Senior IAM Engineer
Senior IAM Engineer designing, implementing, and optimizing enterprise identity and access management solutions across on-prem, cloud, and SaaS. Lead federation, LCM, RBAC, PAM, and automation with Terraform while serving as the primary SME for security and engineering teams.
About the job
Responsibilities
- Design and implement enterprise-grade IAM solutions across on-prem, cloud, and SaaS environments.
- Architect and deliver end-to-end federation strategies using modern protocols (SAML, OIDC, OAuth 2.0, SCIM).
- Lead integration and optimization of key IAM platforms including SailPoint, Okta, PingOne, Microsoft Entra ID, and other tools.
- Drive Identity Lifecycle Management (LCM), Role-Based Access Control (RBAC), Privileged Access Management (PAM), and Just-In-Time access initiatives.
- Develop automation scripts and Infrastructure as Code (Terraform) to improve provisioning, governance, and operational efficiency.
- Serve as the primary IAM SME, providing technical guidance, troubleshooting complex issues, and mentoring other team members.
- Work closely with InfoSec, Compliance, and Engineering teams to meet audit, regulatory, and security requirements.
- Continuously improve IAM architecture, processes, and capabilities in a dynamic, fast-moving organization.
- Support cloud IAM strategies across AWS, GCP, and other platforms.
- Participate in on-call rotation and incident response related to identity systems.
Requirements
- 6+ years of hands-on experience in Identity and Access Management.
- Thorough understanding of IAM principles and modern security concepts, including Zero Trust, Least Privilege, Adaptive/Risk-Based Authentication, Attribute-Based Access Control (ABAC), Continuous Access Evaluation, and Identity Threat Detection and Response (ITDR).
- Strong expertise in IAM protocols and standards: SAML, OIDC, OAuth 2.0, SCIM, and other federation protocols.
- Hands-on experience with major IAM platforms, particularly SailPoint, Okta, PingOne, and Microsoft identity solutions.
- Strong working knowledge of cloud platforms (AWS and GCP), Cloud IAM services, Terraform, and CI/CD practices.
- Strong scripting and programming skills in Python and JavaScript/TypeScript, with extensive experience developing IAM workflows, automation, and integrations.
- Demonstrated ability to lead technical initiatives and drive projects from design through implementation.
- Ability to thrive in a fast-paced and ambiguous environment with extreme ownership and a collaborative no-ego mindset.
Skills
IAM, SAML, OIDC, Oauth 2.0, SCIM, Sailpoint, Okta, Pingone, Microsoft Entra Id, Terraform, AWS, GCP, Python, JavaScript, TypeScript
Similar jobs
Security Engineering jobs
ConductorOne
San Francisco, CASenior Security Engineer responsible for application, cloud, and platform security, with a focus on automating security workflows, threat modeling, secure development, and remediation. Requires hands-on SaaS security, cloud infrastructure, code review, and agent or automation experience.
Idme
McLean, VA
Leads cloud-native security operations, incident response, threat hunting, and forensic investigations while mentoring SOC analysts and improving detection processes. Requires 8+ years in information security, including hands-on cloud incident response and experience with Kubernetes, CI/CD, and advanced security tools.
BlackCloak
United States
Leads end-to-end response to sophisticated compromises, account takeovers, device threats, and related financial fraud for high-profile clients. Requires 5–8+ years of incident response or DFIR experience, broad device forensics expertise, strong client communication, and fraud-remediation experience.
Coalition Security
United StatesInvestigates cyber incidents and insurance claims, assesses security controls, and advises customers and security leaders on prioritized risk improvements. The role requires 2–4 years of security experience, strong network threat knowledge, and familiarity with major security and compliance frameworks.
Supernova Technology
Chicago, IL
The Senior Information Security Engineer will lead threat hunting, detection engineering, incident response, vulnerability management, and security-platform ownership across cloud and enterprise environments. The role requires 5+ years of security experience, strong attacker-TTP knowledge, and hands-on expertise with enterprise security technologies and automation.