Opportunity at
Culture AmpIdentity & Access Management Engineer
Culture Amp is hiring an Identity and Access Management Engineer to keep its systems secure while keeping them simple to use. The engineer runs the everyday…
Career Tools
About This Role
Culture Amp is hiring an Identity and Access Management Engineer to keep its systems secure while keeping them simple to use. The engineer runs the everyday administration of the identity environment and drives its ongoing improvement, with the main focus on Okta, application connections, lifecycle automation and identity governance. The aim is that each person gets exactly the permissions they need, when they need them, with audit readiness improving and…
Job Description
Culture Amp is hiring an Identity and Access Management Engineer to keep its systems secure while keeping them simple to use. The engineer runs the everyday administration of the identity environment and drives its ongoing improvement, with the main focus on Okta, application connections, lifecycle automation and identity governance. The aim is that each person gets exactly the permissions they need, when they need them, with audit readiness improving and manual work shrinking.
Routine work includes provisioning and removing accounts, resetting multi-factor authentication, handling access requests and managing sign-in, session and device trust rules in Okta. The engineer maintains SAML, SCIM and OIDC setups and group mappings, and brings new software-as-a-service applications online end to end, including single sign-on configuration and attribute mapping. A central deliverable is the set of joiner, mover and leaver workflows that carry data from the HR system into Okta through Okta Workflows, APIs and SCIM.
Governance tasks include configuring and refining Okta Identity Governance, such as access request flows and approval routes; automating access review reports; collecting directory and system logs as proof for SOC 2 and ISO 27001 reviews; and spotting unused licences and unapproved OAuth connections. The engineer also helps configure and troubleshoot Google Workspace, Active Directory or Microsoft Entra, Island and Jamf where needed.
The ideal candidate has hands-on experience running Okta or a comparable identity provider, has onboarded SaaS applications successfully, understands identity governance tools, and has built lifecycle pipelines linking HR systems to identity platforms. The person should be security-minded, balance strong controls against a smooth user experience, communicate clearly with technical and non-technical colleagues, and think about the whole system rather than the single task in front of them.
Responsibilities
- Run everyday Okta housekeeping: creating and removing accounts, MFA resets and access requests
- Manage sign-in, session and device trust policies
- Keep SAML, SCIM and OIDC setups and group mappings current
- Create and maintain the workflows that move people through joining, changing roles and leaving, from HR into Okta
- Configure and refine Okta Identity Governance, including request and approval paths
- Automate access certification reporting and collect proof for SOC 2 and ISO 27001 reviews
- Review idle licences and unapproved OAuth integrations
- Support Google Workspace, Active Directory or Entra, Island and Jamf when required
Requirements
- Practical background running Okta or another identity provider, with SAML, SCIM, OIDC and MFA know-how
- Record of onboarding SaaS applications, including troubleshooting provisioning
- Familiarity with Okta Identity Governance or comparable request tooling
- Experience building identity lifecycle pipelines that connect HR systems to identity providers
- Understanding of SaaS governance, access certification and shadow IT detection
- Working knowledge of cloud platforms, networking and device management
Qualifications
- Experience with Okta Workflows, APIs or SCIM automation
- Exposure to Active Directory or Microsoft Entra, Island or Jamf
Benefits
- Share options through the employee share option program
- Learning programs and coaching
- Quarterly refresh days, an extended year-end break and a monthly wellbeing allowance
- Parental leave from day one
- A MacBook and a budget for a home workspace
- Five paid social impact days each year
- Medical insurance for employee and family (US and UK only)
Frequently Asked Questions
Answers are based only on the employer’s listing; where it doesn’t say, neither do we.
Where is the role based?
The listing is marked on-site, and the posting does not name a city.
Which platforms does the role manage?
Okta is the core platform. The posting also mentions Google Workspace, Active Directory or Microsoft Entra, Island and Jamf as supporting systems.
Does the role involve audits?
Yes. It includes automating access certification reports and collecting log proof for SOC 2 and ISO 27001 reviews.
Is a salary stated?
No. The posting does not state a salary.
Sample Interview Questions
AI-generated questions tailored to this specific role — a preview of the full practice set.
