Engineer, Identity & Access Management

WHO WE ARE:

Headquartered in Southern California, Skechers-the Comfort Technology Company-has spent over 30 years helping men, women, and kids everywhere look and feel good. Comfort innovation is at the core of everything we do, driving the development of stylish, high-quality products at a great value. From our diverse footwear collections to our expanding range of apparel and accessories, Skechers is a complete lifestyle brand.

ABOUT THE ROLE:

The Identity and Access Management team at Skechers works as part of the global information security program to ensure authentication systems are designed and operated securely, and the right access exists for the right needs at the right time. As part of this team, the IAM Engineer's role is to help ensure that authentication and authorization systems are designed and operated with a focus on security and efficiency.

Technology changes quickly and adversaries are constantly evolving new ways to break and bypass all types of local, federated, human, and machine authentication protocols. This technical specialist will bring a broad understanding of threat actor tactics and deep expertise with authentication systems to help ensure that our capabilities are constantly evolving to meet and exceed the current threat environment. The candidate who will find the most success and fulfillment brings a genuine interest and passion for information security, a love for learning, a positive attitude, and that nagging curiosity that makes you want to push past where others stop.

WHAT YOU'LL DO:

• Assist with design and implementation of security focused IAM solutions including PAM, MFA, JIT, vaulting, etc.
• Leverage understanding of threat actor techniques and technical solutions to provide guidance on and develop requirements for secure authentication methods.
• Help continuously evaluate and modernize authentication systems and process by researching and participating in the pilot of emerging technologies.
• Develop and improve joiner, mover, leaver workflows, including access requests, approvals, provisioning, and timely access removal, in partnership with process and system owners.
• Identify risks and potential weak configurations in existing environments as well as new proposals and implementations.
• Contribute to and/or lead projects and efforts related to core authentication systems and secure authentication initiatives, including phishing-resistant and risk-based authentication.
• Collaborate with diverse stakeholders including business and technology teams, infrastructure, cloud, application development, and more to drive security and consistency across the organization.
• Exhibit critical thinking and creativity by helping develop elegant solutions to complex technical challenges.
• Demonstrate curiosity and a continuous learning mindset by staying up to date on current threat actor tools, techniques, and procedures and emerging IAM capabilities.
• Use scripting, APIs, and workflow tools to automate repeatable IAM tasks and improve integration reliability.

WHAT YOU'LL BRING:

• 5+ years of hands-on experience with multiple authentication and authorization solutions and directory platforms.
• 5+ years of experience with identity security solutions, such as CyberArk, Delinea, Duo, Okta, etc.
• GIAC, (ISC)2, or similar security certification is a plus.
• Hands-on experience with enterprise identity platforms such as Okta or Microsoft Entra ID, plus experience with and understanding of approaches to securing directory services such as Active Directory.
• Experience with cloud infrastructure and familiarity with authentication systems in IaaS.
• Deep understanding of authentication protocols (NTLM, Kerberos, SAML, OIDC, FIDO2, WebAuthn, etc.).
• Understanding of general enterprise network and system components and their roles.
• Familiarity with network and application protocols (TCP/IP, HTTP, TLS, SSH, DNS, etc.).
• Understanding of modern cybersecurity concepts like Zero Trust and Just in Time access provisioning.
• Strong understanding of the identity and access security implications of emerging technologies, such as agentic AI, MCP servers, etc.
• Awareness and understanding of current and emerging threats and attacker techniques.
• Strong analytical and problem-solving skills.
• Ability to excel in a fast paced and rapidly changing environment.
• Exposure or working knowledge of identity providers and IGA solutions.
• Excellent communication skills, and experience collaborating with diverse stakeholders.
• Proven ability to take ownership of tasks and responsibilities.
• Reliable self-reliant contributor with a strong work ethic.

The pay range for this position is $125,000-$165,000/yr USD.

About Skechers

Skechers, a global Fortune 500 company, develops and markets a diverse range of lifestyle and performance footwear, apparel, and accessories. Serving over 180 countries and territories, Skechers connects customers to products through department and specialty stores, e-commerce and digital stores, and through our more than 5,300 Skechers retail locations.

Equal Employment Opportunity

Skechers is committed to providing a safe, inclusive, and respectful work environment. Skechers provides equal employment opportunities for all employees and applicants for employment without regard race, color, religion, gender, gender identification and expression, national origin, marital status, age, disability, genetic information, military status, sexual orientation, or any other protected characteristic established by local, state or federal law.

Reasonable Accommodation

Applicants for employment who require a reasonable accommodation to apply for a job should request appropriate accommodation by emailing benefits@skechers.com.

To perform this job successfully, an individual must be able to perform each job responsibility satisfactorily. The skills, abilities and physical demands described are representative of those duties that must be met by an employee to successfully perform the essential functions of this job. Reasonable accommodation may be made to enable individuals with disabilities, who are otherwise qualified for the job position, to perform the essential functions.