Senior IT Engineer (IAM)

About the role:

Building a new mental healthcare system at Headway is only possible because of the scale and leverage that software can provide. The IT team at Headway is an essential function at Headway that builds operational efficiency into everything we do, giving our organization the tools needed to achieve our goals of reshaping mental healthcare. In this role, you’ll have the unique opportunity to be the builder and driver of our dedicated, in-house IT Engineering efforts. You will execute projects, both technically and organizationally, to tackle challenges as the company continues to rapidly scale.

• Design, develop, and standardize the IAM lifecycle and associated workflows for Headway employee accounts. 
• Drive automation and integration excellence by configuring and managing workflows to automate provisioning, de-provisioning, and access changes, eliminating manual effort and ensuring speed and accuracy.
• Strengthen the security foundation by completing and maintaining key IdP integrations of varying levels of complexity with business applications.
• Lead the transition to least-privilege. Actively drive and support the organization-wide Role-Based Access Control (RBAC) initiative, ensuring access is governed by job function and need.
• Maintain documentation for all core applications and processes.
• Address and resolve identity related incidents and escalated service requests.
• Work collaboratively with major stakeholders to establish IAM policies and governance that foster a culture of least-privilege.

• An experienced SaaS environment expert with 5+ years in a fast paced, supporting a distributed workforce, specifically focused on Identity & Access Management (Okta experience is strongly preferred).
• Possess subject matter expertise in IAM technologies; you’ve led large scale projects to completion centered on IdP implementation, JML automation, and integrating SaaS applications using APIs, SCIM, and OIDC/SAML protocols.
• You’ve driven organization change by leading or playing a significant role in large scale company access controls deployments that require cross functional collaboration and user impact management.
• You excel at partnering with stakeholders across the business to synthesize and present technical solutions that drive business efficiency.
• You practice methodical project ownership and management with autonomy by consistently planning and executing work with visibility.
• Are a team player who actively seeks and provides feedback with a growth mindset.
• Stay up-to-date on the latest technology and privacy best practices and requirements.

Tools we use:

• Identity and Access Management: Okta, Lumos
• Email and Messaging: Gmail and Slack
• Document Creation and Collaboration: Google Workspace, Confluence
• Credential Management: 1Password
• Ticketing: Jira Service Desk, ZenDesk, Jira Projects
• Project Planning: Jira
• Endpoint Management: JAMF, InTune, ChromeOS, Kolide

The expected base pay range for this position is  $152,150 - $179,000, based on a variety of factors including qualifications, experience, and geographic location. In addition to base salary, this role may be eligible for performance-based variable compensation and an equity grant, depending on the position and level.

We are committed to offering a comprehensive and competitive total rewards package, including robust health and wellness benefits, retirement savings, and meaningful ownership opportunities through equity. Compensation decisions are made holistically, ensuring fairness and alignment with market benchmarks while recognizing individual contributions and potential.

• Benefits offered include:
• Equity compensation
• Medical, Dental, and Vision coverage
• HSA / FSA
• 401K
• Work-from-Home Stipend
• Therapy Reimbursement
• 16-week parental leave for eligible employees
• Carrot Fertility annual reimbursement and membership
• 13 paid holidays each year as well as a Holiday Break during the week between December 25th and December 31st
• Flexible PTO
• Employee Assistance Program (EAP)
• Training and professional development