Security Engineer

Security Engineer, IAMTitle: Security Engineer, IAMLevel: IC-2Location: Los Angeles, CAWork setup: In-office (4 days a week)Department: ITCompanyTalent Systems, LLC is the leading technology solution provider for casting and auditioning to the entertainment industry. Casting directors and agents worldwide use Talent Systems’ portfolio of products to source and manage talent across film, television, commercials, theater and digital projects, powering an unparalleled, global casting software ecosystem.We are headquartered in Los Angeles and operate in the US, Canada, UK, Australia and India. Our portfolio brands include Casting Networks, Spotlight, Cast It Systems, Cast It Talent, Casting Frontier, Staff Me Up, Cast It Reach & Tagmin.Job DescriptionThe Security Engineer, IAM will design, implement, and manage Identity and Access Management systems across Talent Systems' global technology stack. This role sits within the Corporate IT team and is critical to ensuring that the right people have the right access to the right resources and that unauthorized access is proactively detected and prevented. You will work cross-functionally with Engineering, Product, Security, and HR teams to build scalable, secure, and compliance-aligned identity infrastructure that supports our global platforms and workforce.ResponsibilitiesIAM Architecture & EngineeringDesign, deploy, and maintain IAM solutions including SSO, MFA, RBAC, and PAM across cloud and on-premise environmentsArchitect and manage identity federation using protocols such as SAML, OAuth 2.0, and OpenID ConnectBuild and maintain lifecycle management processes for user provisioning, de-provisioning, and access reviewsIntegrate IAM systems with SaaS platforms (Google Workspace, Slack, GitHub, Zendesk, and others) and internal applicationsDevelop and maintain automation for access request workflows and entitlement managementSecurity Operations & ComplianceConduct periodic access reviews and certification campaigns to ensure least-privilege principles are enforcedMonitor IAM systems for anomalous activity, access violations, and policy drift; respond to and remediate incidentsSupport audit and compliance activities related to SOC 2, PCI-DSS, GDPR, and other applicable frameworksDefine and enforce IAM policies, standards, and procedures in alignment with industry best practicesCollaborate with the Information Security Office to evaluate and close identity-related vulnerabilitiesCross-Functional CollaborationPartner with Engineering and DevOps teams to embed IAM controls into CI/CD pipelines and cloud infrastructureWork with IT Team to align identity processes with endpoint and network security policiesSupport onboarding, offboarding, and role-change workflows in coordination with People OperationsParticipate in cross-functional planning to surface IAM-related risks, roadmap items, and quarterly prioritiesQualifications4+ years of hands-on experience in IAM engineering, identity security, or a closely related fieldProficiency with IAM protocols: SAML, OAuth 2.0, OpenID Connect, LDAP, SCIMExperience administering an enterprise identity provider (e.g., Okta, Azure AD / Entra ID, Google Workspace Identity, or equivalent)Solid understanding of RBAC, least-privilege, and zero-trust principlesFamiliarity with compliance frameworks including SOC 2 Type II, GDPR, and ISO 27001Excellent written and verbal communication skills; able to explain complex identity concepts to non-technical stakeholdersPreferred: Experience with Privileged Access Management (PAM) tools (e.g., CyberArk, BeyondTrust, HashiCorp Vault)Preferred: Demonstrated ability to script and automate IAM workflows using Python, PowerShell, Bash, or similarPreferred: Hands-on experience with cloud IAM (AWS IAM, GCP IAM, or Azure RBAC)Preferred: Background in SaaS or multi-tenant platform environments with complex user hierarchy managementPreferred: Exposure to entertainment, media, or marketplace platform securityPreferred: Experience working in a globally distributed team across multiple time zones