What are the responsibilities and job description for the Identity Governance Engineer position at Blue Apron?
About Wonder
Everything’s on the menu at Wonder. Except compromise.
Wonder is the mealtime platform built to feed every craving in one order. With Wonder, you can mix and match hundreds of dishes from 20 exclusive restaurants in a single order, so everyone gets exactly what they’re craving. Enjoy everything from tacos to Thai with $0 delivery fees, plus dine-in or pick up at a Wonder location near you. Each dish is made to order on-site by our culinary team and served hot.
Behind the scenes, Wonder owns and operates every step of the dining experience, from recipe development to the technology that powers our experience, allowing us to deliver quality, variety, and consistency at scale.
Join us as we work to make great food more accessible.
About Wonder
Everything’s on the menu at Wonder. Except compromise.
Wonder is the mealtime platform built to feed every craving in one order. With Wonder, you can mix and match hundreds of dishes from 20 exclusive restaurants in a single order, so everyone gets exactly what they’re craving. Enjoy everything from tacos to Thai with $0 delivery fees, plus dine-in or pick up at a Wonder location near you. Each dish is made to order on-site by our culinary team and served hot.
Behind the scenes, Wonder owns and operates every step of the dining experience, from recipe development to the technology that powers our experience, allowing us to deliver quality, variety, and consistency at scale.
Join us as we work to make great food more accessible.
Experience
- 3–5 years of experience in identity and access management, information security, or GRC with a direct focus on identity governance
- Demonstrated experience administering Okta in a production environment, including lifecycle management, SAML/OIDC app integrations, group rules, and access policies
- Hands-on experience owning or contributing to access certification campaigns (joiner/mover/leaver processes, periodic access reviews)
- Experience supporting or directly responding to SOX IT General Controls (ITGCs) audits, including access controls and user access review (UAR) evidence
- Proven ability to document IAM policies, procedures, and control narratives suitable for external auditor consumption
Technical Skills
- Working knowledge of SAML 2.0, OIDC, OAuth 2.0, and SCIM provisioning
- Familiarity with IAM governance across at least one major cloud platform (AWS IAM, Azure Entra ID / PIM, or GCP Cloud IAM)
- Scripting or automation experience — Python or PowerShell applied to identity workflows (access reporting, entitlement data extraction, lifecycle automation). This is a required skill, not a preference.
- Proficiency with spreadsheet tools for managing entitlement inventories, access review tracking, and audit evidence preparation
- Understanding of role-based access control (RBAC), least privilege, and segregation of duties (SoD) concepts
Soft Skills & Attributes
- Able to work independently with minimal supervision on concurrent workstreams
- Strong written communication skills — can produce clear policy documents, control narratives, and audit evidence packages without significant editing
- Comfortable engaging application owners and business stakeholders to complete access reviews, including following up to meet deadlines
- Detail-oriented with a documentation-first mindset appropriate for a SOX-controlled environment
- Judgment to escalate appropriately when access anomalies or control gaps are identified
New York / New Jersey Base Salary: $176,000-$183,500
Wonder uses geographic-specific salary structures, which means the salary offered may vary depending on where the job is located. The final salary offer will take into account various factors, such as the candidate's skills, education, training, credentials, and experience.
Benefits
The benefits applicable to this role include a competitive compensation package with equity and a 401(k). We also offer a choice of medical, dental, and vision plans, company paid short and long term disability coverage, paid time off including flexible time off for exempt employees, paid vacation for non-exempt employees, and paid sick leave in compliance with applicable law in addition to paid parental leave, discounted meals and exclusive perks across the Wonder family of brands.
Eligibility, effective dates, and available plan options vary by employment classification and location. To learn more about benefits for this role, visit our Careers page here.
A Final Note
At Wonder, we build the best teams by hiring with an objective lens — evaluating people for their potential while championing diversity, equity, and inclusion. We do not discriminate based on race, color, religion, gender identity or expression, sexual orientation, national origin, age, military service eligibility, veteran status, marital status, disability, or any other protected class. As part of our commitment to fair and compliant hiring practices, Wonder participates in the federal government's E-Verify program to confirm employment eligibility. If you need an accommodation during the interview process, please let your recruiter know.
We look forward to hearing from you! We'll contact you via email or text to schedule interviews and share information about your candidacy.
Salary : $176,000 - $183,500