Senior IAM Engineer

Details

We are looking for a Senior Identity and Access Management (IAM) Engineer to design, implement, and mature an enterprise IAM ecosystem. This is a hands-on, high-impact role within the Information Security organization, owning complex IAM initiatives end-to-end — from strategy and architecture to implementation and optimization — while collaborating closely with Security, Infrastructure, Application, and Engineering teams.

Responsibilities

• Design and implement enterprise-grade IAM solutions across on-prem, cloud, and SaaS environments.
• Architect and deliver end-to-end federation strategies using modern protocols (SAML, OIDC, OAuth 2.0, SCIM).
• Lead integration and optimization of IAM platforms including SailPoint, Okta, PingOne, Microsoft Entra ID, and other tools.
• Drive Identity Lifecycle Management (LCM), Role-Based Access Control (RBAC), Privileged Access Management (PAM), and Just-In-Time access initiatives.
• Develop automation scripts and Infrastructure as Code (Terraform) to improve provisioning, governance, and operational efficiency.
• Serve as the primary IAM subject-matter expert (SME): provide technical guidance, troubleshoot complex issues, and mentor other team members.
• Work closely with InfoSec, Compliance, and Engineering teams to meet audit, regulatory, and security requirements.
• Continuously improve IAM architecture, processes, and capabilities in a fast-moving organization.
• Support cloud IAM strategies across AWS, GCP, and other platforms.
• Participate in on-call rotation and incident response related to identity systems.

Requirements

• 6+ years of hands-on experience in Identity and Access Management.
• Thorough understanding of IAM principles and modern security concepts, including Zero Trust, Least Privilege, Adaptive/Risk-Based Authentication, Attribute-Based Access Control (ABAC), Continuous Access Evaluation, and Identity Threat Detection and Response (ITDR).
• Strong expertise in IAM protocols and standards: SAML, OIDC, OAuth 2.0, SCIM, and other federation protocols.
• Proven experience architecting and implementing end-to-end federation solutions.
• Hands-on experience with major IAM platforms, particularly SailPoint, Okta, PingOne, and Microsoft identity solutions (Microsoft Entra ID).
• Strong working knowledge of cloud platforms (AWS and GCP), Cloud IAM services, Terraform, and CI/CD practices.
• Strong scripting and programming skills in Python and JavaScript/TypeScript, with extensive experience developing IAM workflows, automation, and integrations.
• Demonstrated ability to lead technical initiatives and drive projects from design through implementation.
• Ability to thrive in a fast-paced and ambiguous environment, take extreme ownership, and lead with a collaborative, no-ego mindset.

Compensation and Benefits

• Base salary range: $100,000 - $258,000 USD.
• Total rewards package includes equity, comprehensive medical, vision, and dental coverage, access to a 401(k) retirement plan, short & long-term disability insurance, life insurance, and other discounts and perks.