Is the Identity & Access Management Engineer role remote?

It's hybrid — Culture AMP expects some on-site time in Melbourne.

Where is the role based?

Culture AMP is hiring for this position in Melbourne.

What's the tech stack?

Joblaze extracted these technologies from the posting: Active Directory, Google Workspace, Island, Jamf, MFA, MS Entra.

What seniority level is this role?

Culture AMP targets mid-level candidates for this position.

Is this full-time or contract?

Full-time for this Identity & Access Management Engineer role at Culture AMP.

Identity & Access Management Engineer at Culture AMP

Joblaze summary

In the role of Identity & Access Management Engineer at Culture Amp, the individual will manage the daily operations of identity and access systems, primarily using Okta, to ensure secure and efficient access for employees. Key skills include experience with identity governance, lifecycle automation, and SaaS application onboarding. This position is well-suited for someone with a strong security mindset and a background in systems administration, particularly in identity management. The team emphasizes collaboration across technology and business units to enhance user experience while maintaining robust security protocols.

Joblaze insights

Listed 9 days ago on Joblaze — tracked directly from Culture AMP's career page.
Culture AMP has 36 other open roles including Senior Customer Success Manager, Enterprise, Senior Customer Success Manager, Enterprise, Senior Applied AI Engineer.
271 active Google Workspace roles on Joblaze right now.
166 active Okta roles on Joblaze right now.
128 active SAML roles on Joblaze right now.
Typical Google Workspace salary we track runs $82,700–$150,000 (median $113,815, across 113 roles).

Quick facts

Is the Identity & Access Management Engineer role remote?: It's hybrid — Culture AMP expects some on-site time in Melbourne.
Where is the role based?: Culture AMP is hiring for this position in Melbourne.
What's the tech stack?: Joblaze extracted these technologies from the posting: Active Directory, Google Workspace, Island, Jamf, MFA, MS Entra.
What seniority level is this role?: Culture AMP targets mid-level candidates for this position.
Is this full-time or contract?: Full-time for this Identity & Access Management Engineer role at Culture AMP.

From the original posting

We’re big believers in the power of IRL, so for most roles we ask Campers to work from their local Culture Amp office an average of 2 days a week to unlock connection, pace and culture together.

Join us on our mission to make a better world of work.

Culture Amp is the world’s leading employee experience platform, revolutionizing how 25 million employees across more than 6,000 companies create a better world of work. Culture Amp empowers companies of all sizes and industries to transform employee engagement, drive performance management, and develop high-performing teams. Powered by people science and the most comprehensive employee dataset in the world, the most innovative companies including Canva, On, Asana, Dolby, McDonalds and Nasdaq depend on Culture Amp every day.

Culture Amp is backed by leading venture capital funds and has offices in the US, UK, Germany and Australia. Culture Amp has been recognized as one of the world’s top private cloud companies by Forbes and most innovative companies by Fast Company.

For more information visit cultureamp.com.

How you can help make a better world of work

As our Identity & Access Management Engineer, you’ll help keep Culture Amp secure, connected, and easy to work in. You’ll own the day-to-day administration and continuous improvement of our identity and access environment, with a focus on Okta, application integrations, lifecycle automation, and identity governance. Your work will help ensure that every Camper has the right access at the right time, while strengthening our audit readiness and reducing manual effort across the business.

As part of this team of amazing humans,

You’ll work across Technology and with stakeholders throughout Culture Amp to make identity and access processes reliable, secure, and straightforward. You’ll bring a practical, automation-oriented approach to managing the systems that enable Campers to do their best work.

You will

Manage day-to-day identity and access administration in Okta, including provisioning, deprovisioning, MFA resets, application access requests, and authentication, session, and device trust policies.
Full lifecycle management of SaaS applications and maintain existing SAML, SCIM, and OIDC configurations and group mappings as Culture Amp’s technology environment evolves.
Build and own joiner, mover, and leaver workflows end to end, including automated pipelines using Okta Workflows, APIs, and SCIM to connect the HRIS to Okta.
Configure, deploy, and continuously improve Okta Identity Governance, including access request workflows and self-service or automated approval paths aligned to access policy.
Support audit and compliance activities by automating access certification reporting, gathering system and directory log evidence for SOC 2 and ISO 27001 audits, and reviewing inactive SaaS licences and unapproved OAuth integrations.
Contribute to configuration, optimisation and troubleshooting for other ancillary platforms as required, such as Google Workspace, Active Directory / MS Entra, Island & Jamf.

You have

Hands-on experience administering Okta or a similar identity provider, including SAML, SCIM, OIDC, MFA, lifecycle policies, and authentication, session, and device trust policies.
Proven experience onboarding SaaS applications end to end, including SSO setup, SCIM attribute and group mapping, and troubleshooting provisioning issues.
Experience with Okta Identity Governance or equivalent access request and identity governance tooling.
Experience building identity lifecycle automation pipelines that connect HRIS systems to an identity provider using tools such as Okta Workflows, APIs, or SCIM.
Familiarity with SaaS governance practices, including access certification, audit evidence, licence utilisation reviews, and OAuth or shadow IT detection.
Familiarity with SaaS platforms, cloud providers, networking fundamentals and device management.

You are

Security-minded and thoughtful about balancing strong access controls with a simple experience for end users.
Comfortable owning operational systems, troubleshooting issues, and improving processes rather than relying on manual workarounds.
A clear communicator who can work pragmatically with technical and non-technical stakeholders.
A systems thinker, who will understand the end to end picture and not just complete the task that’s in front of them.

Perks & Benefits

At Culture Amp, our people are at the heart of our success. We offer competitive pay and a total rewards package designed to support you at work and in life. This includes:

Equity through our Employee Share Option Program, so you can share in our long-term success
Learning programs and coaching to help you thrive and grow
Quarterly refresh days, an extended end-of-year break and a monthly allowance to support your wellbeing and lifestyle
Inclusive parental leave from day one
A MacBook and budget to set up your home workspace, enabling flexibility
Five annual social impact days to to give back to causes that matter to you
Medical insurance coverage for you and your family (Available for US & UK only)

Our rewards are designed to support different needs and life stages, recognising that what matters most can vary from person to person.

Research shows that candidates from underrepresented backgrounds may hesitate to apply if they don’t meet every requirement, but your unique experience matters. If you’re interested in joining us, we strongly encourage you to apply and help us build a more diverse and impactful team.

Accommodations & Data Privacy

If you require reasonable accommodations or adjustments due to a disability to complete the online application or to participate in the interview process, please contact accommodations@cultureamp.com and identify the type of accommodation or assistance you are requesting. Do not include any medical or health information in this email. The Reasonable Accommodations team will respond to your email promptly.

Culture Amp will retain your CV & personal information for a period of two years (four years for the US) from the date of your application process completion. Culture Amp may contact you in relation to future job opportunities during this time period. For further information please see our privacy policy here or contact privacy@cultureamp.com.