Description

Connecting People. Uniting the World. There's never been a more exciting time to join United Airlines! As a global company that operates in hundreds of locations around the world - with millions of customers and tens of thousands of employees - we have a unique responsibility to uplift and provide opportunities in the places where we work, live and fly.

We're on a path to becoming the best airline in aviation history. Join our Cybersecurity and Digital Risk (CDR) team to help lead the industry in cyber safety, security and resilience. United's CDR team plays a critical role in protecting our operations by enabling secure and resilient systems, managing threats and vulnerabilities, and ensuring swift response and recovery. Our mission is to seamlessly embed cybersecurity and digital risk management into every aspect of our business. We help drive progress and growth through trusted digital solutions, safeguarding assets and empowering our team, all while promoting a cyber-safe and secure environment that supports resilient airline operations.

United offers a competitive benefits package aimed at keeping you happy, healthy, and well-traveled. From employee-run "Business Resource Group" communities to world-class benefits like parental leave, 401(k), and privileges like space-available travel, United is truly a one-of-a-kind place to work. Are you ready to travel the world and help us keep our airline cyber safe? Apply today!

Job Overview and Responsibilities

The Identity & Access Management (IAM) Security Engineer's primary responsibility is to implement security principles and controls to the United Workforce IAM platform and service in alignment with the Cybersecurity & Digital Risk policies to protect data and reduce risk.

The Engineer - Identity & Access Management (IAM) will be focused on the implementation and support of modern Workforce Enterprise IAM systems. They will work closely with development teams and consumers of IAM services. They play a vital role in integrating secure identity solutions during the product lifecycle.

This role requires an understanding of IAM principles, protocols, and best practices. They will be able to support the execution and the implementation of designs provided by IAM architects and ensure these IAM capabilities are adopted and successfully integrated with systems across the organization while providing ongoing support and maintenance for IAM processes and technology.

• Design, implement and test the solutions and capabilities of Enterprise IAM platform & service
• Provides support in responding to break/fix requests monitoring the environment, supporting Digital Technology in change management processes for development, QA, and production environments
• Respond to Level 1 tickets including bugs, outages, and new feature requests
• Ensure IAM solutions adhere to regulatory, compliance, and internal requirements
• Assist in the maintenance of IAM policies, standards, and procedures
• Provide reports as requested for compliance
• Work with Cyber Defense and other departments as needed
• Ensure IAM security is aligned with the overall security strategy to reduce risk to the organization
• Collaborate with development teams and other IAM service consumers
• Provide guidance on the implementation and usage of IAM capabilities in enterprise systems
• Collaborate with other IAM team members seeking guidance on IAM related matters and contributing to system support

• Bachelor's Degree, or in lieu of a Bachelor's Degree, 6-9 years of related work experience will be accepted
• 2+ years of related experience, ideally within an Entra ID environment
• An understanding of Enterprise Identity & Access Management in some of the following areas: Single Sign-On (SSO), Multi-Factory Authentications (MFA), and Password-less Authentication, Privileged Access Management (PAM), Identity Governance & Administration concepts
• An understanding of identity protocols and technologies such as OpenID Connect (OIDC,) OAuth, SAML, API Gateways, SCIM, and platforms such as Ping Identity, Okta, MS Azure, and ForgeRock
• Familiar with modern software lifecycle development and automated cloud infrastructure deployment
• Understanding of policies that reflect system security objectives. Ability to determine how a security system works (including its resilience and dependability capabilities) and how changes in conditions, operations, or the environment will affect these outcomes
• Must be legally authorized to work in the United States for any employer without sponsorship
• Successful completion of interview required to meet job qualification
• Reliable, punctual attendance is an essential function of the position

• STEM degree in a field such as Cybersecurity, Risk Management, Computer Science
• Certifications related to Microsoft Entra ID, CISA, CISM, CISSP
• 4+ years of related experience
• Knowledge of organizational standards and policies (ISO, NIST)
• Knowledge of compliance regulations (SOX, PCI, FAA, GDRP, PII)