right course of action. Work is done independently and is reviewed at critical points. Enhances relationships and networks with senior internal/external partners who are not familiar with the subject matter often requiring persuasion. Adapts style to differing audiences and often advises others on difficult matters. May provide coaching, and/or mentoring to subordinate team members.

This position may be worked remotely within the United States, with the exception of California. East coast applicants must be willing to work central or mountain time zone hours.

This position is not eligible for immigration sponsorship and support. Please do not apply if at any time you will need immigration support now or in the future (i.e., H-1B, STEM OPT Training Plans, etc.). All positions, regardless of location, may require an onsite interview or in-person onboarding requirements to verify your identity.

What you'll be responsible for:

• Assists in planning, designing, developing, and implementing IAM products such as Okta.
• Creates SSO integrations using industry standards, such as OIDC and SAML
• Manages MFA polices and enrollment factors
• Management of Directory Integrations
• Configure applications in the Okta OIN that can do LCM/SCIM
• Use Okta Workflows to solve business and security issues.
• Configures, integrates, and tailors existing IAM products to address business problems or meet client requirements.
• Reviews IAM technical white papers and provide guidance to the team on future offerings.
• Performs integrations with directories (cloud and on-prem) and cloud platforms (e.g., AWS, GCP, Azure).
• Aligns business needs with technology and standards related to identity creation, deletion, vaulting, and password management.
• Creates and update metrics, automating data collection and aggregation
• Builds automation using scripts, RPA, SQL, and other tools.
• Participates in information-gathering meetings with clients to understand their needs, business goals, and desired outcomes.
• Performs other duties as assigned.

What you'll need to have:

• Bachelors degree, preferably in IT or a related field
• Minimum of 4 years experience in IT
• 2 year experience with IAM
• Identity and Access Management Experience
• Experience with scripting languages, API's (REST, JSON), databases, or cloud infrastructure.
• Experience with Okta

What would be nice for you to have:

• Comprehensive knowledge and understanding of Engineering principles and practices within a professional discipline.
• Understanding of IAM platforms (Sailpoint, Saviynt, Okta) to support and maintain within the organization.
• Ensures IAM products align with the needs of the business and end-users.
• Assist in testing and maintenance of IAM systems.
• Experience with ITSM systems such as ServiceNow
• Knowledge of control frameworks such as NIST, PCI, SOX
• Knowledge of access management frameworks (RBAC/ABAC/PBAC).
• Understanding of cloud platforms (AWS, GCP, Azure).
• Knowledge of identity lifecycle management principles.
• Knowledge of security best practices and industry trends
• Technical writing and documentation abilities.
• Analytical and problem-solving skills
• Ability to explain technical concepts to various audiences.
• Ability to generate and interpret metrics and reports

If you got this far, we hope you're feeling excited about this opportunity. Even if you don't feel you meet every single requirement on this posting, we still encourage you to apply. We're eager to meet motivated people who align with Jack Henry's mission and can contribute to our company in a variety of ways.

Why Jack Henry?

At Jack Henry, we pride ourselves through our motto of, "Do the right thing, do whatever it takes, and have fun." We recognize the value of our associates and believe much of our company's strength and success depends on their well-being.

We demonstrate our commitment by offering outstanding benefit programs to ensure the physical, mental & financial well-being of our people is always met.

Culture of Commitment

Ask our associates why they love Jack Henry, and many will tell you it is because our culture is exceptional. We do great things together. Rising to meet challenges and seeking opportunities is part of who we are as an organization. Our culture has helped us stay strong through challenging times and we credit our dedicated associates for our success. Visit our Corporate Responsibility site to learn more about our culture and commitment to our people, customers, community, environment, and shareholders.

Equal Employment Opportunity

At Jack Henry, we know we are better together. We value, respect, and protect the uniqueness each of us brings. Innovation flourishes by including all voices and makes our business - and our society - stronger. Jack Henry is an equal opportunity employer and we are committed to providing equal opportunity in all of our employment practices, including selection, hiring, performance management, promotion, transfer, compensation, benefits, education, training, social, and recreational activities to all persons regardless of race, religious creed, color, national origin, ancestry, physical disability, mental disability, genetic information, pregnancy, marital status, sex, gender, gender identity, gender expression, age, sexual orientation, and military and veteran status, or any other protected status protected by local, state or federal law.

No one will be subject to, and Jack Henry prohibits, any form of discipline, reprisal, intimidation, or retaliation for good faith reports or complaints of discrimination of any kind, pursuing any discrimination claim, or cooperating in related investigations.

Requests for full corporate job descriptions may be requested through the interview process at any time.