Identity and Access Management Engineer

About Us

Matson has been the leading ocean shipping and logistics provider throughout the Pacific since 1882. We are the supply chain lifeline for Hawaii, Alaska, Guam, and islands of the South Pacific. We also offer the top two ocean shipping services in the world's largest trade lane - Asia to the U.S. West Coast. With our subsidiaries Matson Terminals and Matson Logistics, our business focus is exceeding customer expectations with quality, reliability, and integrity.

We strive to operate in an environmentally sustainable manner and promote land-based environmental programs in Hawaii, Guam, and Alaska. We help improve the communities in which we work and live through our community giving program that annually supports hundreds of local organizations. And we work to improve diversity, equity and inclusion in our company, communities and industry through an active social equity program.

Matson is a great place to work, and everyone who works with us becomes part of the Matson ohana or family. Join our team and help us move freight better than anyone.

Learn more at matson.com.

About the Role

The Identity and Access Management (IAM) Engineer role is a position within Information Security responsible for supporting OKTA SSO platforms and technologies. This role is primarily tasked with supporting the application access and permissions, integration of key IAM tools, specifically Okta, and administering Multi-Factor Authentication (MFA) solutions such as DUO, Okta Verify, and YubiKey and Proofpoint technology.

What you'll do:

• Administer user access and privileges in OKTA.
• Assisting with new integrations and introduction of additional security controls to enhance IAM posture.
• Administer Multi Factor Authentication (MFA) (specifically DUO and OKTA Verify).
• Provide support for SOX Audit processes, focusing on User Access and Entitlement reviews.
• Troubleshooting Active Directory user account issues at Level 2 and escalate appropriately when needed.
• Create and maintain support documentation.
• Participate in IAM projects and initiatives.
• Assist IAM team with any ad-hoc requests.
• Educating end users on frequently used security tools, such as OKTA, Duo, etc.
• Producing and analyzing various reports.
• In addition to those essential job functions identified above, individuals in this position.

In addition to those essential job functions identified above, individuals in this position are also responsible for performing other duties or tasks that may be assigned. The Company retains the discretion to add to or change the essential job functions of this position at any time.

You have these skills:

• Have a primary skillset in Identity and Access Management, which includes Authn, MFA, workflows, automation, least privileged access, OIDC, SAML.
• Intimately familiar with IAM related protocols such as SAML, SCIM, OpenID and OAuth
• Experience performing Design and documentation reviews and provide guidance to the technical teams.
• Strong experience with Active Directory, Federation, Delegated administration, API gateways.
• Excellent customer service and communication (oral / written) skills required. Able to engage both, technical and non-technical stakeholders.
• Strong critical thinking and analytical skills and ability to think "out of the box" required.
• Must be able to work independently and with a team, under minimum supervision.
• 3-4 years analyzing and troubleshooting user account/access problems.
• Familiarity with ITSM tools (ServiceNow preferred but any ITSM is ok).
• Familiarity with MS Office Suite - mainly MS Word and MS Excel.
• Must be a quick learner and adapt to changes rapidly.

And these qualifications:

• Bachelor's degree from four-year college or university or equivalent experience is desirable.
• Experience working in a structured, process-driven environment.
• Experience supporting IT hardware and software.
• As needed, must be able to work flexible hours when required to accomplish tasks during non-business hours to reduce impact to the 24/7 terminal operations.
• Minimum 4 years of professional experience in Authentication, SSO, MFA and IAM.

Extra credit if you have:

• OKTA SSO and DUO MFA preferred.

The annual salary range for this position in California is $101,600 - $138,200. The salary offered will depend upon qualifications and other operational considerations.

At Matson, we're looking for people to build a unified team to maintain our values of trust, integrity, and reliability. We welcome diverse perspectives and people who think rigorously and thoughtfully challenge assumptions.

#MI

Matson is an equal opportunity employer committed to a diverse and inclusive workforce. Applicants will receive consideration for employment without regard to race, color, religion, sex (including pregnancy), age, sexual orientation, national origin, marital status, parental status, ancestry, disability, AIDS/HIV status, gender identity, gender expression, veteran status, genetic information, other distinguishing characteristics of diversity and inclusion, or any other protected status. Qualified applicants with arrest and/or conviction records will be considered for employment in a manner consistent with federal and state laws, as well as applicable local ordinances, including, but not limited to, the San Francisco and Los Angeles Fair Chance Ordinances.