What are the responsibilities and job description for the Senior Cybersecurity Engineer position at Lumiere Systems?
Applicants must be authorized to work in the United States on a full-time basis without the need for current or future visa sponsorship.
No third-party agencies, recruiters, or staffing firms will be considered for this position.
Overview
We are seeking a highly skilled Senior SaaS / Identity Engineer to design, implement, and manage enterprise-grade identity and SaaS automation solutions. This role focuses on Identity & Access Management (IAM), DevOps automation, and SaaS ecosystem integration, ensuring secure, scalable, and efficient user lifecycle management across both cloud and on-premise environments.
You will play a key role in architecting automation frameworks, enhancing identity workflows, and improving operational efficiency across a diverse application landscape.
Key Responsibilities
Identity & SaaS Administration
No third-party agencies, recruiters, or staffing firms will be considered for this position.
Overview
We are seeking a highly skilled Senior SaaS / Identity Engineer to design, implement, and manage enterprise-grade identity and SaaS automation solutions. This role focuses on Identity & Access Management (IAM), DevOps automation, and SaaS ecosystem integration, ensuring secure, scalable, and efficient user lifecycle management across both cloud and on-premise environments.
You will play a key role in architecting automation frameworks, enhancing identity workflows, and improving operational efficiency across a diverse application landscape.
Key Responsibilities
Identity & SaaS Administration
- Manage and administer enterprise SaaS and on-premise applications supporting multiple business units.
- Design and maintain user provisioning and deprovisioning workflows, ensuring compliance and security.
- Implement and manage SAML SSO, MFA/2FA, and Identity Federation solutions across platforms.
- Configure and maintain IAM integrations for applications such as Okta, Google Workspace (G-Suite), Azure AD, SAP, ADP, Concur, and others.
- Architect and develop automation tools to streamline:
- User lifecycle management
- Identity access workflows
- SaaS application onboarding and integration
- Build and maintain DevOps pipelines and toolchain improvements for IAM operations.
- Develop automation using scripting languages such as Python, Bash, PowerShell, and Java.
- Use APIs, webhooks, and event-driven architecture to integrate systems and workflows.
- Design and implement IAM solutions leveraging:
- OIDC, SAML, SCIM, and modern authentication protocols
- Secure token handling and lifecycle management
- Configure and manage advanced Okta capabilities including:
- Okta Access Gateway (OAG)
- Device Trust
- Adaptive MFA (AMFA)
- Desktop SSO (DSSO)
- Okta Workflows and API automation
- Okta Expression Language
- Analyze dependencies and design robust solutions integrating multiple SaaS and on-prem systems.
- Build and maintain integrations using:
- REST/SOAP APIs, LDAP, RADIUS, SFTP, SSH
- Data formats such as JSON, XML, YAML
- Utilize synchronization tools including:
- GAM/GADS (Google), Okta APIs, Okta Workflows, Google APIs
- Develop security analytics and reporting using:
- Python (Pandas)
- Log aggregation tools such as Sumo Logic
- XDR query frameworks
- Monitor system health, user activity, and identity risks.
- Partner with senior leaders, operations teams, and cross-functional stakeholders to deliver scalable SaaS solutions.
- Act as a technical advisor on IAM and SaaS strategy.
- Produce clear and comprehensive technical documentation including:
- Architecture diagrams
- Integration templates
- Runbooks and SOPs
- Develop training materials and provide knowledge transfer to operations/support teams.
- 8 years of experience in Identity & Access Management, SaaS administration, or DevOps automation
- Strong expertise in IAM platforms, especially Okta
- Hands-on experience with:
- SAML, OIDC, SCIM, and modern authentication protocols
- Enterprise identity integrations
- Advanced scripting experience in:
- Python, Bash, PowerShell, Java
- Deep knowledge of networking and integration protocols:
- LDAP, RADIUS, REST, SOAP, HTTP(S), SSH, SFTP
- Experience building automation using APIs and workflow engines
- Strong understanding of security best practices and identity governance
- Experience with cloud platforms (Azure, GCP, AWS IAM)
- Familiarity with Zero Trust security models
- Previous experience with enterprise-scale automation and DevOps pipelines
- Knowledge of log analytics and SIEM/XDR tools
- Certifications such as:
- Okta Certified Professional / Administrator
- Certified Identity and Access Manager (CIAM)
- Cloud certifications (Azure/AWS/GCP)