Description

Join Team CARFAX as a Senior Identity & Access Engineer

 Isn’t it time you bragged about where you work? At Carfax, we do, every day. We pride ourselves on being mission-focused on helping to grow a brand built on accuracy and integrity. We care deeply about our products and our customers. We’re more than just a company: We help millions of consumers make more informed decisions every day. We know that our teammates are our most valuable asset, and we value a balanced life while tackling challenging projects in a fast-paced environment.

This role has an expectation of 3 days in the office per week, subject to change based on future business needs.

What you’ll be doing:

• Lead the design and implementation of IAM solutions
• Developing and maintain IAM policies, procedures, and standards to ensure compliance with organizational and regulatory requirements
• Automating existing tasks and reducing toil with the use of scrip
• Managing both on-premise Active Directory Forests & Domains, including Domain Controllers, as well as Azure AD / Entra ID
• Managing Okta Identity Engine, including configuring applications, managing security polices, updating agents, etc
• Managing Identity Governance solutions such as SailPoint
• Collaborating with cross-functional teams to understand business requirements and provide IAM solutions that meet security and usability goals
• Evaluating and recommending new IAM technologies and tools to improve security, efficiency, and user experience

What we’re looking for:

• Five years of experience with Identity and Access Management
• In-depth knowledge of identity and access management concepts, best practices, and technologies, such as Active Directory, Okta, Identity Engine, and Azure AD / Entra ID
• Strong experience in designing, implementing, and managing IAM solutions, including user provisioning, role-based access control (RBAC), and identity governance
• Strong communication skills with the ability to interact and collaborate with technical and non-technical users
• Understanding of security concepts, including encryption, hashing, and public key infrastructure (PKI).
• Familiarity with various authentication protocols, such as SAML, OAuth, FIDO, and OIDC
• Familiarity with relevant regulations and compliance requirements, such as SOX, and PCI DSS
• Industry certifications, such as CISSP, CISM, or vendor-specific certifications like Microsoft Certified: Azure Active Directory Administrator Associate or Okta Certified Professional, are highly desirable
• Proficiency in scripting and automation, using languages such as PowerShell
• Experience with Identity Management in AWS
• General knowledge of Max and Linux operating systems

About CARFAX

CARFAX, part of S&P Global Mobility, helps millions of people every day confidently shop, buy, service and sell used cars with innovative solutions powered by CARFAX vehicle history information. The expert in vehicle history since 1984, CARFAX provides exclusive services like CARFAX Used Car Listings, CARFAX Car Care, CARFAX History-Based Value and the flagship CARFAX® Vehicle History Report™ to consumers and the automotive industry. CARFAX owns the world’s largest vehicle history database and is nationally recognized as a top workplace by The Washington Post and Glassdoor.com. Shop, Buy, Service, Sell – Show me the CARFAX™. S&P Global Mobility is a division of S&P Global (NYSE: SPGI). S&P Global is the world’s foremost provider of credit ratings, benchmarks, analytics and workflow solutions in the global capital, commodity and automotive markets.

CARFAX is an Affirmative Action/Equal Opportunity Employer. It is the policy of CARFAX to provide equal employment opportunity to all persons regardless of race, color, sex, pregnancy, religion, national origin, age, ancestry, citizenship status, veteran status, military status, disability or handicap, sexual orientation, genetic information or any other status protected by federal, state or local law. In addition, CARFAX will provide reasonable accommodations for qualified individuals with disabilities. We maintain a drug-free workplace. We are a participant in E-Verify.