Skip to content
CrusoeCrusoeSan Francisco, CA

Senior Systems Engineer - IAM

Senior Systems Engineer manages Okta-based identity and access management, builds automation workflows with Workato and Lumos, implements RBAC and security policies, troubleshoots complex issues, and integrates applications. Requires 5+ years experience, Okta expertise, scripting skills, and bachelor's degree.

165k – 200k/yr
On-site5+ YOESecurity Engineering

About the role

What You’ll Be Working On

  • Managing advanced Okta functionality, including Device Trust, Okta Expression Language, and complex identity lifecycle management
  • Implementing and maintaining RBAC best practices and adaptive security policies to ensure global consistency in access governance
  • Building automated workflows using Workato, Okta Workflows, and Lumos to eliminate manual processes and improve operational efficiency
  • Planning and executing application integrations (SAML, OIDC, OAuth) and system changes with minimal disruption to business operations
  • Partnering with IAM leadership and integration engineers to connect business systems and support feature adoption across the IT ecosystem
  • Acting as a Tier 2 escalation point for complex access issues, supporting the Service Desk and broader infrastructure needs
  • Mentoring and training Service Desk team members, developing documentation and SOPs to enable independent execution of common IAM tasks
  • Participating in global team collaboration, including occasional off-hours syncs to support distributed operations

What You’ll Bring to the Team

  • 5+ years of experience in Systems Engineering or Identity & Access Management, with strong expertise in Okta administration and identity lifecycle management
  • Deep knowledge of Okta’s security capabilities; Okta Administrator or Consultant certifications are strongly preferred
  • Experience with Lumos or similar identity governance platforms
  • Proven ability to build automation workflows using tools such as Workato or Okta Workflows
  • Strong troubleshooting skills, including diagnosing authentication issues, API failures, and access-related incidents. Must be fluent in interacting with REST APIs and using scripting languages (Python, PowerShell, or similar) to troubleshoot failures or perform bulk operations
  • Solid understanding of RBAC, identity governance, PAM (Privileged Access Management) rollout and strategy, and zero-trust security principles
  • Strong communication skills with the ability to translate technical concepts into clear documentation and processes
  • Familiarity with Google Workspace Enterprise (organizational units, policies, and security configurations)
  • Bachelor’s or Master’s degree in Computer Science, Engineering, or equivalent professional experience

Bonus Points

  • Strong planning, communication, and change management skills
  • Experience working in fast-paced, global environments with distributed teams

Compensation

Compensation Range: up to $165,000 - $200,000 + Bonus. Restricted Stock Units are included in all offers. Compensation to be determined by the applicant's knowledge, education, and abilities, as well as internal equity and alignment with market data.

Skills

OktaRBACWorkatoOkta WorkflowsLumosSAMLOIDCOAuthREST APIsPythonPowerShellGoogle WorkspacePamIdentity Governance
Metropolis

Senior Security Engineer, Infrastructure & Network Security

MetropolisNew York, NY

Lead AWS and network security engineering for enterprise infrastructure, including firewalls, zero-trust, IAM, and cloud automation. Requires strong AWS, networking, and security engineering experience.

165k – 215k/yr
On-site5+ YOESecurity Engineering
Metropolis

Senior Security Engineer, Product & Application Security

MetropolisSeattle, WA

Senior Security Engineer leading application security reviews, DevSecOps initiatives, and secure architecture for cloud-native systems. Requires strong product security experience and scripting background.

165k – 215k/yr
On-site5+ YOESecurity Engineering
Betterment

Sr. Security Engineer, Corporate Information Security

BettermentNew York, NY

Senior security engineer leading workforce IAM, endpoint security, and AI tool governance for a fintech company. Hands-on IC role focused on Okta, SaaS security, and Zero Trust architecture in a hybrid NYC environment.

165k – 185k/yr
Hybrid6+ YOESecurity Engineering
Tatari

Senior Application Security Engineer

TatariLos Angeles, CA +2

First dedicated AppSec Engineer defining security architecture for a SaaS TV advertising platform. Build security tooling, own SAST/DAST/SCA, conduct threat modeling, and partner with engineering teams on secure development practices.

165k – 190k/yr
Hybrid5+ YOESecurity Engineering
Beacon AI

Senior Security Engineer

Beacon AISan Carlos, CA

As a Senior Security Engineer, you will design and implement secure architectures, protect sensitive data, and mitigate security risks for Beacon AI. You will lead incident response efforts and integrate security best practices into the SDLC.

165k – 240k/yr
Hybrid5+ YOESecurity Engineering