Senior Identity and Access Management Engineer

Progressive Leasing is a leading provider of in-store and e-commerce lease-to-own solutions. As an almost 20+ year old FinTech company that has gone from start-up to industry leader, we know how to innovate, simplify, and value all people. We are a company founded on our grit and we are constantly looking to the future. As an ever-evolving group of entrepreneurs and technologists, we strive to do the right thing period in all aspects of our work. We are a subsidiary of PROG Holdings (NYSE: PRG), an exciting FinTech holding company, with three business segments including Progressive, Vive Financial, and Four, a Buy Now Pay Later (BNPL) platform.

We are seeking an experienced and strategic Senior Identity and Access Management Engineer to join our Identity and Access Management (IAM) team. In this role, you will be responsible for designing, implementing, and maintaining our IAM systems, ensuring secure and efficient access to enterprise resources. The ideal candidate will have deep expertise in IAM platforms, strong technical skills, and proven ability to drive IAM strategies in a complex environment.

This role is a work from home position and can be performed remotely anywhere in the continental US or in our corporate headquarters in Utah.

YOUR DAY-TO-DAY: 

• Develop and implement robust IAM strategies and architectures to meet organization’s security, compliance, and operational needs.

• Contribute to the design, implementation, and maintenance of IAM program, including Identity Governance and Administration (IGA), Privileged Access Management (PAM), and Access Management (AM).

• Integrate IAM systems with cloud and on-premises applications, directories and other IT services.

• Automate provisioning, de-provisioning, and other role management processes.

• Maintain systems for Singel Sign-On (SSO), Multi-Factor Authentication (MFA), and password management

• Develop and manage processes to ensure least-privilege and zero-trust access principles.

• Collaborate with senior leadership to evaluate and recommend IAM best practices into enterprise security strategies.

• Lead IAM-related projects, working closely with cross-functional teams such as Technology, DevOps, and Security

• Mentor and provide technical guidance to junior engineers and team members

• Streamline IAM processes through automation and advanced technologies.

• Enforce IAM policies, standards, and controls to address IAM-related threats and vulnerabilities

• Stay current with industry trends and emerging technologies to recommend enhancements.

YOU’LL BRING: 

• 5+ years of experience in IAM, with 2+ years in a senior or lead position.

• Proficiency in IAM tools (e.g., Okta, CyberArk, Ping Identity, SailPoint)

• Strong knowledge of identity governance, RBAC, PAM, and cloud-based IAM solutions.

• Knowledge of LADAP, Active Directory (AD), and cloud-based directories

• Familiarity with compliance frameworks and standards (e.g., NIST, SOC 2, PCI DSS).

• Exceptional problem-solving and project management skills.

• Experience in automating, deploying, and supporting large-scale projects

• Experience with cloud environments (e.g., AWS, Azure, GCP) and hybrid IAM solutions

• Deep understanding of protocols such as SAML, OAuth, OpenID Connect, and Kerberos.

• Strong communication and interpersonal skills to work effectively with stakeholders at all levels.

• Proficiency with scripting or programming languages (e.g., PowerShell, Python) for automating IAM processes.

• Hands-on knowledge of CyberArk components including Vault, CPM, PSM, and AIM modules

• Work with developers, DevOps, and IT teams to integrate CyberArk and Conjur into existing workflows

• Troubleshoot Conjur-related issues and provide ongoing maintenance.

PREFERRED:

• Bachelor’s or Master degree in Computer Science, Information Technology, or a related field.

• Relevant certifications such as CISSP, CISM, or IAM-specific credentials (e.g., CIAM/CAMS, CyberArk Certified, Okta Certified Consultant).

• Experience with AWS technologies such as Lambda, S3, DynamoDB, RDS, Aurora, SNS, SQS, CloudTrail, CloudWatch, CloudFormation, Code Pipeline, AWS Developer Tools, and IAM roles and permissions

• Experience with DevOps tools and practices, including secrets management and CICD pipelines

Progressive Leasing welcomes and encourages diversity in the workplace. We do not discriminate in any aspect of employment on the basis of race, color, religion, national origin, ancestry, gender, sexual orientation, gender identity and/or expression, age, veteran status, disability, or any other characteristic protected by federal, state, or local employment discrimination laws where Progressive Leasing does business.