Skip to content
CV Rocket
Get started
How it worksThe enginePricingBlogContactSign in

Open nowPosted 2 days ago

Identity and Access Analyst (IAM)

Cloudera47 open roles

Where
Ireland-Cork
Work mode
Remote
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowIdentity and Access Analyst (IAM)Cloudera · Ireland-Cork

  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on Cloudera's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

13.9% of postings close within 7 days. Measured by our own scanner across the market. Cloudera postings stay open a median of 29 days.

Share of postings closed within
  1. 2.2%1 day
  2. 4.7%3 days
  3. 13.9%7 days
  4. 22.4%14 days
  5. 38.1%30 days
  6. 59.0%60 days
This job: posted 2 days ago

Cloudera median: 29 days open

The posting

Business Area:

IT

Seniority Level:

Mid-Senior level

Job Description:

At Cloudera, we empower people to transform complex data into clear and actionable insights. With as much data under management as the hyperscalers, we're the preferred data partner for the top companies in almost every industry. Powered by the relentless innovation of the open source community, Cloudera advances digital transformation for the world’s largest enterprises.

The Infrastructure and Operations organisation within Cloudera IT delivers a reliable, secure and scalable service infrastructure for our users and applications. Identity is the control plane for all of it, from SaaS applications to thousands of cloud accounts across AWS, Azure and Google Cloud. We partner with Information Security to build a Zero Trust architecture across Cloudera, and we support engineering teams enabling identity and SSO for in-house applications.

We are looking for an Identity Engineer to join our Infrastructure Operations team. You will help us run Okta as code, automate the identity lifecycle, and put the structure in place that makes least-privilege and just-in-time access work in practice, while keeping systems easy for people to use. You will work closely with our identity engineer, Information Security, HR systems and our support teams.

This role is not eligible for immigration sponsorship.

As an Identity Engineer, you will:

  • Own delivery of identity projects, and contribute to identity architecture decisions with other teams.
  • Administer and improve our Okta environments, including groups, group rules, policies, authenticators and application integrations.
  • Build and maintain identity configuration as code using Terraform and CI/CD, and review identity change requests from other engineers.
  • Design and build tooling and automation that enables secure self-service under Zero Trust principles, including Okta Workflows and scripted integrations.
  • Ensure auditability of identity functions, including configuration backup, change tracking and logging to central systems.
  • Design and automate identity lifecycle processes, from joiner through mover to leaver, driven by our HR system of record.
  • Onboard applications to our access request and just-in-time access platform, replacing manual and standing permissions with request-based workflows.
  • Bring an existing Okta estate into line with our group naming and lifecycle standards, including remediating legacy groups, direct role assignments and stale accounts.
  • Work with HR systems to manage the downstream impact of organisational changes on groups and access.
  • Support identity federation into AWS, Azure and Google Cloud.
  • Weigh risk against business and user needs, so access is both secure and easy to use.
  • Write clear runbooks and documentation.
  • Take part in an on-call rotation for identity services.

We're excited about you if you have:

  • 6+ years of experience operating and deploying Okta or an equivalent identity provider.
  • Strong experience with authentication protocols and systems, including OIDC, SAML and SCIM, and AD or LDAP.
  • Experience with access governance or JIT platforms such as Lumos, SailPoint or ConductorOne.
  • Experience building integrations and automation against web service APIs in Python, Go or JavaScript.
  • Experience with infrastructure as code, ideally Terraform, in a CI/CD environment such as GitHub, Spacelift or Jenkins.
  • Experience working with other teams on identity changes that affect many users.
  • Experience securing automation that holds privileged access, including separation of read and write functions and secrets management.
  • A methodical approach to change, and a habit of documenting what you build.

You may also have:

  • Okta Certified Professional, Administrator or Consultant certification.
  • Experience with Okta Workflows.
  • Experience with AWS IAM Identity Center or multi-account cloud access.
  • Experience integrating an identity provider with an HR system such as Workday.
  • Experience with Active Directory, RADIUS, OpenLDAP or TACACS.
  • Experience building for compliance, such as SOC 2 or SOX.
  • A working understanding of Zero Trust architecture.

What you can expect from us:

  • Generous PTO Policy
  • Support work life balance with Unplugged Days
  • Flexible WFH Policy
  • Mental & Physical Wellness programs
  • Phone and Internet Reimbursement program
  • Access to Continued Career Development
  • Comprehensive Benefits and Competitive Packages
  • Paid Volunteer Time
  • Employee Resource Groups

EEO/VEVRAA

#LI-RB1

#LI-REMOTE

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against Cloudera's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.

  3. We apply on Cloudera's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.

  4. Every reply, sorted

    Cloudera's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.

  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

Get the CV for this job
By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.