Freelance Controls Engineer Jobs in California (NOW HIRING)

OVERVIEW OF THE COMPANY

Fox CorporationUnder the FOX banner, we produce and distribute content through some of the world's leading and most valued brands, including: FOX News Media, FOX Sports, FOX Entertainment, FOX Television Stations and Tubi Media Group. We empower a diverse range of creators to imagine and develop culturally significant content, while building an organization that thrives on creative ideas, operational expertise and strategic thinking.JOB DESCRIPTION

Under the FOX banner, we produce and distribute content through some of the world's leading and most valued brands, including: FOX News Media, FOX Sports, FOX Entertainment, FOX Television Stations and Tubi Media Group. We empower a diverse range of creators to imagine and develop culturally significant content, while building an organization that thrives on creative ideas, operational expertise and strategic thinking.
ABOUT THE ROLE
As a Principal IAM & SaaS Engineer, you will serve as a senior technical leader responsible for the architecture, implementation, and ongoing evolution of Fox's Identity and Access Management (IAM) ecosystem and SaaS application portfolio. This role will drive secure, scalable identity solutions that enable the business while protecting enterprise assets, partnering closely with Security, Infrastructure, Engineering, and business stakeholders across the organization.
A SNAPSHOT OF YOUR RESPONSIBILITIES

• Architect & Optimize: Work with tech leadership to drive the strategic roadmap for our Okta IAM architecture and core SaaS platforms (Google Workspace, Slack, Zoom), ensuring high availability, scalability, and seamless user experiences.
• Zero Trust & Access Control: Design and enforce granular access control policies, adaptive Multi-Factor Authentication (MFA), and Just-In-Time (JIT) provisioning models across all corporate and production systems.
• Complex Lifecycle Governance: Partner with HR Ops to architect automated lifecycle workflows for a diverse workforce, including full-time employees, high-turnover production crews, freelancers, and third-party media vendors.
• AI Stack & Non-Human Identity Security: Collaborate with Cybersecurity to establish data-loss prevention (DLP) guardrails and identity governance for enterprise AI tools (Claude, Cursor, ChatGPT, Gemini Enterprise). Define and manage lifecycle frameworks for Non-Human Identities (NHIs) like agents, service accounts, API tokens, and secrets.
• Compliance & Technical Leadership: Act as the technical authority on SOX and regulatory compliance within the IAM space for a publicly traded media company. Document architectures, review controls, and provide technical guidance and mentorship to an existing team of Senior IAM Engineers.
• Drive continuous improvement through automation, monitoring, and operational excellence.

WHAT YOU WILL NEED

• Experience: 10+ years of dedicated experience in Identity & Access Management (IAM) and SaaS engineering within a fast-paced, tech-forward enterprise environment.
• Okta Mastery: Expert-level engineering and architectural experience with Okta (ISPM, Okta Workflows, IGA, and complex inbound/outbound provisioning setups).
• SaaS Ecosystems: Deep administrative and security knowledge of Google Workspace, Slack, Zoom, and developer tools. Experience implementing enterprise guardrails around LLM and AI assistant tools is highly desirable.
• Modern Identity Protocols: Strong fundamental knowledge of SAML 2.0, OIDC, OAuth 2.0, SCIM, and API-driven integrations.
• Public Company Compliance: Proven experience designing, auditing, and maintaining IAM controls aligned with SOX, SOC 2, or equivalent frameworks required in a publicly traded landscape.
• Collaborative Influencer: Exceptional communication skills with a track record of driving cross-functional initiatives across HR, Security, Software Engineering, and Creative Production teams without direct authority along with the ability to translate technical concepts for both technical and non-technical audiences.
• Regular, on-site attendance at the workplace a minimum of 3 days per week is an essential function of the position. Selected candidate must be able to reliably meet this requirement.

NICE TO HAVE, BUT NOT A DEALBREAKER

• Experience with Privileged Access Management (PAM) solutions.
• Familiarity with AWS, Google Cloud Platform (GCP), or Microsoft Azure security services.
• Experience supporting compliance frameworks such as SOX, ISO 27001, SOC 2, or similar standards.
• Experience in media, entertainment, streaming, or technology organizations.
• Strong scripting and automation experience using tools such as PowerShell, Python, or similar languages.
• Familiarity with Infrastructure as Code (IaC) and DevOps practices.
• Experience leading large-scale IAM modernization or cloud transformation initiatives

#Ll-Hybrid

#Ll-CC1

Learn more about Fox Tech at https://tech.fox.com

#foxtech

We are an equal opportunity employer and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, gender identity, disability, protected veteran status, or any other characteristic protected by law. We will consider for employment qualified applicants with criminal histories consistent with applicable law.

Pursuant to state and local pay disclosure requirements, the pay rate/range for this role, with final offer amount dependent on education, skills, experience, and location is $160,000.00-267,000.00 annually. This role is also eligible for an annual discretionary bonus, various benefits, including medical/dental/vision, insurance, a 401(k) plan, paid time off, and other benefits in accordance with applicable plan documents. Benefits for Union represented employees will be in accordance with the applicable collective bargaining agreement.

View more detail about FOX Benefits.