iCapital is powering the world’s alternative investment marketplace. Our financial technology platform has transformed how advisors, wealth management firms, asset managers, and banks evaluate and recommend bespoke public and private market strategies for their high-net-worth clients. iCapital services approximately $214 billion in global client assets invested in 1,731 funds, as of December 2024.
iCapital has been named to the Forbes Fintech 50 for seven consecutive years (2018-2024); a three-time selection by Forbes to its list of Best Startup Employers (2021-2023); and a four-time winner of MMI/Barron’s Solutions Provider award (See link below).
About the Role
iCapital is looking to hire a Cloud IAM Engineer to join the Corporate Technology department, whose mission is to empower individuals across the company with reliable and innovative technology. The Cloud IAM Engineer role is a technical position which will support our governance tools Saviynt and Okta along with Microsoft Entra ID. This role is responsible for managing and maintaining our identity governance platforms, creating and granting access to new users and non-human accounts, creating and maintaining birthright entitlements for departments and roles, leading recertification initiatives, deploying single sign-on applications, troubleshooting access and permission related requests, and maintaining an efficient user lifecycle management program.
In addition to these responsibilities, this role also requires IAM-related governance of our cloud environments and third-party applications which includes reviewing stale access, reducing over-privileged access etc. This role is supported by both the Corporate Technology and the Corporate Applications and Security departments.
Responsibilities
- Drive our IAM governance program as a highly technical individual by managing and maintaining our primary software, Saviynt and Okta.
- Implement and suggest best practices and more efficient workflows within our current environment. Identify gaps and recommend solutions to enhance internal processes.
- Collaborate across iCapital with department leads, management, senior technical engineers, and Information Security to ensure a secure and reliable IAM environment.
- Create and maintain automation pipelines within Saviynt and Okta via built-in tools and Terraform.
- Ensure a reliable user lifecycle management program where you will oversee user provisioning, deprovisioning, and access changes, ensuring accuracy and timeliness.
- Manage employee and service account access within Microsoft Entra ID and across other Corporate Technology owned third-party applications.
- Have a broad understanding of Information Technology, especially in relation to onboarding and offboarding processes.
Qualifications
- Bachelor’s degree in computer science, information technology, information security or equivalent work experience within the Information Technology field
- 4+ years of experience within Identity and Access Management related positions
- 2-4 years of experience with Identity management and governance tools like Sailpoint, Saviynt, Ping, Okta, and Microsoft Entra ID
- Experience with managing and maintaining birthright entitlements and privileged identity management (PIM)
- Experience with SAML and Oauth single sign-on applications within Okta, as well as auto-provisioning and SCIM
- Familiar with directory services and identity federation
- Experience with Terraform and IaC concepts
- Hands-on experience with maintaining role-based access for provisioning and entitlements
- Strong understanding of IAM and cloud governance practices and concepts
- Able to deliver clear and concisely written documentation for internal use across the company
- Able to speak confidently on topics related to the role's responsibilities
- Experience working in a regulated and secure environment where due diligence is required
- Certifications related to cloud platforms or Identity and Access Management are preferred
- Experience with cloud-native security tools and platforms is preferred
- Professional and calm attitude with a willingness to learn and develop towards a senior Cloud IAM Engineer
- Able to work independently when needed as well as work alongside department leaders, senior technical employees, and management level employees
- Excellent communication skills both written and verbal with technical and non-technical audiences
- Strong critical thinking and a detail orientated skillset
Benefits
The base salary range for this role is $100,000 to $125,000. iCapital offers a compensation package which includes salary, equity for all full-time employees, and an annual performance bonus. Employees also receive a comprehensive benefits package that includes an employer matched retirement plan, generously subsidized healthcare with 100% employer paid dental, vision, telemedicine, and virtual mental health counseling, parental leave, and unlimited paid time off (PTO).
We believe the best ideas and innovation happen when we are together. Employees in this role will work in the office Monday-Thursday, with the flexibility to work remotely on Friday.
For additional information on iCapital, please visit https://www.icapitalnetwork.com/about-us Twitter: @icapitalnetwork | LinkedIn: https://www.linkedin.com/company/icapital-network-inc | Awards Disclaimer: https://www.icapitalnetwork.com/about-us/recognition/
iCapital is proud to be an Equal Employment Opportunity and Affirmative Action employer. We do not discriminate based upon race, religion, color, national origin, gender, sexual orientation, gender identity, age, status as a protected veteran, status as an individual with a disability, or other applicable legally protected characteristics.
iCapital Compensation & Benefits Highlights
The following summarizes recurring compensation and benefits themes identified from responses generated by popular LLMs to common candidate questions about iCapital and has not been reviewed or approved by iCapital.
-
Healthcare Strength — Healthcare coverage is generous, with heavily subsidized medical, 100% employer‑paid dental and vision, and access to virtual mental health and telemedicine. These provisions are described as adding meaningful value beyond base salary.
-
Leave & Time Off Breadth — Unlimited PTO and unlimited sick time, plus paid holidays and volunteer time, provide broad flexibility for time away. This breadth of leave supports work‑life balance and family needs.
-
Parental & Family Support — Paid parental leave and family‑friendly resources (such as a mother’s room) are part of the package. These supports contribute to a family‑friendly environment and enhance overall total rewards.
iCapital Insights
Similar Jobs
What We Do
Powering the World’s Alternative Investment Marketplace. Part innovator, part educator, and part navigator of the alternatives industry, iCapital offers intuitive, scalable digital solutions that have transformed how private market and hedge fund investments are bought and sold. With iCapital, financial advisors, wealth managers, and asset managers around the world now have access to everything they need to deliver the return and diversification potential of alternatives to high-net-worth investors.
Why Work With Us
iCapital is a technology-driven cutting edge firm with an entrepreneurial spirit. You'll have the opportunity to make important contributions as part of a dynamic team where you can maximize your potential, develop new skills, and help change an industry within an innovative and fast-paced setting.
Gallery
