Identity and Access Management Engineer - Palo Alto, United States - Rubrik

Description

Reporting to the Director of Global Corp IT, this role is critical to the success of Rubrik and all identity programs across the organization.

This Employee will serve as a technical resource on a global team of Okta administrators to drive security and identity management initiatives, define ambitious, measurable goals and objectives; identity metrics and solutions that show impact and progress over time.

A security-first approach will be required in all areas of this program. Senior-level communication and collaboration within the IT/Engineering and other departments will be the key to success. This person would report weekly into our Palo Alto HQ.

What you will be responsible for:
Lead the strategic technical planning, design and delivery of Identity & Access Management solutions and capabilities.
Provide support to global operational and incident escalations in a time sensitive manner.
In Depth knowledge of designing, configuring, implementation, maintenance, and documentation of all layers of IAM applications and robust identity and access solutions including tools to support authorization, authentication and account creation, onboarding, offboarding, user provisioning, de-provisioning, single-sign, federated identities, and multi-factor authentication
Own Identity and Access Management for all of Rubrik employees and applications

Act as Subject Matter Expert to design, engineer, and maintain global IAM services and solutions following company best practices and industry frameworks.

Establish SLAs, governance processes, best practices and mitigation procedures across development lifecycle and sustainment for all IAM services
Identify and establish procedures to ensure the business continuity, confidentiality and integrity of identity data services
Develops and implements automation workflows to facilitate user provisioning, deprovisioning and access control
Develop and maintain consistent documentation for configurations, processes, designs and standard operating procedures.
Experience preparing and communicating Identity Access Management directions/roadmaps to IT leadership.
Working Knowledge of Google, GCP, AWS and Azure Cloud environments.

Experience with similar products:
BetterCloud/Workato, experience using Application APIs to automate.
Ensure continuous availability of supported services, resolve complex issues and system design weaknesses, meet, or exceed defined resolution SLAs.
Ability to prioritize multiple projects while meeting ambitious deadlines.

Maintain an understanding of current and emerging IAM trends, evaluate new technologies and solutions, participate in strategic and technical architecture efforts to maintain and advance service offerings.

Experience you will need:
3+ years of hands-on experience working with Okta as the enterprise identity provider
2+ years of hands-on experience using Okta workflows to automate processes as it relates to access management
Strong analytical skills, critical thinker, self-starter- the ability to tackle ambiguous problems head-on with little direction.
Familiarity with front and back office SaaS tech stack as it relates to configuration of these apps for single sign on (SSO) using SAML or federated Identity
Experience with implementing Device Trust
You will maintain security and risk controls and support compliance objectives.

You will oversee the design, development, implementation and support for access management solutions to meet the Zero Trust goals of the company.

FedRamp Experience a big plus.

Ability to produce artifacts such as architecture flow diagrams, standard operating procedures (SOPs), and communicate and present information clearly and concisely to stakeholders and leadership.

Provide mentorship and career development opportunities for other team members
#LI-KY1

The minimum and maximum base salaries for this role are posted below; additionally, the role is eligible for bonus potential, equity and benefits.

The range displayed reflects the minimum and maximum target for new hire salaries for the role based on U.S. location.

Within the range, the salary offered will be determined by work location and additional factors, including job-related skills, experience, and relevant education or training.

US Pay Range
$99,700 — $149,500 USD

About Rubrik:
Rubrik is on a mission to secure the world's data. With Zero Trust Data Security, Rubrik helps organizations achieve business resilience against cyberattacks, malicious insiders, and operational disruptions. Rubrik Security Cloud, powered by machine learning, secures data across enterprise, cloud, and SaaS applications.

Rubrik helps organizations uphold data integrity, deliver data availability that withstands adverse conditions, continuously monitor data risks and threats, and restore businesses with their data when infrastructure is attacked.

At Rubrik we are committed to building and sustaining a culture where people of all backgrounds are valued, know they belong, and believe they can succeed here.

Rubrik's goal is to hire and promote the best person for the job, no matter their background. In doing so, Rubrik is committed to correcting systemic processes and cultural norms that have prevented equal representation.

This means we review our current efforts with the intent to offer fair hiring, promotion, and compensation opportunities to people from historically underrepresented communities, and strive to create a company culture where all employees feel they can bring their authentic selves to work and be successful.

Our DEI strategy focuses on three core areas of our business and culture:

Our Company:
Build a diverse company that provides equitable access to growth and success for all employees globally.

Our Culture:
Create an inclusive environment where authenticity thrives and people of all backgrounds feel like they belong.

Our Communities:

Expand our commitment to diversity, equity, & inclusion within and beyond our company walls to invest in future generations of underrepresented talent and bring innovation to our clients.

Equal Opportunity Employer/Veterans/Disabled

Rubrik is an Equal Opportunity Employer.

All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, or protected veteran status and will not be discriminated against on the basis of disability.

Rubrik provides equal employment opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion, sex, national origin, age, disability or genetics.

In addition to federal law requirements, Rubrik complies with applicable state and local laws governing nondiscrimination in employment in every location in which the company has facilities.

This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation and training.

Federal law requires employers to provide reasonable accommodation to qualified individuals with disabilities.

Please contact us at if you require a reasonable accommodation to apply for a job or to perform your job.

Examples of reasonable accommodation include making a change to the application process or work procedures, providing documents in an alternate format, using a sign language interpreter, or using specialized equipment.

Are you currently or have you ever been employed by Rubrik or contracted to provide services to Rubrik?

Please Review the NDA and indicate your agreement by typing your full name below


NONDISCLOSURE AGREEMENT
In consideration of any disclosure of certain nonpublic or confidential information, you hereby enter into this Nondisclosure Agreement (the " Agreement ") and agree as follows:
Confidential Information . In connection with a potential business relationship or other business purposes, Rubrik, Inc.

(the " Company ") has granted you (the individual or entity named below) access, or may grant you access, to business, technical or other nonpublic information, materials and/or ideas (" Confidential Information ," which term shall include, without limitation, anything you learn or discover as a result of exposure to or analysis of any Confidential Information).

Obligations .

You will hold in confidence and will not possess or use (except as required to evaluate the proposed business relationship) or disclose any Confidential Information except information you can document which (i) is in the public domain through no fault of yours, (ii) was properly known to you, without restriction, prior to disclosure by Company or (iii) was properly disclosed to you by another person without restriction.

You will not reverse engineer or attempt to derive the composition or underlying information, structure or ideas of any Confidential Information.

You will not export, re-export, resell, ship or divert or cause to be exported, re-exported, resold, shipped or diverted, directly or indirectly, any Confidential Information or product thereof.

You will promptly notify Company of any unauthorized release, disclosure or use of Confidential You will strictly abide by any and all instructions and restrictions provided by Company from time to time with respect to Confidential Information or Company systems.

You will ensure the security of any facilities, machines, accounts, passwords and methods you use to store any Confidential Information or to access Company systems and ensure that no other person has or obtains access thereto.

Return of Information .

If you decide not to proceed with the potential business relationship or if asked by Company, you will promptly return all Confidential Information and all copies, extracts and other objects or items in which Confidential Information may be contained or embodied.

No License . This Agreement does not grant a license to you in or to any of the Confidential Information.
Feedback .

You may, at your option and in your sole discretion, provide suggestions or feedback related to the Company's products or services.

In no event will such suggestions or feedback be considered confidential or proprietary to you. The Company will be free to use such suggestions as it chooses, without compensation to you.
Disclaimer .

Confidential Information is provided to you "as is" and the Company makes no warranties with respect to the Confidential Information or any materials provided by the Company.

In no event will the Company be liable for the accuracy or completeness of the Confidential Information.

You understand that nothing herein (i)requires the disclosure of any Confidential Information of the Company or (ii) requires the Company to proceed with any transaction or relationship.

You understand that this Agreement does not obligate the Company to disclose any information or negotiate or enter into any agreement or relationship.

Miscellaneous .

The terms of this Agreement will remain in effect with respect to any particular Confidential Information until you can document that such Confidential Information falls into one of the exceptions stated in Section 2 above.

You acknowledge and agree that due to the unique nature of the Confidential Information, any breach of this Agreement would cause irreparable harm to Company for which damages are not an adequate remedy, and that Company shall therefore be entitled to equitable relief in addition to all other remedies available at law.

This Agreement is personal to you, nonassignable by you, governed by the internal laws of the State of California and may be modified or waived only in writing signed by both parties.

If any provision of this Agreement is found to be unenforceable, such provision will be limited or deleted to the minimum extent necessary so that the remaining terms remain in full force and effect.

The prevailing party in any dispute or legal action regarding the subject matter of this Agreement shall be entitled to recover attorneys' fees and costs.

Type your full name in the box below to acknowledge your agreement to the above NDA
How did you hear about this job?

Location

Are you a US Citizen (U.S. born, derived from U.S. parentage, or naturalized) and able to provide valid proof of U.S. citizenship?

This position carries responsibilities and duties involving the U.S. Federal Government's interests.


Please confirm the following:
If required, could you obtain a public trust security clearance?

If required, could you obtain a public trust security clearance?

Are you located within the lower 48 contiguous United States (not AK or HI, but DC is ok) such that your work location qualifies as "On U.S.

Soil"?

I acknowledge that I have read Rubrik's Candidate Privacy Notice and understand that the information I submit as part of this application will be used in accordance with this policy.

See Rubrik's Candidate Privacy Notice here.

To ensure that you have an opportunity to disclose your authentic identity, we have provided the following voluntary demographic questions with more comprehensive response options.

Your responses will be used (in aggregate only) to help us identify areas of improvement in our interview process and to ensure an equitable and positive candidate experience for all.

Your responses will not be associated with your specific application and will not impact the hiring decision.
U.S. Standard Demographic Questions

To ensure that you have an opportunity to disclose your authentic identity, we have provided the following voluntary demographic questions with more comprehensive response options.

Your responses will be used (in aggregate only) to help us identify areas of improvement in our interview process and to ensure an equitable and positive candidate experience for all.

Your responses will not be associated with your specific application and will not impact the hiring decision.

How would you describe your gender identity? (mark all that apply)

Man

Non-binary

Woman

I prefer to self-describe

I don't wish to answer

How would you describe your racial/ethnic background? (mark all that apply)

Black or of African descent

East Asian

Hispanic, Latinx or of Spanish Origin

Indigenous, American Indian or Alaska Native

Middle Eastern or North African

Native Hawaiian or Pacific Islander

South Asian

Southeast Asian

White or European

I prefer to self-describe

I don't wish to answer

How would you describe your sexual orientation? (mark all that apply)

Asexual

Bisexual and/or pansexual

Gay

Heterosexual

Lesbian

Queer

I prefer to self-describe

I don't wish to answer


PUBLIC BURDEN STATEMENT:

According to the Paperwork Reduction Act of 1995 no persons are required to respond to a collection of information unless such collection displays a valid OMB control number.

This survey should take about 5 minutes to complete.
Voluntary Self-Identification of Disability

Form CC-305
Page 1 of 1
OMB Control Number
Expires 04/30/2026
Voluntary Self-Identification of Disability

Form CC-305

Page 1 of 1

OMB Control Number

Expires 04/30/2026
Why are you being asked to complete this form?

We are a federal contractor or subcontractor. The law requires us to provide equal employment opportunity to qualified people with disabilities. We have a goal of having at least 7% of our workers as people with disabilities. The law says we must measure our progress towards this goal. To do this, we must ask applicants and employees if they have a disability or have ever had one. People can become disabled, so we need to ask this question at least every five years.
Completing this form is voluntary, and we hope that you will choose to do so. Your answer is confidential. No one who makes hiring decisions will see it. Your decision to complete the form and your answer will not harm you in any way. If you want to learn more about the law or this form, visit the U.S. Department of Labor's Office of Federal Contract Compliance Programs (OFCCP) website at .
How do you know if you have a disability?

A disability is a condition that substantially limits one or more of your "major life activities." If you have or have ever had such a condition, you are a person with a disability.

Disabilities include, but are not limited to:
Alcohol or other substance use disorder (not currently using drugs illegally)
Autoimmune disorder, for example, lupus, fibromyalgia, rheumatoid arthritis, HIV/AIDS
Blind or low vision
Cancer (past or present)
Cardiovascular or heart disease
Celiac disease
Cerebral palsy
Deaf or serious difficulty hearing
Diabetes
Disfigurement, for example, disfigurement caused by burns, wounds, accidents, or congenital disorders
Epilepsy or other seizure disorder
Gastrointestinal disorders, for example, Crohn's Disease, irritable bowel syndrome
Intellectual or developmental disability
Mental health conditions, for example, depression, bipolar disorder, anxiety disorder, schizophrenia, PTSD
Missing limbs or partially missing limbs
Mobility impairment, benefiting from the use of a wheelchair, scooter, walker, leg brace(s) and/or other supports
Nervous system condition, for example, migraine headaches, Parkinson's disease, multiple sclerosis (MS)
Neurodivergence, for example, attention-deficit/hyperactivity disorder (ADHD), autism spectrum disorder, dyslexia, dyspraxia, other learning disabilities
Partial or complete paralysis (any cause)
Pulmonary or respiratory conditions, for example, tuberculosis, asthma, emphysema
Short stature (dwarfism)
Traumatic brain injury

Form CC-305
OMB Control Number
Expires 05/31/2023
Voluntary Self-Identification of Disability

Disability Status

If you believe you belong to any of the categories of protected veterans listed below, please indicate by making the appropriate selection.

As a government contractor subject to the Vietnam Era Veterans Readjustment Assistance Act (VEVRAA), we request this information in order to measure the effectiveness of the outreach and positive recruitment efforts we undertake pursuant to VEVRAA.

Classification of protected categories is as follows:
A "disabled veteran" is one of the following: a veteran of the U.S.

military, ground, naval or air service who is entitled to compensation (or who but for the receipt of military retired pay would be entitled to compensation) under laws administered by the Secretary of Veterans Affairs; or a person who was discharged or released from active duty because of a service-connected disability.

A "recently separated veteran" means any veteran during the three-year period beginning on the date of such veteran's discharge or release from active duty in the U.S.

military, ground, naval, or air service.
An "active duty wartime or campaign badge veteran" means a veteran who served on active duty in the U.S.

military, ground, naval or air service during a war, or in a campaign or expedition for which a campaign badge has been authorized under the laws administered by the Department of Defense.

An "Armed forces service medal veteran" means a veteran who, while serving on active duty in the U.S.

military, ground, naval or air service, participated in a United States military operation for which an Armed Forces service medal was awarded pursuant to Executive Order 12985.

Voluntary Self-Identification

For government reporting purposes, we ask candidates to respond to the below self-identification survey. Completion of the form is entirely voluntary. Whatever your decision, it will not be considered in the hiring process or thereafter. Any information that you do provide will be recorded and maintained in a confidential file.

As set forth in Rubrik's Equal Employment Opportunity policy, we do not discriminate on the basis of any protected group status under any applicable law.

Please view our Candidate Privacy Notice here.

#J-18808-Ljbffr