Staff Systems Administrator

Responsibilities

• Design and evolve EarnIn's enterprise identity model with Workday as the authoritative HRIS source and Okta as the central control plane
• Drive zero-touch joiner/mover/leaver provisioning and own the program's First-Pass Automation Yield (FPAY) metric
• Architect privileged access management at scale: just-in-time elevation, time-bound exceptions, managed-device enforcement, and policy-driven entitlement reviews
• Build and maintain the IAM Roles Catalog with expiring exceptions and clear ownership for every entitlement
• Lead federation strategy across AWS, Databricks, and the SaaS estate
• Standardize entitlements via Identity-as-Code (Terraform) so every change is reviewable, diffable, and reversible
• Design a Continuous Access Evaluation pipeline for audit readiness
• Lead the design and rollout of agentic AI workflows that replace ticket-driven, human-in-the-loop IT processes
• Build reusable AI patterns, guardrails, and components that other teams can adopt
• Set architectural direction for the IT team including tool selection, identity protocols, automation patterns, observability, and build-vs-buy decisions
• Mentor IT engineers through code review, ADRs, runbooks, and design docs

Requirements

• Bachelor's degree (or higher) in Computer Science, Information Systems, or a related technical field
• 7+ years in IT Engineering or Identity & Access roles, including experience setting technical direction for a program
• Demonstrated experience architecting and implementing an enterprise IAM program end-to-end at meaningful scale
• Significant hands-on expertise in Okta (Workflows, Identity Governance, sign-on policies, group rules) and at least one HRIS-driven lifecycle integration (Workday preferred)
• Fluency in SAML, OAuth2, OIDC, SCIM, federation, JIT provisioning, and PAM patterns
• Experience codifying identity infrastructure (Terraform, GitOps, or equivalent) and shipping changes through code review
• Proficient in Python
• Track record of systematically replacing manual processes with automation
• Demonstrated experience designing, shipping, or championing AI-enabled workflows in a production environment
• Uses AI-assisted development tools (e.g., Copilot, Cursor, Claude Code) to accelerate own work
• Clear written and verbal communication skills

Nice-to-Haves

• Experience in a fintech or regulated environment (SOC 2, PCI) with audit-grade evidence pipelines
• Hands-on work with Databricks federation or AWS IAM Identity Center
• Certifications such as Okta Certified Consultant/Administrator or CISSP