Suggested rewrite: Led a cross-functional initiative that improved [business outcome] by [measurable result], demonstrating experience relevant to this role...
IAM Security Engineer
Review the role, location requirements, compensation details, and application process before deciding whether this opportunity fits your next career move.
- Salary
- Undisclosed
- Department
- Cybersecurity
- Employment
- Full Time
- Experience
- Open level
- Published
- Apply before
- 15 Nov 2026
- Listing views
- 34
- Application actions
- 1
Make your next move.
Prepare your resume, explore your fit, and draft a cover letter for this opportunity.
The role, at a glance.
Cision is hiring an IAM Security Engineer to design, implement, and operate identity and access management capabilities across its global environment. The role centers on Okta, including SSO, MFA, lifecycle management, RBAC, federated identity, SCIM provisioning, and integrations with Azure AD, AWS IAM, Active Directory, and third-party applications. The engineer will support security incidents, audits, and compliance programs such as SOC 2, ISO 27001, and GDPR. This position requires 3–5 years of relevant IAM or security experience, hands-on automation skills, and close collaboration with security, infrastructure, and application-development teams.
Role DNA
A quick view of the complexity, pace, ownership and collaboration implied by the job description.
Pace & Pressure
4/5Autonomy Level
4/5Communication Load
4/5Salary analysis
Estimated compensation compared with the broader US market for similar roles.
Core skills
Skills and capabilities most closely associated with this opportunity.
Sample interview questions
I would define authoritative HR data sources and identity attributes first, then build automated provisioning and deprovisioning workflows using Okta Lifecycle Management and SCIM where supported. I would use group rules and role mappings to assign least-privilege access, include approval paths for sensitive entitlements, and test termination flows to ensure prompt session revocation and account removal.
I would compare the service provider and identity provider configuration, including entity IDs, ACS URLs, signing certificates, name ID format, and required attribute mappings. I would inspect Okta system logs and SAML assertions, verify time synchronization and certificate validity, then test with a controlled account before documenting the correction and monitoring for recurrence.
I begin by mapping job functions to business-required access and defining reusable roles rather than granting direct entitlements. I implement role ownership, approval workflows, periodic access reviews, and separation-of-duties controls for privileged functions. I also monitor exceptions and use audit findings to refine the role model over time.
I would use dedicated service identities with narrowly scoped permissions, secure secret storage, credential rotation, logging, and strong authentication controls. Automation should validate inputs, include error handling and approval safeguards for high-impact changes, and generate auditable records of provisioning actions.
I would maintain evidence of access-control policies, RBAC definitions, onboarding and offboarding procedures, privileged-access approvals, MFA enforcement, access-review results, and relevant Okta logs. I would coordinate with control owners to ensure evidence is current, traceable to the stated controls, and demonstrates timely remediation of any exceptions.
About this role.
At Cision, we believe in empowering every individual to make an impact. Here, your voice is heard, your ideas are valued, and your unique perspective fuels our collective success. As part of our global team, you’ll thrive in an environment that champions curiosity, collaboration, and innovation, all while making meaningful contributions to the brands we accelerate.
Join us in shaping the future of communication and building authentic connections that matter. Whether you’re solving complex problems or driving bold innovations, your growth is our success, and together, we’ll create the conversations of tomorrow.
Empower your impact at Cision. Be seen, be understood, be you.
Cision is a global leader in media intelligence and communications solutions. Our InfoSec team is expanding to meet the growing demands of a secure, scalable, and resilient identity infrastructure. We are seeking a skilled IAM Security Engineer to help us build and maintain a robust identity and access management ecosystem across our global footprint, with a strong focus on Okta technologies.
As an IAM Security Engineer, you will play a critical role in designing, implementing, and maintaining identity and access management solutions using Okta as our primary platform. You will collaborate with global teams across security, infrastructure, and application development to ensure IAM policies and technologies align with business and compliance requirements.
Key Responsibilities:
- Design and implement IAM solutions using Okta, including SSO, MFA, and lifecycle management.
- Manage identity lifecycle processes (Joiner, Mover, Leaver) across enterprise systems.
- Integrate Okta with cloud platforms (e.g., Azure AD, AWS IAM), directory services (e.g. Active Directory) and third-party applications.
- Support audits, compliance initiatives (e.g., SOC2, ISO27001), and security assessments.
- Monitor and respond to IAM-related incidents and vulnerabilities.
- Define and enforce access policies and role-based access controls (RBAC) within Okta as well as maintain our existing IdP instances.
- Contribute to the development of IAM roadmaps and strategic initiatives.
Qualifications:
- 3–5 years of experience in IAM engineering or related security roles.
- Relevant certifications (e.g., Okta Certified Professional, CISSP, Azure Security Engineer) are a plus
- Strong background experience with SAML and OIDC federation protocols and working with various federated Identity Providers such as Okta.
- Familiarity with Okta Workflows, API integrations, and SCIM provisioning.
- Experience with scripting and automation (e.g., PowerShell, Python).
- Knowledge of regulatory frameworks (e.g., GDPR, ISO27001, SOC2).
- Bachelor’s degree in Computer Science, Information Security, or related field.
- Relevant certifications (e.g., Okta Certified Professional, CISSP, Azure Security Engineer) are a plus.
Cision is the global leader in consumer and media intelligence, engagement, and communication solutions. We equip PR and corporate communications, marketing, and social media professionals with the tools they need to excel in today’s data driven world. Our deep expertise, exclusive data partnerships, and award-winning products, including CisionOne, Brandwatch, and PR Newswire, enable over 75,000 companies and organizations, including 84% of the Fortune 500, to see and be seen, understand and be understood by the audiences that matter most to them.
Cision is committed to fostering an inclusive environment where all employees can be their authentic selves and perform at their best. We believe diversity, equity, and inclusion is vital to driving our culture, sparking innovation and achieving long-term success. Cision is proud to have joined more than 600 companies in signing the CEO Action for Diversity & Inclusion™ pledge and named a “Top Diversity Employer” for 2021 by DiversityJobs.com.
Cision is proud to be an equal opportunity employer, seeking to create a welcoming and diverse environment. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, gender identity or expression, sexual orientation, national origin, genetics, disability, age, veteran status, or other protected statuses.
Cision is committed to the full inclusion of all qualified individuals. In keeping with our commitment, Cision will take the steps to assure that people with disabilities are provided reasonable accommodations. Accordingly, if reasonable accommodation is required to fully participate in the job application or interview process, to perform the essential functions of the position, and/or to receive all other benefits and privileges of employment, please contact hr.support@cision.com
Cision, Inc. “the Company” only communicates with candidates and extends job offers through direct channels, not third parties.
Please review our Global Candidate Data Privacy Statement to learn about Cision’s commitment to protecting personal data collected during the hiring process.
Annual salary information is not provided for this position. Explore salary ranges for similar roles in our Salary Directory ›
This job listing has been manually reviewed by the Jobicy Trust & Safety Team for compliance with our posting guidelines, including verification of the company's legitimacy, accuracy of job details, clarity of remote work policy, and absence of misleading or fraudulent content.
Apply now.
Follow the employer’s application method and review Jobicy’s safety guidance before sharing personal information.
Continue on the employer website
Protect your personal information and never pay to secure an interview or job offer. .
