Staff Engineer, Identity & Access Management

Responsibilities

Who We Are :

SiriusXM and its brands (Pandora, SiriusXM Media, AdsWizz, Simplecast, and SiriusXM Connected Vehicle Services) are leading a new era of audio entertainment and services by delivering the most compelling subscription and ad-supported audio entertainment experience for listeners - in the car, at home, and anywhere on the go with connected devices.

Our vision is to shape the future of audio, where everyone can be effortlessly connected to the voices, stories and music they love wherever they are.

This is the place where a diverse group of emerging talent and legends alike come to share authentic and purposeful songs, stories, sounds and insights through some of the best programming and technology in the world.

Our critically-acclaimed, industry-leading audio entertainment encompasses music, sports, comedy, news, talk, live events, and podcasting.

No matter their individual role, each of our employees plays a vital part in bringing SiriusXM's vision to life every day.

SiriusXM is the leading audio entertainment company in North America, and the premier programmer and platform for subscription and digital advertising-supported audio products.

SiriusXM's platforms collectively reach approximately 150 million listeners, the largest digital audio audience across paid and free tiers in North America, and deliver music, sports, talk, news, comedy, entertainment and podcasts.

Pandora, a subsidiary of SiriusXM, is the largest ad-supported audio entertainment streaming service in the U.S. SiriusXM's subsidiaries Simplecast and AdsWizz make it a leader in podcast hosting, production, distribution, analytics and monetization.

The Company's advertising sales organization, which operates as SXM Media, leverages its scale, cross-platform sales organization and ad tech capabilities to deliver results for audio creators and advertisers.

SiriusXM, through Sirius XM Canada Holdings, Inc., also offers satellite radio and audio entertainment in Canada. In addition to its audio entertainment businesses, SiriusXM offers connected vehicle services to automakers.

How you'll make an impact :

We are seeking a Staff Engineer to help drive our identity transformation at SiriusXM. In this role, you will be responsible for executing a comprehensive strategy to optimize and secure our identity and access management infrastructure.

This is an excellent opportunity to make a significant impact in a growing organization committed to delivering outstanding user experiences.

What you'll do

• Lead the design and implementation of Okta solutions to meet organizational identity and access management needs. Configure and optimize Okta environments for scalability and security.
• Research and recommend emerging technologies to keep SiriusXM at the forefront of the IAM space.
• Effectively drives efficiency and velocity of the IAM team.
• Provide guidance and mentorship to peers as well as internal stakeholders.
• Drive the adoption of Okta from legacy IDP systems, ensuring a seamless transition with minimal downtime.
• Collaborate with various teams, including IT, security, and application owners, to ensure proper integration with Okta services and alignment with the organization's security policies.
• Establish and maintain monitoring, reporting, and auditing processes for Okta services to ensure compliance with relevant regulations and internal policies.
• Develop and maintain technical documentation, including architectural diagrams, process flows, and troubleshooting guides, for Okta services.
• Provide subject matter expertise and guidance to team members and stakeholders on IAM best practices, industry trends, and emerging technologies.
• Develop and maintain Python scripts and applications to automate IAM processes, integrate with Okta APIs, and support custom identity management solutions.
• Leverage AWS services to enhance IAM solutions, including integration with AWS IAM, AWS SSO, and other relevant services.
• Diagnose and resolve complex issues related to Okta and IAM systems. Provide tier-3 support and work with vendors and internal teams to address and resolve incidents.

What you'll need :

• Bachelor's degree in Computer Science, Information Systems, or a related field.
• Minimum of 7 years of experience in IAM, with a focus on implementing and managing Okta solutions.
• In-depth understanding of IAM concepts, technologies, and standards.
• In-depth knowledge of Okta platform services, including Universal Directory, SSO,AMFA, Advanced Server Access, Lifecycle Management (Joiner, Mover, Leavers) & Workflows, SAML & OIDC integrations, IDP Federations
• Familiarity with SDLC process, including designing and developing applications
• Knowledge of HRIS and directory systems, such as Workday, Active Directory, LDAP, Azure Active Directory
• Experience configuring and managing Multi-Factor Authentication (MFA) factors for Okta users
• Advanced AWS Experience (Lambda, Kinesis, AWS EventBridge, dynamoDB, IAM, etc)
• Exceptional communication skills, with the ability to effectively navigate complex, matrixed environments and lead through ambiguity
• Experience in working with REST APIs with a security and automation focused mindset
• Strong troubleshooting and problem-solving skills to identify and resolve complex technical issues
• Attention to detail, strong organization skills and strong communication skills
• Must have legal right to work in the U.S.

At SiriusXM, we carefully consider a wide range of factors when determining compensation, including your background and experience.

These considerations can cause your compensation to vary. We expect the base salary for this position to be in the range of $132,000 to $175,000 and will depend on your skills, qualifications, and experience.

Additionally, this role might be eligible for discretionary short-term and long-term incentives. We encourage all interested candidates to apply.

Our goal at SiriusXM is to provide and maintain a work environment that fosters mutual respect, professionalism and cooperation.

SiriusXM is an equal opportunity employer that does not discriminate on the basis of actual or perceived race, creed, color, religion, national origin, ancestry, alienage or citizenship status, age, disability or handicap, sex, gender identity, marital status, familial status, veteran status, sexual orientation or any other characteristic protected by applicable federal, state or local laws.

The requirements and duties described above may be modified or waived by the Company in its sole discretion without notice.