Identity and Access Management Engineer

J  o  b    D  e  s  c  r  i  p  t  i  o  n

THE DETAILS

Job Code:

11965

Grade:

20S

Status:

Exempt

POSITION AND PURPOSE

The Identity and Access Management Engineer will be responsible for designing and implementing automation solutions that significantly reduce the manual effort required to onboard end users into applications that are not Active Directory–enabled and do not support role-based access control (RBAC). This role focuses on streamlining identity and access provisioning through the use of scripting, orchestration, and robotic process

automation (RPA) to replicate and improve upon human-driven workflows. By automating repetitive, error-prone onboarding tasks, the Identity and Access Management Engineer improves consistency, accelerates access delivery, reduces operational risk, and frees technical staff to focus on higher-value activities, while ensuring access processes remain auditable, secure, and scalable.

WHO WE ARE

Golden 1 Credit Union is among the top credit unions in the country. As a member-owned, not-for-profit cooperative, Golden 1 is guided by the credit union philosophy of “people helping people.” We are committed to empowering our members and uplifting our communities as we create a more equitable and financially inclusive California. We welcome all who embrace our Core Values.

WHO YOU ARE

You bring strong technical expertise, a collaborative mindset, and a commitment to protecting organizational resources through effective identity governance and access controls. 

You are a passionate identity and access management professional who thrives on solving complex security and access challenges while delivering an exceptional user experience.

You excel at building trusted partnerships, balancing security with business needs, and driving continuous improvement in a dynamic environment. Most importantly, you are customer-focused, team-oriented, and motivated to help the organization grow securely and confidently.

THE WORK

•

Design, develop, and maintain automation solutions to reduce manual effort in end-user onboarding for applications that are not Active Directory–integrated.

•

Automate user provisioning and de-provisioning processes for applications that lack RBAC or modern identity interfaces.

•

Develop and maintain scripts (e.g., PowerShell, Python) to replicate and improve manual access workflows.

•

Build and support robotic process automation (RPA) solutions to automate repetitive, human driven application onboarding tasks.

•

Identify, analyze, and document existing manual onboarding processes to determine automation opportunities.

•

Collaborate with IAM, application, and infrastructure teams to ensure automation aligns with security and operational requirements.

•

Ensure automated processes are auditable, repeatable, and compliant with access governance standards.

•

Monitor, troubleshoot, and optimize automation workflows to ensure reliability and accuracy.

•

Create and maintain technical documentation for automation scripts, RPA workflows, and onboarding processes.

•

Continuously evaluate new automation technologies and techniques to improve efficiency and scalability.

•

Develop and maintain an understanding of the pertinent regulatory requirements and risks inherent to job responsibilities, establish, and maintain control activities that mitigate those risks consistent with the Credit Union’s risk appetite, and ensure operational integrity and compliance with applicable regulations.

QUALIFICATIONS

•

Bachelor’s Degree in computer science, Information Technology, or a related field. Equivalent work experience may be considered in lieu of 4-year degree. required

•

5+ years in IAM engineering, architecture or equivalent roles. required

•

Experience in engineering IAM projects, including planning, execution, and delivery within defined timelines and budgets.

•

Proven ability to mentor a team, manage projects, and work collaboratively across departments.

•

Proficiency in IAM technologies (e.g., One Identity, Okta, SailPoint, Entra, Microsoft Azure AD, CyberArk, etc.). Demonstrated level of proficiency PowerShell, SQL, or VB.Net scripting.

•

Strong understanding of identity governance, authentication protocols (e.g., SAML, OAuth, OpenID Connect), and access management.

•

Experience with IAM architecture and integration with enterprise systems.

•

Strong analytical and problem-solving skills with the ability to effectively address complex Identity and Access Management challenges. Demonstrates sound judgment in identifying root causes, applying best practices, and resolving system issues in a timely manner, including critical production outages and other operational incidents.

•

Excellent verbal and written communication skills to effectively interact with technical and non-technical stakeholders.

•

Strong organizational skills, attention to detail, and the ability to handle multiple priorities.

•

N/A

•

Solves Problems Proactively - Tackles complex issues independently

•

Innovates and Applies Insights - Suggests improvements

•

Delivers Results with Agility - Maintains quality during change 

•

Collaborates Across Teams - Works effectively with peers 

•

Influences and Persuades - Shares expertise to guide others 

ORGANIZATIONAL CONTACTS AND RELATIONSHIPS

INTERNAL:

Works closely with IT teams and is likely to have contact with leadership teams throughout the organization.

EXTERNAL:

Vendors and government agencies.

WORKING CONDITIONS

Work time includes weekend and after-hours time, based on organizational needs. This position works in-office where working conditions, lighting, temperature, audio, and workspace are all sufficient.

PHYSICAL REQUIREMENTS

Work requires the ability to constantly operate a computer and the ability to read, type, and communicate. Work may require the ability to move work-related supplies weighing up to 10-15 pounds.

DISCLAIMER/INTENT AND FUNCTION OF JOB DESCRIPTIONS

The above information on this description has been designed to indicate the general nature and level of work performed by team members within this classification. Because the nature of positions and job functions can change over time, this job description is not designed to contain or be interpreted as a comprehensive inventory of all essential functions, duties, responsibilities and qualifications requirements of team members assigned to this job. Job duties may be changed or modified in the Credit Union’s discretion. The Credit Union will keep team members updated on key functions, duties, and requirements of their position by communications from the Credit Union and by updating the job description from time to time. Any team member with questions about the nature of their job duties is encouraged to consult with their supervisor.

DECLARATION/ACKNOWLEDGEMENT

This job description outlines the essential functions and physical/mental requirements necessary to perform this role. Reasonable accommodations may be made to enable individuals with disabilities to perform these essential functions.