Identity and Access Analyst, IAM

Cloudera

. Own delivery of identity projects and contribute to identity architecture decisions with other teams .

Posted 11/10/2026full-timeRemote • IrelandMid-LevelSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in managing identity projects and architecture, with a strong focus on Okta administration, automation using Terraform, and secure identity lifecycle processes. Proficient in integrating identity solutions with HR systems and cloud platforms while ensuring compliance and security.

Highest-signal resume keywords

Okta AdministrationIdentity Lifecycle ManagementTerraform in CI/CDAuthentication Protocols (OIDC, SAML, SCIM)Access Governance Platforms

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

OktaTerraformPythonGoJavaScriptAuthentication ProtocolsInfrastructure as CodeIdentity Lifecycle ProcessesWeb Service APIsAutomation

Soft Skills

Methodical ApproachDocumentation SkillsCollaboration

Tools & Technologies

AWSAzureGoogle CloudOkta WorkflowsGitHubSpaceliftJenkins

Certifications & Qualifications

Okta Certified ProfessionalOkta Certified AdministratorOkta Certified Consultant

Industry Keywords

Zero Trust ArchitectureAccess Request PlatformsCompliance (SOC 2, SOX)HR Systems (Workday)Active Directory

Tech Stack

Tools & technologies

AWSAzureCloudJavaScriptJenkinsPythonTerraformGo

About the role

Key responsibilities & impact

Own delivery of identity projects and contribute to identity architecture decisions with other teams
Administer and improve Okta environments, including groups, group rules, policies, authenticators, and application integrations
Build and maintain identity configuration as code using Terraform and CI/CD
Review identity change requests from other engineers
Design and build secure self-service tooling and automation under Zero Trust principles, including Okta Workflows and scripted integrations
Ensure auditability of identity functions through configuration backup, change tracking, and logging to central systems
Design and automate identity lifecycle processes from joiner through mover to leaver, driven by the HR system of record
Onboard applications to the access request and just-in-time access platform
Remediate legacy groups, direct role assignments, and stale accounts according to group naming and lifecycle standards
Work with HR systems to manage organizational changes affecting groups and access
Support identity federation into AWS, Azure, and Google Cloud
Balance risk against business and user needs to keep access secure and easy to use
Write clear runbooks and documentation
Participate in an on-call rotation for identity services

Requirements

What you’ll need

6+ years of experience operating and deploying Okta or an equivalent identity provider
Strong experience with authentication protocols and systems, including OIDC, SAML, SCIM, and AD or LDAP
Experience with access governance or JIT platforms such as Lumos, SailPoint, or ConductorOne
Experience building integrations and automation against web service APIs in Python, Go, or JavaScript
Experience with infrastructure as code, ideally Terraform, in a CI/CD environment such as GitHub, Spacelift, or Jenkins
Experience working with other teams on identity changes that affect many users
Experience securing automation that holds privileged access, including separation of read and write functions and secrets management
A methodical approach to change and a habit of documenting what you build
Okta Certified Professional, Administrator, or Consultant certification may be an additional qualification
Experience with Okta Workflows may be an additional qualification
Experience with AWS IAM Identity Center or multi-account cloud access may be an additional qualification
Experience integrating an identity provider with an HR system such as Workday may be an additional qualification
Experience with Active Directory, RADIUS, OpenLDAP, or TACACS may be an additional qualification
Experience building for compliance, such as SOC 2 or SOX, may be an additional qualification
A working understanding of Zero Trust architecture may be an additional qualification
This role is not eligible for immigration sponsorship

Benefits

Comp & perks

Generous PTO Policy
Unplugged Days supporting work-life balance
Flexible WFH Policy
Mental & Physical Wellness programs
Phone and Internet Reimbursement program
Access to Continued Career Development
Comprehensive Benefits and Competitive Packages
Paid Volunteer Time
Employee Resource Groups