[Hiring] Cyber Security Engineer, IAM Access Management @Newell Brands

Role Description

The Access Management Engineer operates certificate orchestration and consolidated third-party authentication on an ongoing basis, while serving as the subject-matter expert across the full breadth of IAM. This role spans:

• Authentication
• Authorization
• Identity management
• Privileged access management
• Web access management (WAM)

This role supports a global team comprised of architects, engineers, analysts, and 24/7 operational functions, ensuring the reliability, scalability, and security of Newell's identity systems. The ideal candidate combines deep technical fluency across the IAM ecosystem with the leadership skills to support global operations.

Key Responsibilities

• Operate certificate orchestration and consolidated third-party authentication services on an ongoing basis, ensuring reliability and continuity of service.
• Serve as subject-matter expert across all IAM domains — authentication, authorization, identity management, PAM, and WAM — and the relationships between cloud and on-premises architectures.
• Lead a global team across architecture, engineering, analyst, and 24/7 operations support functions, ensuring consistent coverage and service quality.
• Own day-to-day operations of IAM systems, ensuring reliability, scalability, and security across the platform portfolio.
• Administer and support IAM ecosystem technologies, including SSO, MFA, and PAM, across platforms such as SailPoint, Okta, Azure AD, Ping Identity, CyberArk, and ForgeRock.
• Apply deep understanding of identity protocols — SAML, OAuth, and OpenID Connect — to troubleshoot, integrate, and secure authentication flows.
• Partner with HR systems teams (Workday, SuccessFactors) to ensure accurate identity lifecycle data feeds into IAM platforms.
• Analyze and resolve complex technical issues across the IAM ecosystem, collaborating with cross-functional teams to drive resolution.

Qualifications

• Subject-matter expertise across IAM topics, with a working understanding of both cloud and on-premises enterprise technology and how the two architectures relate.
• Experience designing reference architectures for IAM domains such as authentication, authorization, identity management, PAM, and WAM.
• Hands-on experience with IAM technologies such as SailPoint, Okta, Azure AD, Ping Identity, CyberArk, and ForgeRock.
• Solid understanding of identity protocols, including SAML, OAuth, and OpenID Connect.
• Strong techno-functional skills, with a track record of delivering mid- to large-size IAM transformations.
• Experience with HR systems such as Workday or SuccessFactors.
• Experience with the broader IAM ecosystem, including SSO, MFA, and PAM tools and technologies.
• Excellent problem-solving skills and the ability to analyze complex technical issues.
• Strong communication and interpersonal skills, with the ability to collaborate effectively across cross-functional teams.
• Demonstrated experience leading a global team across architecture, engineering, analyst, and 24/7 operations functions.

Preferred Qualifications

• Familiarity with CI/CD pipelines and DevSecOps practices as they apply to identity platform deployments and change management.
• Industry certifications related to IAM or Entra ID, such as CISSP, CISM, or Azure Security Engineer.
• Exposure to identity threat detection and response (ITDR) tools or SIEM integration for correlating authentication events with broader security monitoring.

Benefits

• The Remote base pay range for this position is from $136,000 to $187,000. Salary will be based on prior experience related to the skills required for this position.