Senior Identity & Access Engineer

Join Team CARFAX as a Senior Identity & Access Engineer

 Isn't it time you bragged about where you work? At CARFAX, we do, every day. We pride ourselves on being mission-focused on helping to grow a brand built on accuracy and integrity. We care deeply about our products and our customers. We’re more than just a company: We help millions of consumers make more informed decisions every day. We know that our teammates are our most valuable asset, and we value a balanced life while tackling challenging projects in a fast-paced environment.  One last thing: Our four-day week continues in Summer 2023!

As the Senior Identity & Access Engineer for CARFAX, you will be at the forefront of keeping us secure as we continue our transition to cloud-based technologies. You must have a proactive mentality to design & build our Identity and Access Management solutions - learning new tech quickly is key! Your ability to communicate with differing departments and groups is essential; plus effective self-managing skills are needed in order to complete tasks on schedule independently. 

This role has an expectation of 3 days in the office per week, subject to change based on future business needs.

 What you’ll be doing:

• Developing and maintain IAM policies, procedures, and standards to ensure compliance with organizational and regulatory requirements
• Leading the integration of IAM solutions with existing applications and systems, including user provisioning, authentication, and authorization
• Managing Microsoft Active Directory Forests & Domains including Domain Controllers and Group Policy as well as Azure AD
• Managing the Okta Environment, including configuring new applications, managing memberships, updating agents, etc
• Collaborating with cross-functional teams to understand business requirements and provide IAM solutions that meet security and usability goals
• Evaluating and recommending new IAM technologies and tools to improve security, efficiency, and user experience

 What we’re looking for:

• Post Secondary Education in a relevant field such as Information Security, or related experience
• Five years of experience with Identity and Access Management
• In-depth knowledge of identity and access management concepts, best practices, and technologies, such as Active Directory, Okta, SSO, and multi-factor authentication (MFA)
• Strong experience in designing, implementing, and managing IAM solutions, including user provisioning, role-based access control (RBAC), and access certifications
• Strong communication skills with the ability to interact and collaborate with technical and non-technical users
• Understanding of security concepts, including encryption, hashing, and public key infrastructure (PKI).
• In-depth knowledge of Active Directory and surrounding technologies
• Familiarity with various authentication protocols, such as SAML, OAuth, FIDO, and OIDC
• Knowledge of cloud-based IAM solutions and architectures, such as AWS IAM, Azure Active Directory, and Google Cloud Identity
• Familiarity with relevant regulations and compliance requirements, such as GDPR, SOX, and PCI DSS
• Industry certifications, such as CISSP, CISM, or vendor-specific certifications like Microsoft Certified: Azure Active Directory Administrator Associate or Okta Certified Professional, are highly desirable
• Proficiency in scripting and automation, using languages such as PowerShell, Python, or JavaScript
• General networking knowledge
• Experience with Identity Management in AWS
• General knowledge of Linux operating systems

What’s in it for you:

• Competitive compensation, benefits and generous time-off policies
• 4-Day summer work weeks and a winter holiday break
• RRSP matching
• Annual bonus program
• Casual, dog-friendly, and innovative office spaces

Don’t just take our word for it:

• 10X Virginia Business Best Places to Work
• 9X Washingtonian Great Places to Work
• 9X Washington Post Top Workplace
• Louis Post-Dispatch Best Places to Work

About CARFAX

CARFAX, part of S&P Global Mobility, helps millions of people every day confidently shop, buy, service and sell used cars with innovative solutions powered by CARFAX vehicle history information. The expert in vehicle history since 1984, CARFAX provides exclusive services like CARFAX Used Car Listings, CARFAX Car Care, CARFAX History-Based Value and the flagship CARFAX® Vehicle History Report™ to consumers and the automotive industry. CARFAX owns the world’s largest vehicle history database and is nationally recognized as a top workplace by The Washington Post and Glassdoor.com. Shop, Buy, Service, Sell – Show me the CARFAX™. S&P Global Mobility is a division of S&P Global (NYSE: SPGI). S&P Global is the world’s foremost provider of credit ratings, benchmarks, analytics and workflow solutions in the global capital, commodity and automotive markets.

CARFAX is an Affirmative Action/Equal Opportunity Employer. It is the policy of CARFAX to provide equal employment opportunity to all persons regardless of race, color, sex, pregnancy, religion, national origin, age, ancestry, citizenship status, veteran status, military status, disability or handicap, sexual orientation, genetic information or any other status protected by federal, state or local law. In addition, CARFAX will provide reasonable accommodations for qualified individuals with disabilities. We maintain a drug-free workplace. We are a participant in E-Verify.