Senior IAM Engineer

Fanatics Commerce is the global leader in licensed sports merchandise operating a vertically integrated platform that designs manufactures and delivers officially licensed apparel jerseys headwear and collectibles for major leagues teams and events worldwide. With more than 900 e-commerce sites and a global omnichannel presence across digital in-venue and retail Fanatics Commerce reaches fans in over 180 countries and powers official fan experiences for many of the worlds most iconic sports properties.

At Fanatics we bring our BOLD Leadership Principles to life every day - building championship teams obsessing over fans acting with entrepreneurial speed and delivering with a determined and relentless mindset.

As we continue to scale our global platform the IAM Engineer will play a critical role in building scalable automated identity and access security capabilities across Fanatics Commerce.

Were looking for an IAM Engineer who places a strong emphasis on usable security and scaling successfully through automation keeping pace with Fanatics Commerces rapid growth without disrupting this role you will own the overall strategy planning development and support of Fanatics IAM solutions and associated processes providing direction across federation privileged access management authentication and authorization certificate management and identity provisioning. The IAM Engineer delivers business and fan impact through BOLD leadership and execution excellence leveraging data automation and AI-enabled insights.

Success is measured by the ability to deliver results through BOLD capabilities and measurable outcomes.

Team & Leadership Impact (Build Championship Teams)

• Partner closely with service desk systems engineering network security audit application developers and other engineers to design and maintain functional scalable and secure IAM operations.
• Act as the functional technical leader during IAM implementations driving technology selection including buy vs. build decisions and setting engineering direction for the team.
• Collaborate with vendors and business partners to develop implement and manage the IAM program and work directly with business lines on integration requirements including provisioning deprovisioning and identity lifecycle.

Fan & Customer Impact (Obsessed with Fans)

• Define and enforce a least-privilege access security model across all systems and platforms reducing risk exposure for users and fans across Fanatics Commerces digital ecosystem.
• Produce privileged access usage reports and support audit evidence requests for SOC 2 PCI DSS and ITGC controls ensuring trust and compliance at scale.
• Partner with application and engineering teams to onboard new applications into Okta enabling secure and seamless user experiences across internal tools and fan-facing platforms.
• Support emerging identity controls for AI agents and machine identities including scoped OAuth tokens and service-to-service authentication to safeguard next-generation platform capabilities.

Innovation & Problem Solving (Limitless Entrepreneurial Spirit)

• Identify evaluate and drive decision-making around new and emerging IAM technologies including CIEM ITDR and IGA platforms establishing strategy implementation and operationalization roadmaps.
• Build automated monitoring and renewal pipelines for TLS/SSL certificate lifecycle management eliminating expiration-driven outages and integrating with CyberArk and internal CI/CD tooling.
• Implement adaptive MFA conditional access policies and passwordless authentication initiatives advancing Fanatics Zero Trust security posture.
• Develop enterprise-wide IAM standards and strategy roadmaps including RBAC/ABAC models and provisioning integrations connecting HR systems Active Directory and downstream applications.

Ownership & Execution (Determined & Relentless Mindset)

• Own the full PAM platform lifecycle including safe design policy configuration session isolation automated password/secret rotation and just-in-time access workflows to reduce standing privilege across the organization.
• Manage issuance renewal revocation and inventory of internal and external TLS/SSL certificates across cloud and on-premises environments maintaining PKI hygiene aligned to industry best practice.
• Implement and coordinate remediation required by policies standards reviews and audits documenting exceptions as necessary and maintaining run books and incident response procedures.
• Evaluate and monitor project efforts timelines and task management to ensure IAM initiatives are delivered on time and to standard.

We are building a future-ready organization. This role is expected to:

• Apply AI and technology to improve efficiency quality and outcomes
• Use data and digital tools to inform decisions and enhance performance
• Demonstrate curiosity and adaptability in adopting new technologies and ways of working
• Contribute to a culture of innovation and continuous improvement

Required Qualifications:

• A minimum of 5 years of experience designing implementing and managing complex IAM solutions with expertise in PAM platforms such as CyberArk Delinea or BeyondTrust in enterprise environments.
• Proficiency in SSO and identity protocols including Okta administration SAML OIDC OAuth Active Directory and LDAP with hands-on experience implementing adaptive MFA and conditional access policies.
• Strong understanding of identity lifecycle management for privileged and service accounts including credential rotation just-in-time access and Zero Trust security principles.
• Working knowledge of certificate management and PKI concepts including TLS CA hierarchies and key rotation with experience building automated renewal pipelines integrated into CI/CD tooling.
• Experience with CIEM ITDR and IGA platforms and familiarity with emerging authorization mechanisms based on Zanzibar/ReBAC.
• Proficiency with cloud technologies (AWS Azure GCP or OCI) configuration management tools such as Terraform or Ansible DevOps tools (Bitbucket GitLab GitHub Jenkins) and advanced programming experience in Python Go or equivalent.
• Exceptional communication skills with the ability to translate complex technical security topics and risks to programmers network engineers managers and non-technical stakeholders; strong critical thinking analytical and cross-functional leadership skills.

Education:

• Bachelors degree in Computer Science Information Systems or equivalent combination of education and experience; relevant security certifications required.

Hybrid: The primary place of performance of this role is the Companys office located in Hyderabad

At Fanatics we operate with a BOLD mindset - We Build Championship Teams were Obsessed with Fans we embrace a Limitless Entrepreneurial Spirit and we approach every challenge with a Determined and Relentless Mindset. If youre ready to contribute to a dynamic fast-paced environment that thrives on collaboration and growth we want you to be part of our team.

ABOUT US
Fanatics is building a leading global digital sports platform. We ignite the passions of global sports fans and maximize the presence and reach for our hundreds of sports partners globally by offering products and services across Fanatics Commerce Fanatics Collectibles and Fanatics Betting & Gaming allowing sports fans to Buy Collect and Bet. Through the Fanatics platform sports fans can buy licensed fan gear jerseys lifestyle and streetwear products headwear and hardgoods; collect physical and digital trading cards sports memorabilia and other digital assets; and bet as the company builds its Sportsbook and iGaming platform. Fanatics has an established database of over 100 million global sports fans; a global partner network with approximately 900 sports properties including major national and international professional sports leagues players associations teams colleges college conferences and retail partners 2500 athletes and celebrities and 200 exclusive athletes; and over 2000 retail locations including its Lids retail stores. Our more than 22000 employees are committed to relentlessly enhancing the fan experience and delighting sports fans globally.

ABOUT THE TEAM
Fanatics Commerce is a leading designer manufacturer and seller of licensed fan gear jerseys lifestyle and streetwear products headwear and hardgoods. It operates a vertically-integrated platform of digital and physical capabilities for leading sports leagues teams colleges and associations globally as well as its flagship site .

Fanatics Commerce has a broad range of online sports venue and vertical apparel partnerships worldwide including comprehensive partnerships with leading leagues teams colleges and sports organizations across the worldincluding the NFL NBA MLB NHL MLS Formula 1 and Australian Football League (AFL); the Dallas Cowboys Golden State Warriors Paris Saint-Germain Chelsea FC and Tokyo Giants; the University of Notre Dame University of Alabama and University of Texas; the International Olympic Committee (IOC) England Rugby and the Union of European Football Associations (UEFA).

At Fanatics Commerce we infuse our BOLD Leadership Principles in everything we do:
Build Championship Teams
Obsessed with Fans
Limitless Entrepreneurial Spirit
Determined and Relentless Mindset

By submitting your application you agree to our terms of service and acknowledge you have read ourCandidate Privacy Policy.

Fanatics will never ask candidates for money banking information or other sensitive personal information as part of the interview process. If you receive a suspicious message claiming to be from Fanatics recruiting please do not respond and report it here.