Senior IAM Engineer

Responsibilities

• Design and maintain automated onboarding, offboarding, and departmental transfer processes across ecosystem (WorkDay, Okta, Google Workspace, etc.).
• Build and optimize complex, multi-step automation flows; maintain and grow iPaaS (Workato) environment, treating "Integrations as a Product."
• Build resilient, scalable "recipes" that move data across the enterprise while maintaining strict IAM governance utilizing Okta Workflows.
• Implement and enforce Role-Based Access Control (RBAC) and Attribute-Based Access Control (ABAC) models.
• Manage SSO (SAML/OIDC) and MFA configurations.
• Ensure all access remains compliant with SOC2/HIPAA/GDPR standards through regular access reviews and audit logging.
• Develop custom scripts (Python, Perl, Ruby, etc.) and API integrations to bridge gaps where out-of-the-box connectors are unavailable.
• Secure the "Data Perimeter" for AI Infrastructure and Data Infrastructure; manage identity lifecycle for AI Agents and Service Accounts with least-privileged access.
• Collaborate with HR, Finance, Sales Ops and other teams to identify bottlenecks in the lead-to-revenue lifecycle and solve them through identity-driven automation.
• Collaborate with cross-functional teams to improve provisioning/deprovisioning processes.
• Integrate and manage IdPs within the IAM system.
• Handle and streamline access requests.
• Develop and implement IAM policies and procedures.
• Respond to ad-hoc requests.

Requirements

• 5–8+ years of experience in Identity and Access Management, including significant hands-on expertise with Okta (including OIE & OIG).
• Proficiency in Python, Ruby or other languages for automating repetitive tasks and handling large-scale data imports/exports.
• Automation mindset with proven ability to build event-driven flows, use custom API connectors, and handle error logic.
• Comfortable working with RESTful APIs, JSON, and Webhooks.
• Experience using Terraform or Github to manage identity providers (Infrastructure as Code).
• Understanding of Zero Trust architecture and Privileged Access Management (PAM) tools like CyberArk, BeyondTrust, etc.
• Strong understanding of identity lifecycle management, directory services, SSO, MFA, SCIM provisioning, and federation (SAML, OIDC, OAuth).
• Proven experience partnering with HR, Finance, Compliance, and other cross-functional teams to design and implement IAM & Enterprise solutions.
• Demonstrated ability to streamline and automate processes using automation.
• Experience with auditing, governance, and access certification processes.
• Excellent problem-solving, communication, and stakeholder management skills.

Nice-to-Haves

• Experience with Workato or similar Integration Orchestrator tools such as Zapier, Snaplogic or Merge.
• Experience with Okta Workflows.
• Certifications: Workato or Okta Certified Professional/Administrator/Consultant.
• Experience integrating IAM with HR systems (e.g., Workday).
• Knowledge of compliance requirements related to IAM.
• Background in cloud platforms (AWS, GCP, Azure) and IAM integrations.
• Experience with IAM tools such as Auth0, or Azure AD.

Compensation

• San Francisco Bay Area and New York City: $173,000–$210,000 USD
• All Other US Locations: $150,000–$180,000 USD
• Eligible for performance-based bonuses, equity awards, comprehensive benefits including health, dental, vision insurance, flexible time off, 401(k) match, disability and life insurance.