Sr. Engineer, Identity and Access Management

At Wizards of the Coast, we connect people around the world through play and imagination. From our genre-defining games like Magic: The Gathering® and Dungeons & Dragons® to our growing multiverse, we continue to innovate and build new ways to foster friendship and connection. That’s where you come in!

The Client Services team is seeking an experienced, collaborative, and creative problem solver as the new Sr. Engineer, Identity and Access Management!

In this role, you will work towards unifying our approach to identity by providing technical and operational expertise in information security systems, principles, and practices to ensure the protection of corporate data and intellectual properties. You will own the engineering and operational support for Wizards’ IAM infrastructure and its integration with Microsoft Office 365 and Azure, as well as OKTA.

The Identity Access Management (IAM) Sr. Engineer will play a key role in design, maintenance, and ongoing support of processes related to the Wizards enterprise directory and IAM platforms. This position will work through developing, engineering, deploying and supporting comprehensive solutions based on outstanding and sophisticated requirements and problems as they relate to identity and directory services and must have a proven track record of providing engineered solutions.

What You’ll Do

• Work collaboratively to craft and implement innovative solutions to complicated identity management problems including Role Based Access Control, Attribute Access Control, Segregation of Duties, Identity Analytics, Predictive provisioning, etc.
• Drive strategic direction and evolution of identity management technologies and processes for both cloud and cloud/hybrid based systems.
• Design, Build and Operate Identity and Access controls and platforms such as IaaS (e.g., Azure AD, Okta). RBAC, SSO, MFA, Privileged Account and Access Management, IAM Automation, Conditional Access, and others
• Evaluating, selecting, and implementing IAM solutions and workflows that facilitate efficient and repeatable access management controls and governance, including onboarding/offboarding.
• Analyze current Directory Services environment to identify opportunities to develop continuous improvement.
• Assist in conducting risk assessments to evaluate the efficiency of existing controls and assess the impact of proposed changes to business processes, applications and systems.

What You’ll Bring:

• B.S. degree in a computer science, Information Technology, or related computer related field or equivalent experience
• 5+ years of relevant practical experience in IAM engineering and support of large-scale, global environments and RBAC.
• Demonstrated ability administering AD Premium.
• Implementation experience on one or more of the IAM and Provisioning platforms such as AD Premium or Okta.
• Familiarity with various IT / Security technologies including DNS, DHCP, MS Exchange, Firewalls, VPN Gateways, IPS, Proxy, Endpoint Security, Vulnerability Management, SEIM, etc.
• Strong awareness of Information Security trends and technology supporting SSO, MFA, Automation, Conditional Access, and others.
• Knowledge of security and compliance frameworks such as NIST/FedRamp, SOX, SOC, ISO, SOC2, PCI, ZeroTrust, SaaS Security Framework, Data Security Foundations, etc.
• Experience with RESTful APIs, scripting, SQL, and other supporting technologies.
• Must have experience in analyzing business and user needs and translate those into requirement specifications according to industry standards and methodologies.

Nice to Have:

• Having knowledge in cloud hosting and integration experience with Azure and AWS;
• Excellent communication skills including experience speaking to technical and business audiences and writing engineering and design documents.
• A passion for mentoring and guiding engineers
• Curiosity, strong critical thinking skills, and a willingness to learn.

Compensation Range, Currency USD:

• Starting Pay Range: $123,040
• Pay Range End: $202,680

We are an Equal Opportunity / Affirmative Action Employer

The above is intended to describe the general content of and the requirements for satisfactory performance in this position. It is not to be construed as an exhaustive statement of the duties, responsibilities, or requirements of the position.

We will ensure that individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process, to perform essential job functions, and to receive other benefits and privileges of employment. If you are selected to move forward in our application process and need to request an accommodation, please let your recruiter or coordinator know.