# Senior Systems Engineer - IAM

**Company:** [Crusoe](https://hotfix.jobs/companies/crusoe)
**Location:** San Francisco, CA
**Role:** Security Engineering
**Salary:** $165k – $200k/yr
**Experience:** 5+ years
**Skills:** Okta, RBAC, Workato, Okta Workflows, Lumos, SAML, OIDC, OAuth, REST APIs, Python, PowerShell, Google Workspace, Pam, Identity Governance
**Posted:** 2026-04-20

> Senior Systems Engineer manages Okta-based identity and access management, builds automation workflows with Workato and Lumos, implements RBAC and security policies, troubleshoots complex issues, and integrates applications. Requires 5+ years experience, Okta expertise, scripting skills, and bachelor's degree.

## Job Description

## What You’ll Be Working On
- Managing advanced Okta functionality, including Device Trust, Okta Expression Language, and complex identity lifecycle management
- Implementing and maintaining RBAC best practices and adaptive security policies to ensure global consistency in access governance
- Building automated workflows using Workato, Okta Workflows, and Lumos to eliminate manual processes and improve operational efficiency
- Planning and executing application integrations (SAML, OIDC, OAuth) and system changes with minimal disruption to business operations
- Partnering with IAM leadership and integration engineers to connect business systems and support feature adoption across the IT ecosystem
- Acting as a Tier 2 escalation point for complex access issues, supporting the Service Desk and broader infrastructure needs
- Mentoring and training Service Desk team members, developing documentation and SOPs to enable independent execution of common IAM tasks
- Participating in global team collaboration, including occasional off-hours syncs to support distributed operations

## What You’ll Bring to the Team
- 5+ years of experience in Systems Engineering or Identity & Access Management, with strong expertise in Okta administration and identity lifecycle management
- Deep knowledge of Okta’s security capabilities; Okta Administrator or Consultant certifications are strongly preferred
- Experience with Lumos or similar identity governance platforms
- Proven ability to build automation workflows using tools such as Workato or Okta Workflows
- Strong troubleshooting skills, including diagnosing authentication issues, API failures, and access-related incidents. Must be fluent in interacting with REST APIs and using scripting languages (**Python**, **PowerShell**, or similar) to troubleshoot failures or perform bulk operations
- Solid understanding of **RBAC**, identity governance, **PAM** (Privileged Access Management) rollout and strategy, and zero-trust security principles
- Strong communication skills with the ability to translate technical concepts into clear documentation and processes
- Familiarity with **Google Workspace** Enterprise (organizational units, policies, and security configurations)
- Bachelor’s or Master’s degree in Computer Science, Engineering, or equivalent professional experience

## Bonus Points
- Strong planning, communication, and change management skills
- Experience working in fast-paced, global environments with distributed teams

## Compensation
**Compensation Range**: up to $165,000 - $200,000 + Bonus. **Restricted Stock Units** are included in all offers. Compensation to be determined by the applicant's knowledge, education, and abilities, as well as internal equity and alignment with market data.

## Similar roles

- [Senior Security Engineer, Infrastructure & Network Security](https://hotfix.jobs/jobs/e5adea70-2b49-4e0f-b3ed-805a64f22011) - Metropolis - New York, NY - $165k – $215k/yr
- [Senior Security Engineer, Product & Application Security](https://hotfix.jobs/jobs/071710bf-d299-4174-b809-71abdce26363) - Metropolis - Seattle, WA - $165k – $215k/yr
- [Sr. Security Engineer, Corporate Information Security](https://hotfix.jobs/jobs/9a9306b6-f0a5-4069-91b7-75229c3b670f) - Betterment - New York, NY - $165k – $185k/yr
- [Senior Application Security Engineer](https://hotfix.jobs/jobs/2c71d547-b042-48a2-8e4f-e3abc07b15f2) - Tatari - Los Angeles, CA - $165k – $190k/yr
- [Senior Security Engineer](https://hotfix.jobs/jobs/e2ba79d7-a44d-4a8c-9d19-e67b254e1c09) - Beacon AI - San Carlos, CA - $165k – $240k/yr

**Apply:** https://hotfix.jobs/jobs/a206b6b1-186b-4cb4-b5f6-238a8d26c915
**Canonical:** https://hotfix.jobs/jobs/a206b6b1-186b-4cb4-b5f6-238a8d26c915