{"id":4025141,"url":"https://alion.io/job/cloudera-identity-and-access-analyst-iam","title":"Identity and Access Analyst (IAM)","company":{"id":58503,"name":"Cloudera","domain":"cloudera.com","url":"https://alion.io/company/cloudera","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"A","score":90,"open_postings":12,"ghost_share":0,"stale_share":0.417,"repost_share":0,"time_to_fill_p50_days":27,"computed_at":"2026-11-12T10:38:37Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"board_field","remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Cork, Ireland"],"countries":["IE"],"hiring_countries":["IE"],"hiring_countries_total":1,"salary":null,"salary_estimate":null,"experience_years_min":6,"visa_sponsorship":true,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Active Directory","optional":false},{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"CI/CD","optional":false},{"name":"GCP","optional":false},{"name":"GitHub","optional":false},{"name":"IAM","optional":false},{"name":"JavaScript","optional":false},{"name":"Jenkins","optional":false},{"name":"LDAP","optional":false},{"name":"Least Privilege","optional":false},{"name":"Okta","optional":false},{"name":"Python","optional":false},{"name":"SOC 2","optional":false},{"name":"Terraform","optional":false},{"name":"Zero Trust","optional":false}],"status":"live","first_seen_at":"2026-11-10T16:37:43Z","employer_posted_date":"2026-11-10","last_verified_at":"2026-11-12T13:54:07Z","board_verified":true,"closed_at":null,"days_open":1,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":1},"description":"Business Area:\nITSeniority Level:\nMid-Senior levelJob Description:\nAt Cloudera, we empower people to transform complex data into clear and actionable insights. With as much data under management as the hyperscalers, we're the preferred data partner for the top companies in almost every industry. Powered by the relentless innovation of the open source community, Cloudera advances digital transformation for the world’s largest enterprises.\nThe Infrastructure and Operations organisation within Cloudera IT delivers a reliable, secure and scalable service infrastructure for our users and applications. Identity is the control plane for all of it, from SaaS applications to thousands of cloud accounts across AWS, Azure and Google Cloud. We partner with Information Security to build a Zero Trust architecture across Cloudera, and we support engineering teams enabling identity and SSO for in-house applications.\n\nWe are looking for an Identity Engineer to join our Infrastructure Operations team. You will help us run Okta as code, automate the identity lifecycle, and put the structure in place that makes least-privilege and just-in-time access work in practice, while keeping systems easy for people to use. You will work closely with our identity engineer, Information Security, HR systems and our support teams.\nThis role is not eligible for immigration sponsorship.\n\nAs an Identity Engineer, you will:\nOwn delivery of identity projects, and contribute to identity architecture decisions with other teams.\nAdminister and improve our Okta environments, including groups, group rules, policies, authenticators and application integrations.\nBuild and maintain identity configuration as code using Terraform and CI/CD, and review identity change requests from other engineers.\nDesign and build tooling and automation that enables secure self-service under Zero Trust principles, including Okta Workflows and scripted integrations.\nEnsure auditability of identity functions, including configuration backup, change tracking and logging to central systems.\nDesign and automate identity lifecycle processes, from joiner through mover to leaver, driven by our HR system of record.\nOnboard applications to our access request and just-in-time access platform, replacing manual and standing permissions with request-based workflows.\nBring an existing Okta estate into line with our group naming and lifecycle standards, including remediating legacy groups, direct role assignments and stale accounts.\nWork with HR systems to manage the downstream impact of organisational changes on groups and access.\nSupport identity federation into AWS, Azure and Google Cloud.\nWeigh risk against business and user needs, so access is both secure and easy to use.\nWrite clear runbooks and documentation.\nTake part in an on-call rotation for identity services.\n\nWe're excited about you if you have:\n6+ years of experience operating and deploying Okta or an equivalent identity provider.\nStrong experience with authentication protocols and systems, including OIDC, SAML and SCIM, and AD or LDAP.\nExperience with access governance or JIT platforms such as Lumos, SailPoint or ConductorOne.\nExperience building integrations and automation against web service APIs in Python, Go or JavaScript.\nExperience with infrastructure as code, ideally Terraform, in a CI/CD environment such as GitHub, Spacelift or Jenkins.\nExperience working with other teams on identity changes that affect many users.\nExperience securing automation that holds privileged access, including separation of read and write functions and secrets management.\nA methodical approach to change, and a habit of documenting what you build.\nYou may also have:\nOkta Certified Professional, Administrator or Consultant certification.\nExperience with Okta Workflows.\nExperience with AWS IAM Identity Center or multi-account cloud access.\nExperience integrating an identity provider with an HR system such as Workday.\nExperience with Active Directory, RADIUS, OpenLDAP or TACACS.\nExperience building for compliance, such as SOC 2 or SOX.\nA working understanding of Zero Trust architecture.\nWhat you can expect from us:\nGenerous PTO Policy\n\nSupport work life balance with Unplugged Days\n\nFlexible WFH Policy\n\nMental & Physical Wellness programs\n\nPhone and Internet Reimbursement program\n\nAccess to Continued Career Development\n\nComprehensive Benefits and Competitive Packages\n\nPaid Volunteer Time\n\nEmployee Resource Groups\n\nEEO/VEVRAA","description_format":"text","description_chars":4468,"description_truncated":false,"requirements":{"experience_years_min":6,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Internet reimbursement","Wellness"],"hiring_locations":[{"name":"Ireland","iso":"IE","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Query Engines & Big Data Processing","Data Warehouses & Lakehouses","MLOps"],"lifecycle":[{"event":"open","at":"2026-11-10T16:37:43Z"}],"visa":[{"country":"IE","licensed_sponsor":true,"adverts_offering_sponsorship_24m":0,"sanctioned_now":false,"evidence":"Irish employment permits in 12 months: 4","filings_12m":4,"filings_prev_12m":2,"green_card_filings_12m":null,"median_offered_wage_usd":null,"route":"Employment permits","cap_exempt":false,"checked_at":"2026-11-12T07:36:15+00:00","sources":["Department of Enterprise, Trade and Employment: employment permits issued to companies"],"filings_for_role_12m":0}],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":1,"expected_fill_days":27,"reasons":["conf:12","velocity","win:early"],"computed_at":"2026-11-12T10:38:37Z"},"pay":null,"html_url":"https://alion.io/job/cloudera-identity-and-access-analyst-iam","json_url":"https://alion.io/job/cloudera-identity-and-access-analyst-iam.json","meta":{"generated_at":"2026-11-12T16:07:34Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":33731,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-13T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":58503},"rest":"https://alion.io/mcp/rest/get_company?id=58503"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fcloudera-identity-and-access-analyst-iam"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":2,"usd":0.2},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fcloudera-identity-and-access-analyst-iam"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fcloudera-identity-and-access-analyst-iam"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/cloudera-identity-and-access-analyst-iam\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fcloudera-identity-and-access-analyst-iam"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":4025141}},{"tool":"search_jobs","arguments":{"company":"cloudera.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":4025141},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}