GAQ425R81

Location: San Francisco, CA. Mountain View, CA.  Atlanta, GA.  Bellevue, WA.  Seattle, WA.  Boston, MA.  Chicago, IL.  Denver, CO. New York, NY. Plano, TX.  Washington, DC.  remote US. 

At Databricks Information Technology, we are a product led organization transforming the way we work from how easy it is to use our IT services to the applications we develop that help us scale seamlessly in face of incredible growth. 

The Corporate Engineering team builds/provides services and infrastructure that allow our Bricksters to be successful. To accomplish this, the team is dedicated to the mission of ensuring that the underlying infrastructure is running smoothly and that systems and tools are working as expected.

Databricks is hiring an experienced Senior Identity and Access Management Engineer to manage critical Identity and Access Management processes and build future capabilities. This role is part of the Corporate Engineering team and is essential to scaling and optimizing our Identity Infrastructure as we continue our hyper-growth.

The impact you will have:

• You will work with different teams to ensure that the IAM services we offer the business are built for efficiency and scale.
• You will work closely with IT and Security teams to ensure the secure implementation of identity lifecycle processes (provisioning, updates, de-provisioning).
• You will provide Tier 3 support for IT support and partner with IT support leads to understand the identity trends and implement solutions to improve them through process or automation.
• You will work with internal IT teams to support and implement advanced configurations for identity systems such as Okta, and Opal, implementing access controls for SaaS applications.
• You will develop solutions or applications necessary to facilitate identity automation securely across Databricks Identity infrastructure.
• You will help define Service level agreements and processes working with IT support to streamline access requests and improve transaction transparency.
• You will contribute to developing IAC (Infrastructure as Code) around IaaS systems.
• You will strive toward making our processes better to provide a smooth and automated user LCM experience.

What we are looking for:

• 5+ years of experience or related experience administering Okta including advanced configurations such as OIDC/Oauth, SCIM, cross-tenant federation, Okta Workflows, and APIs
• 5+ years of experience or related experience administering identity for systems including IAM configuration for Saas and/or a subset of PAM, LDAP, Cert-based, Radius, and network infra.
• 2+ years of experience programming in a language such as Python, or node.js is required.
• Familiar with IAM concepts of least privileged access, Federation, Assurance, Reconciliation, and evidence collection for Audits.
• Familiar with design patterns to implement RBAC vs ABAC vs PBAC
• Familiar with customer identity and access management.
• Familiarity with APIs with a track record of leveraging them to improve efficiency through automation or data quality.

U.S. Citizenship Requirement:
In order to comply with U.S. Government information security and federal contractor regulations, including Department of Defense Cloud Computing Security Requirements for Impact Level 6 Cloud Service Provider personnel, and facilitate compliance with other regulations such as FedRAMP High baseline, and requirements of certain federal contracts, this role is open to United States citizens on United States Soil only.