Sr. Lead Software Engineer, Identity & Access Management

The mission of the Identity and Access team is to enable the digital workforce of the Chick-fil-A enterprise to have the right access to the right digital resources at the right time. We are a fast-paced team that partners with multiple teams across the enterprise to enable business outcomes. 

As the Chick-fil-A enterprise continues to grow, the need for an always-on, reliable, and secure Chick-fil-A Identity perimeter is critical and non-negotiable.

The Sr. Lead Software Engineer, Identity & Access Management (IAM) role will work as part of the IAM team to develop, maintain, and support Chick-fil-A’s provisioning platform. The role will configure and onboard new application integrations, define and develop new roles for access, support data correlations and aggregations, provide architecture and design recommendations, and act as a liaison between the Provisioning Cloud Managed Software team and Chick-fil-A.

Our Flexible Future model offers a healthy mix of working in person and virtually, strengthening key elements of the Chick-fil-A culture by fostering collaboration and community.

• Lead, mentor, and assess other staff engineers, exemplifying and teaching best practices, helping to solve challenging problems, reviewing code, and sharing stories
• Partner with IAM analysts and engineers to understand business requirements, then recommend and design solutions according to Identity standards
• Lead provisioning engineering efforts: including hands-on engineering of solutions, providing technical leadership, and directing the work of managed services partners.
• Partners with application owners to identify requirements for aggregating and correlating user types within the provisioning platform.
• Engineers and configures integrations within the provisioning platform for enterprise applications using out-of-the-box and custom connectors.
• Design, test and support application connectors, business roles and workflows.
• Identify and drive globalization standards for IAM as Chick-fil-A expands to new countries.
• Design and implement role mining and mapping to support the Chick-fil-A Identity Governance Program.
• Works as part of a team to engineer and execute access certification campaigns.
• Proactively monitors system performance and recommends alternative solutions for better efficiency
• Develops analytics and reporting for Joiner, Mover, Leaver Processes, data correlation and account aggregations.
• Identifying trends and performing root cause analysis for complex account issues (in a multi-directory environment) as well as designing and implementing solutions for remediation and prevention.
• Documents the design, architecture, and workflows of provisioning integrations.
• Maintains appropriate source code, initiates code reviews, and coordinates deployment windows within the defined framework.
• Creates and manages support cases with provisioning vendors.
• Follow Agile Scrum best practices for engineering sprints, sprint planning, and backlog grooming/prioritization.

Note - Working in a DevOps model, this opportunity includes both building and running solutions that could require off hours support. This support is shared amongst the team members to cover weekends and weeknights.  The goal is to design for failure and, using cloud-native infrastructure patterns, automate responses to possible issues so they can be worked during normal hours.  

• Bachelor's degree or equivalent experience in Computer Engineering, Computer Science, or related Technical Field
• 4 years of relevant experience
• Broad and deep engineering experience in Java, JavaScript, PowerShell, XML, or comparable languages. 
• Experience with SQL and data modeling
• Experience with source control systems like Git or Subversion. 
• Experience working with identity and access management
• Good interpersonal and team collaboration skills
• Experience with provisioning platforms, such as SailPoint IIQ
• Proficiency with scripting languages, such as bash or PowerShell
• Experience working with REST APIs
• Strong interpersonal skills
• Attention to detail
• Strong analytical and problem-solving skills
• Highly trusted
• Servant spirit with strong sense of stewardship
• Ability to effectively prioritize competing and complex issues
• Self-starter with the ability to complete projects with limited supervision oversight- Excellent verbal and written communication skills

• 5-7 years of work experience
• Bachelor's degree
• SailPoint IIQ development, architecture, and design experience. 
• Deep knowledge of IAM processes and functions. 
• Hands-on experience developing Identity Lifecycle Management workflows, out-of-the-box and custom SailPoint IIQ connectors, configuration events, and scheduled tasks.
• Hands-on experience with Java, JavaScript, PowerShell, and XML. 
• Experience writing database scripts, fine tuning of queries, stored procedures in Oracle.
• Knowledge and experience with REST API development. 
• Experience with Active Directory, AD LDS, ServiceNow, Workday applications.
• Experience with JIRA and Agile/Scrum IT Methodology.
• Sailpoint Certified Identity IQ Engineer
• Sailpoint Certified Identity IQ Architect