Description
Overview
Being good neighbors – helping people, investing in our communities, and making the world a better place – is who we are at State Farm. It is at the core of how we operate and the reason for our success. We're moving with urgency to become a Next Gen Good Neighbor, with technology that strengthens human connections and enhances the customer experience. As an employee, you'll spend less time navigating systems and more time applying judgment, empathy, and expertise in the moments that matter most.
The Identity and Access Management product suite is looking for an Identity & Access Control Analyst with a software development background to be a member of the State Farm’s Authorization Management team. The product team provides business areas with the tooling, solutions, and oversight required to define and maintain the principle of least privilege. This position will enable the selected team member to work across the enterprise to design and develop solutions which support the management of accesses and entitlements for all of State Farm’s human and non-human identities.
HYBRID: Qualified candidates (in or near hub locations listed below) should plan to spend time working from home and some time working in the office as part of our hybrid work environment.
HUB LOCATIONS: Dunwoody, GA; Richardson, TX; Tempe, AZ; or Bloomington, IL
SPONSORSHIP: Applicants are required to be eligible to lawfully work in the U.S. immediately; employer will not sponsor applicants for U.S. work authorization (e.g., H-1B visa) for this opportunity.
Responsibilities
- The new team member will engage in the development of automation and self-service strategies and tooling options. The candidate selected for this role will be required to develop, automate, and support State Farm’s identity and access management tools.
- Develops, supports, and tests end-to-end information security solutions, controls, tools, techniques leveraging existing or new capabilities, patterns, and/or processes to govern and protect State Farm assets
- Develops, documents, and maintains information security identity and access control strategy and operational procedures, guidelines, and processes
- Applies identity and access control concepts and practices in accordance with industry standards, security, risk management techniques, and governance/compliance requirements
- Research emerging identity and access security topics, threats, capabilities, and solution options
- Engage with teams across technology to understand needs to build identity and access control into technologies and solutions
- Ability to understand security identity and access model of an application and design Role Base Access Control roles to support the given security access model
- Maintains a working knowledge of current and emerging technologies (e.g., AWS, new platforms, vendor products, etc.) and technology related practices (e.g., Agile, Product Management, DevOps)
- Build and maintain access certification workflows: Develop the workflows that create, route, track, and close access review campaigns.
- Integrate with identity and access data sources: Build and maintain integrations that collect accurate user, account, role, group, and entitlement data from authoritative systems.
- Design secure, reliable APIs and services: Develop backend services and APIs that support certification, reporting, workflow orchestration, and integrations while enforcing security controls.
- Support access remediation: Build processes that turn certification decisions into revocation tasks, automated deprovisioning, tickets, or exception records.
- Ensure auditability and evidence retention: Capture reliable evidence showing what access was reviewed, who reviewed it, what decision was made, and whether remediation occurred.
- Participate in product delivery and operations: Contribute to story refinement, development, testing, code review, deployments, troubleshooting, and production support.
- Protect sensitive identity and access data: Ensure certification systems handle identity, entitlement, and security data securely through access controls, logging, encryption, and separation of duties.
- Handling of service tickets, communication with business partners, business continuity, Viva Engage, Control audits, supporting implemented controls, etc.
Additional Details:
- May be required to work nights and weekends
- Suggested certifications may include CISSP, Security+, GSEC, CISM, CRISC, or GCSA
- Must apply discretion and appropriate security measures when handling confidential and sensitive information
Required Technical Skills and Experience:
- Prior software development experience
- Cloud Platform Experience: AWS, Azure, GCP
- Application development tools (editors, compilers)
- Continuous Integrations/Continuous Delivery pipelines, automation tools
- Framework/Library: REACT, Angular
- Spring Framework: Spring, Spring Boot
- Source Code Management (Git, GitLab)
- Understanding of software design patterns, testing techniques, and software security scanning
- Build and maintain applications and tools using scripting languages (example: PERL, Python, PowerShell, Bash, NodeJS, JavaScript, TypeScript).
- Strong communication skills with the ability to relay complex technical knowledge to multiple audiences
- API Development/Testing Tools: Bruno, Insomnia
- Credential Management: HashiCorp Vault, AWS Secrets Manager
- Integrated Development Environment: Visual Studio, Intellij IDEA, etc.
Desired Skills and Experience:
- Solid understanding of security best practices. Strong communication skills with the ability to relay complex technical knowledge to multiple audiences
- Ability to integrate multiple technologies through technical design
- Strong thought leader with ability to think analytically and work with a team to solve problems
- Experience developing and maintaining operational procedure documentation and architecture diagrams, roadmaps, industry research summaries, etc.
- Ability to foster innovation, encourage diversity of thought, & incorporate new ideas
- Ability to deploy applications/functions to public cloud platforms through industry tools utilized by State Farm. (e.g., Terraform, Git, etc.)
- Understanding of security principles, best practices, and compliance regulations including knowledge of industry standards like ISO 27001, NIST, and NYCRR 500
Our Benefits
Because work-life balance is a priority at State Farm, compensation is based on our standard 38:45-hour work week!
- Potential starting salary range: $97,000 - $177,000
- Starting salary will be based on skills, background, and experience
- High end of the range limited to applicants with significant relevant experience
- Potential yearly incentive pay up to 15% of base salary
At State Farm, we offer more than just a paycheck. Check out our suite of benefits designed to give you the flexibility you need to take care of you and your family!
- Get Paid! On top of our competitive pay, you are eligible for an annual raise and bonus.
- Stay Well! Focus on you and your family’s health with our robust health and wellbeing programs. State Farm pays most of your healthcare premium, and we offer multiple healthcare plan options, including a high deductible plan. All medical plans provide 100% coverage for in-network preventative care, AND you and your family have access to vision, dental, telemedicine, 24/7 mental health professionals, and much more!
- Develop and Grow! Take advantage of educational benefits like industry leading training programs, top-notch tuition assistance programs, employee resource groups, and mentoring.
- Plan Ahead! Plan for those big moments in life with benefits like fertility/IVF/adoption assistance, college coaching, national discount programs, interactive monthly financial workshops, free financial coaching, and more. You can also start a savings account or consider financing through our State Farm Federal Credit Union!
- Take a Little “You” Time! You will have access to our generous time off policies designed so you can plan around holidays, family events, volunteering, or just to take a relaxing day off. With the opportunity to initially earn up to 20 days annually plus parental leave, paid holidays, celebration day, life leave (40 hours/year), bereavement leave, and community service/education support days, there will be plenty of time for you!
- Give Back! We offer several ways to give back through our Matching Gift Program, Good Neighbor Grant Program, and the Employee Assistance Fund.
- Finish Strong! Plan for retirement using free financial advisors and a 401(k) plan with company contributions of up to 7% of your salary.
Visit our State Farm Careers page for more information on our benefits, locations, and the hiring process of joining the State Farm team!
- The new team member will engage in the development of automation and self-service strategies and tooling options. The candidate selected for this role will be required to develop, automate, and support State Farm’s identity and access management tools.
- Develops, supports, and tests end-to-end information security solutions, controls, tools, techniques leveraging existing or new capabilities, patterns, and/or processes to govern and protect State Farm assets
- Develops, documents, and maintains information security identity and access control strategy and operational procedures, guidelines, and processes
- Applies identity and access control concepts and practices in accordance with industry standards, security, risk management techniques, and governance/compliance requirements
- Research emerging identity and access security topics, threats, capabilities, and solution options
- Engage with teams across technology to understand needs to build identity and access control into technologies and solutions
- Ability to understand security identity and access model of an application and design Role Base Access Control roles to support the given security access model
- Maintains a working knowledge of current and emerging technologies (e.g., AWS, new platforms, vendor products, etc.) and technology related practices (e.g., Agile, Product Management, DevOps)
- Build and maintain access certification workflows: Develop the workflows that create, route, track, and close access review campaigns.
- Integrate with identity and access data sources: Build and maintain integrations that collect accurate user, account, role, group, and entitlement data from authoritative systems.
- Design secure, reliable APIs and services: Develop backend services and APIs that support certification, reporting, workflow orchestration, and integrations while enforcing security controls.
- Support access remediation: Build processes that turn certification decisions into revocation tasks, automated deprovisioning, tickets, or exception records.
- Ensure auditability and evidence retention: Capture reliable evidence showing what access was reviewed, who reviewed it, what decision was made, and whether remediation occurred.
- Participate in product delivery and operations: Contribute to story refinement, development, testing, code review, deployments, troubleshooting, and production support.
- Protect sensitive identity and access data: Ensure certification systems handle identity, entitlement, and security data securely through access controls, logging, encryption, and separation of duties.
- Handling of service tickets, communication with business partners, business continuity, Viva Engage, Control audits, supporting implemented controls, etc.
Additional Details:
- May be required to work nights and weekends
- Suggested certifications may include CISSP, Security+, GSEC, CISM, CRISC, or GCSA
- Must apply discretion and appropriate security measures when handling confidential and sensitive information
Required Technical Skills and Experience:
- Prior software development experience
- Cloud Platform Experience: AWS, Azure, GCP
- Application development tools (editors, compilers)
- Continuous Integrations/Continuous Delivery pipelines, automation tools
- Framework/Library: REACT, Angular
- Spring Framework: Spring, Spring Boot
- Source Code Management (Git, GitLab)
- Understanding of software design patterns, testing techniques, and software security scanning
- Build and maintain applications and tools using scripting languages (example: PERL, Python, PowerShell, Bash, NodeJS, JavaScript, TypeScript).
- Strong communication skills with the ability to relay complex technical knowledge to multiple audiences
- API Development/Testing Tools: Bruno, Insomnia
- Credential Management: HashiCorp Vault, AWS Secrets Manager
- Integrated Development Environment: Visual Studio, Intellij IDEA, etc.
Desired Skills and Experience:
- Solid understanding of security best practices. Strong communication skills with the ability to relay complex technical knowledge to multiple audiences
- Ability to integrate multiple technologies through technical design
- Strong thought leader with ability to think analytically and work with a team to solve problems
- Experience developing and maintaining operational procedure documentation and architecture diagrams, roadmaps, industry research summaries, etc.
- Ability to foster innovation, encourage diversity of thought, & incorporate new ideas
- Ability to deploy applications/functions to public cloud platforms through industry tools utilized by State Farm. (e.g., Terraform, Git, etc.)
- Understanding of security principles, best practices, and compliance regulations including knowledge of industry standards like ISO 27001, NIST, and NYCRR 500
