Administer end-to-end identity lifecycle management, access certifications, privileged access, anomaly detection, and insider threat investigations. Automate IAM processes using Python, PowerShell, Okta Workflows, and APIs. Maintain least-privilege controls across Okta, AWS, and business platforms while supporting SOC 2, HIPAA, GDPR, and insurance security audits. Design RBAC and ABAC models, investigate access incidents, preserve evidence, and mentor business reviewers in a cloud-first startup environment.
About Reserv
Reserv is an insurtech creating and incubating cutting-edge AI and automation technology to bring efficiency and simplicity to claims. Founded by insurtech veterans with deep experience in SaaS and digital claims, Reserv is venture-backed by Bain Capital and Altai Ventures and began operations in May 2022. We are focused on automating highly manual tasks to tackle long-standing problems in claims and set a new standard for TPAs, insurance technology providers, and adjusters alike. We have ambitious (but attainable!) goals and need people who can work in an evolving environment. If building a leading TPA and the prospect of tackling the long-standing challenges of the claims role sounds exciting, we can't wait to meet you.
Location Requirement
Candidates must reside in an eligible U.S. state throughout employment. We are unable to hire candidates residing in California, Alaska, Hawaii, U.S. territories, or outside the United States.
What you'll do
- Administer the identity lifecycle end to end. Automated joiner, mover and leaver for employees, contractors and independent adjusters, driven by HRIS.
- Manage access certifications. Real reviewers, real remediation, real evidence. Assuring least privilege.
- Assure standing admin access. Just-in-time elevation across Okta, AWS, and our claims and payment platforms.
- Anomaly identification. Build and tune detection for access anomalies, dormant account reactivation, and privilege escalation.
- Incidents and Insider Threat Investigations. Reconstruct the access timeline, scope the exposure, preserve the evidence, and contain it fast.
- Automation. Python, PowerShell, Okta Workflows and APIs, facilitating audit preparation.
- Auditing. SOC 2, carrier client assessments, HIPAA, GDPR, and state insurance data security requirements, plus logical access controls over the systems that matter to the books.
- Standardization. Mentor and coach business reviewers so access hygiene scales past you.
Qualifications
- 6+ years in a Cybersecurity or relevant role; with minimum 4+ focused squarely on identity and access management.
- IGA platform experience with Okta (required).
- Rippling or a comparable modern HRIS used as an identity source of truth.
- Security+, Okta Certified Administrator / Consultant, or relevant.
- Identity threat detection, Identity Security Posture Management, or insider threat program experience.
- Scaling IAM through high growth or surge onboarding.
- Deep hands-on Okta: SSO, SCIM, Lifecycle Management, workflows, and policy design.
- Enhanced understanding of SAML, OIDC, OAuth 2.0, MFA and conditional access.
- Documented privileged access experience: vaulting, just-in-time elevation, credential rotation.
- Cloud IAM in AWS: roles, policies, federation, permission boundaries.
- RBAC and ABAC design, entitlement modeling, and SoD enforcement.
- Scripting and automation in Python or PowerShell against REST APIs.
- Bachelor’s degree in Cybersecurity, IT, or related field.
- Manage confidential work such as investigations and separations with discretion.
- Strong written and verbal communication.
- Experience working in a cloud-first or startup environment.
Benefits
- Generous health-insurance package with nationwide coverage, vision, & dental
- 401(k) retirement plan with employer matching
- Competitive PTO policy – we want our employees fresh, healthy, happy, and energized!
- Generous family leave policy after 8 months of continuous work
- Work from anywhere to facilitate your work life balance
- Apple laptop, large second monitor, and other quality-of-life equipment you may want. Technology is something that should make your life easier, not harder!
At Reserv, we value diversity in backgrounds, perspectives, and life experiences and believe that diversity in viewpoints and critical thinking drives innovation, first-principles thinking, and success. We welcome applicants from all backgrounds and encourage those from all walks of life to apply. If you believe you are a good fit for this role, we would love to hear from you!
Similar Jobs
Artificial Intelligence • Cloud • Information Technology • Energy • Infrastructure as a Service (IaaS)
Designs, implements, and operates enterprise IAM solutions across Entra ID, Active Directory, cloud, SaaS, and data centers. Manages SSO, MFA, PAM, PIM, RBAC, identity governance, lifecycle controls, provisioning automation, third-party access, and non-human identities. Troubleshoots authentication and federation issues, supports identity-threat investigations, maintains technical documentation, and contributes to audit and compliance activities.
Top Skills:
Active DirectoryAPIsConditional AccessCyberarkIdentity Governance And AdministrationIso 27001MfaMicrosoft Entra IdNist CsfOauth 2.0Openid ConnectPimPowershellPrivileged Access ManagementRbacSailpointSAMLScimSoc 2SoxSsoZero Trust
Cloud • Computer Vision • Information Technology • Sales • Security • Cybersecurity
Manage and enhance identity infrastructure operations in CrowdStrike’s federal cloud environments. Responsibilities include identity provider operations, application lifecycle management, access troubleshooting, security control compliance, automation, monitoring, alerting, tier 2/3 support, root cause analysis, stakeholder communication, and on-call support. The role focuses on IAM security, scalability, FedRAMP and DoD requirements, and collaboration with Engineering and IT teams.
Top Skills:
AWSAzureDirectory ServicesDnsGCPGroup Policy ManagementKeycloakMfaNoknokOauth2OidcPingidentityPowershellPythonSAMLSIEMSplunk
Cloud • Security • Software • Generative AI
Develop and operate IAM services powering Elastic Cloud and on-premises offerings. Responsibilities include backend software development, technical design, production debugging, incident response, customer issue resolution, security and reliability improvements, and on-call participation. The role involves distributed systems, containers, virtualization, microservices, cloud platforms, Kubernetes adoption, and collaboration across globally distributed engineering teams.
Top Skills:
AWSAzureDistributed SystemsDockerElastic CloudElasticsearchGCPGoIamJavaJvmKubernetesMicroservicesScalaVirtualization
What you need to know about the Los Angeles Tech Scene
Los Angeles is a global leader in entertainment, so it’s no surprise that many of the biggest players in streaming, digital media and game development call the city home. But the city boasts plenty of non-entertainment innovation as well, with tech companies spanning verticals like AI, fintech, e-commerce and biotech. With major universities like Caltech, UCLA, USC and the nearby UC Irvine, the city has a steady supply of top-flight tech and engineering talent — not counting the graduates flocking to Los Angeles from across the world to enjoy its beaches, culture and year-round temperate climate.
Key Facts About Los Angeles Tech
- Number of Tech Workers: 375,800; 5.5% of overall workforce (2024 CompTIA survey)
- Major Tech Employers: Snap, Netflix, SpaceX, Disney, Google
- Key Industries: Artificial intelligence, adtech, media, software, game development
- Funding Landscape: $11.6 billion in venture capital funding in 2024 (Pitchbook)
- Notable Investors: Strong Ventures, Fifth Wall, Upfront Ventures, Mucker Capital, Kittyhawk Ventures
- Research Centers and Universities: California Institute of Technology, UCLA, University of Southern California, UC Irvine, Pepperdine, California Institute for Immunology and Immunotherapy, Center for Quantum Science and Engineering
