CREATIVITY IS OUR SUPERPOWER. It’s our heritage and it’s also our future. Because we don’t just make toys. We create innovative products and experiences that inspire fans, entertain audiences and develop children through play. Mattel is at its best when every member of our team feels respected, included, and heard—when everyone can show up as themselves and do their best work every day. We value and share an infinite range of ideas and voices that evolve and broaden our perspectives with a reach that extends into all our brands, partners, and suppliers.
About the Role
The IAM Engineer will play a critical role in delivering secure and reliable identity services across Mattel’s enterprise. This position is responsible for implementing, supporting, and enhancing IAM and PAM solutions, including identity lifecycle automation, access controls, privileged account management, and integration with enterprise applications.
As an IAM Engineer, this role serves as a key escalation point for L2 and L3 IAM and PAM issues, handling advanced troubleshooting, incident resolution, and remediation. The role supports operational stability and compliance activities such as User Access Reviews (UARs), audit support, and reporting. The engineer collaborates with IAM Architects, PAM teams, ITDR analysts, and security teams to ensure secure and compliant identity services, while driving automation to streamline processes and reduce manual effort.
Objectives of this Role
-
Implement and support enterprise IAM and PAM platforms, ensuring high availability, security, and compliance.
-
Provide support in fixing the (Joiner-Mover-Leaver) and support integrations across Workday, Okta, AD/Entra ID, and other cloud or on-prem applications.
-
Administer and maintain Privileged Access Management solutions (e.g. CyberArk, Okta OPA, BeyondTrust, Delinea, Cerby).
-
Provide Support for IAM/PAM issues, integrations, and API troubleshooting.
-
Lead threat detection and incident response activities in collaboration with ITDR Analysts, using tools such as CrowdStrike ITP, Semperis DSP (or similar), with proven risk remediation capabilities.
-
Support compliance initiatives including User Access Reviews (UARs), audit reporting, and evidence gathering for SOX, PCI, and other frameworks.
-
Participate in disaster recovery planning, incident management, and risk remediation efforts.
-
Develop and maintain runbooks, workflows, and documentation for operational consistency and knowledge sharing.
-
Collaborate with cross-functional teams to deliver IAM services aligned with business and security objectives.
-
Additional duties may be assigned as necessary to meet the ongoing needs of the organization.
-
Work hours may vary, and the position may require availability during off-business hours as dictated by project needs, system changes, or security events.
Skills and Qualifications
Required:
-
3+ years of hands-on experience in Identity and Access Management or cybersecurity operations.
-
Strong expertise with Okta Identity Cloud (SSO, MFA, Workflows, IGA, OPA, ODA) including lifecycle management and integrations.
-
Practical expertise with Privileged Access Management (CyberArk, Okta OPA, BeyondTrust, Delinea, Cerby) and secrets management.
-
Administration-level experience with Active Directory/LDAP, Entra ID (Azure AD), and cloud IAM solutions (e.g. AWS Cognito, Azure AD, GCP IAM).
-
Proven experience with authentication and federation standards (SAML, OAuth, OIDC, SCIM).
-
Experience in threat detection and incident response using tools such as CrowdStrike ITP, Semperis DSP and others, with proven risk remediation capabilities.
-
Familiarity with UAR (User Access Reviews), compliance reporting, and audit evidence collection to support regulatory frameworks (SOX, NIST CSF, PCI, etc.).
-
Basic experience in scripting and automation using PowerShell, Python, and REST APIs.
-
Hands-on expertise with monitoring and analytics platforms (e.g. Grafana, Sumo Logic, CrowdStrike ITP etc) for IAM/PAM service health and metrics.
-
Strong troubleshooting skills across Windows/Linux platforms, SSL certs, and cloud components.
-
Advanced Microsoft Excel, including pivot tables, formulas, and data analysis.
-
Participate in after-hours rotations or on-call duties to support critical incident response as needed.
-
Excellent communication, collaboration, and problem-solving skills.
-
Minimum Okta Certified professional.
Preferred:
-
Bachelor’s degree in technology or applicable experience.
-
Okta Certified Administrator or equivalent IAM certification.
-
Certification in CyberArk or comparable PAM technologies, with demonstrated ability to design, implement, and maintain secure privileged access environments.
-
Knowledge on endpoint privilege management (Windows/macOS) and server privilege management (Windows/Linux).
-
Experience with automation tools (Ansible, Terraform, CI/CD pipelines in AWS/Azure).
-
Experience contributing to disaster recovery and business continuity planning.
-
Knowledge of modern identity security principles including Zero Trust, passwordless authentication, and Just-in-Time access.
Don’t meet every single requirement? At Mattel, we are dedicated to an inclusive workplace and a culture of belonging. If you’re excited about this role but your past experience doesn’t align perfectly with every qualification in the job description, we still encourage you to apply. You may be just the right candidate for this or other roles.
How We Work:
We are a purpose driven company aiming to empower generations to explore the wonder of childhood and reach their full potential. We live up to our purpose employing the following behaviors:
-
We collaborate: Being a part of Mattel means being part of one team with shared values and common goals. Every person counts and working closely together always brings better results. Partnership is our process and our collective capabilities is our superpower.
-
We innovate: At Mattel we always aim to find new and better ways to create innovative products and experiences. No matter where you work in the organization, you can always make a difference and have real impact. We welcome new ideas and value new initiatives that challenge conventional thinking.
-
We execute: We are a performance-driven company. We strive for excellence and are focused on pursuing best-in-class outcomes. We believe in accountability and ownership and know that our people are at their best when they are empowered to create and deliver results.
Our Approach to Flexible Work:
We embrace a flexible work model designed to empower a culture of growth, optimism, and wellbeing, where every employee can reach their full potential. Combining purposeful in-person collaboration with flexibility, our focus is to optimize performance and drive connection for moments that matter.
Who We Are:
Mattel is a leading global toy and family entertainment company and owner of one of the most iconic brand portfolios in the world. We engage consumers and fans through our franchise brands, including Barbie, Hot Wheels, Fisher-Price, American Girl, Thomas & Friends, UNO, Masters of the Universe, Matchbox, Monster High, MEGA and Polly Pocket, as well as other popular properties that we own or license in partnership with global entertainment companies. Our offerings include toys, content, consumer products, digital and live experiences. Our products are sold in collaboration with the world’s leading retail and ecommerce companies. Since its founding in 1945, Mattel is proud to be a trusted partner in empowering generations to explore the wonder of childhood and reach their full potential.
Mattel’s award-winning workplace culture has been recognized by Forbes, Fast Company, Newsweek, Great Place to Work, TIME, and more.
Visit us at https://jobs.mattel.com/ and www.instagram.com/MattelCareers.
Mattel is an Equal Opportunity Employer where we want you to bring your authentic self to work every day. We welcome all job seekers, and all applicants will receive consideration for employment.
Videos to watch:
The Culture at Mattel
Corporate Philanthropy
