IAM Security Engineer

FormAssembly is seeking an experienced Security Engineer with exceptional technical skills to join our Security and Compliance department. As a Security Engineer, your role will be to work with other business units to ensure the highest level of security and compliance obligations are met.

We seek a motivated self-starter and team player to lead several aspects of security and compliance at FormAssembly. Responsibilities include ensuring FormAssembly meets the highest security standards, administering security audits, leading the production and tuning of detection rules, making infrastructure improvements, and helping achieve/maintain security standards such as PCI DSS Level 1, ISO-27001, HIPAA, GDPR, FedRAMP and others.

About Us:

FormAssembly is a 100% remote, fast-growing SaaS company with teammates all over the world that come together every day to help customers streamline data collection processes. We’re chasing major growth goals year after year, and we’re looking for talented, driven individuals to join our dynamic team.

FormAssembly works with 5,000+ leading companies worldwide to help them collect data quickly and securely, including Amazon, PayPal, Dell, Harvard, and more. We have been recognized in the 2020 Inc. 5000 list of fastest growing private companies for four years in a row, and we are a G2 Crowd Winter 2021 Leader. As we grow rapidly and adapt our product to better serve our impressive roster of customers, we’re also dedicated to fostering community and building relationships with our coworkers.

For a glimpse at what it’s like to work at a SaaS company with 35% year over year growth and teammates from all over the world who live out our core values of transparency, accountability, curiosity, ambition, composure, and kindness, learn about our awesome team and how and why we work remotely.

If you share our core values and want to work together to build something great for our customers, we’d be thrilled to have you apply for this position. FormAssembly is an equal opportunity employer. If you belong to an under-represented group in tech, you’ll find a welcoming culture that thrives on diversity.

This is a full-time position, open to all locations (working remotely from home).

About this position:

• This is a lead technical role, requiring technical hands-on experience with IAM tools such as Okta and experience implementing SAML, SSO, SCIM, and similar integrations.
• An ideal candidate will work effectively with security and compliance, engineering, product, and infrastructure teams to design security tools, automate where we can, and assist development teams in improvement planning.

In this position you will:

• Improve adoption and efficiency of our Identity & Access Management platform (Okta) by adding additional integrations, optimizing group/rule-based permission sets, and adopting workflows
• Troubleshoot, identify, and resolve technical identity and access management related issues.
• Coach other members of the organization on the best practices that should be followed in identity and access management.
• Stay up-to-date on current IAM threats and industry solutions.
• Work alongside our compliance team to prioritize key risk areas, and respond to technical inquiries from our Enterprise and Government customers.
• Share responsibilities for investigating and responding to security events
• Participate in audits such as SOC 2, PCI-DSS, ISO-27001, etc as needed
• Implement new and/or update existing security measures for the protection of FormAssembly infrastructure

Requirements

• 4+ years of experience in designing, configuring, and operating Identity & Access Management platforms (such as Okta), working with Single Sign-On (SSO) technologies, and supporting Multi-factor Authentication (MFA) solutions. Hands-on Okta experience preferred.
• Familiarity with Amazon AWS tools such as SecurityHub and GuardDuty, Inspector, Cloudtrail, and light scripting knowledge (such as python and PHP)
• Experience working in compliance and regulatory-focused environments, and familiarity with compliance standards such as CIS benchmarks for Cloud providers, PCI DSS Level 1, ISO-27001, HIPAA, GDPR, FedRAMP and others.

Preferred Certifications:

• Certified Identity and Access Manager (CIAM)
• Certified Cloud Security Professional (CCSP)
• Certified Information Systems Security Professional (CISSP)
• Okta Certified Professional, Administrator, or Consultant

Benefits

FormAssembly offers several benefits that help to facilitate a healthy team, personal growth, and a work-life balance, all of which contribute to creating a more engaged and passionate workforce.

• Health benefits (health, dental, vision) for team members based in the United States
• Company-paid life and disability insurance
• 401(k) with 4% company match for team members based in the United States
• Unlimited paid vacation and 10 company holidays
• Flexible work schedule
• 16 weeks of Paid Parental Leave
• Charitable contribution match
• Budget for professional development
• Company provided Mac laptop

You'll be joining a talented and fun team, working together to build something great!Compensation: $80,000-$100,000