IAM Engineer

Responsibilities

• Own, implement, and continuously improve IAM tooling like Okta and ConductorOne across the enterprise.
• Drive adoption of scalable access controls including RBAC, ABAC, and JIT models.
• Partner with compliance and audit teams to ensure access aligns with frameworks like SOX, PCI-DSS, and ISO 27001.
• Collaborate on large, cross-functional projects across security, engineering and IT.
• Mentor junior engineers and promote IAM best practices across the organization.
• Support access integration for mergers & acquisitions - onboarding acquired companies and their identity systems into our access ecosystem.

Requirements

• 2+ years of experience using Terraform to manage IAM infrastructure at scale.
• 2+ years of experience managing an Okta tenant with 1,000+ users, including best practices for SSO, MFA, and policy control.
• 2+ years of experience writing scripts for common operational tasks such as generating reports or manipulating data from APIs.
• 2+ years working with IGA platforms such as SailPoint, ConductorOne, Lumos, etc.
• Strong analytical and troubleshooting skills; intellectually curious and detail-oriented.
• Able to thrive in a fast-paced environment, adapt to shifting priorities, and absorb new concepts quickly.
• Excellent written and verbal communication skills, especially when interfacing with stakeholders from technical and non-technical backgrounds.

Nice-to-Haves

• Experience supporting mergers & acquisitions (M&A) from an IAM perspective - integrating identity, access, and joiner/mover/leaver processes for acquired companies and their existing tooling.
• Experience with the full IAM project lifecycle: requirements, design, testing, and change management.
• Familiarity with compliance frameworks (e.g. SOX, PCI, ISO) and supporting access certification efforts.
• Experience designing and implementing ABAC or RBAC models.
• Understanding of Zero Trust security architecture.