Identity & Access Management (IAM) Engineer

Role overview The IAM Engineer designs and runs identity and access controls for employees, services, devices, workloads, and automated agents. The work spans authentication, authorization, identity lifecycles, and privileged access, with a focus on limiting access to what is needed and responding quickly when identities are at risk.

Responsibilities - Build and operate capabilities such as single sign-on, federation, multifactor authentication, role or attribute based access, conditional access, and privileged access management. - Define roles, groups, entitlements, and permissions using least privilege and separation of duties. - Automate account provisioning, access reviews, permission changes, and offboarding. - Strengthen identity assurance with phishing resistant and cryptographically bound authentication. - Govern non-human identities and develop short-lived credentials for workloads and agents, reducing reliance on persistent secrets. - Work with engineering and security teams to improve access design, monitor identity posture, investigate threats, and revoke compromised access.

Requirements - Practical experience engineering enterprise identity systems and integrations. - Strong understanding of authentication, authorization, federation, identity lifecycle management, role design, and least privilege. - Experience managing human and non-human identities and automating identity processes with APIs, scripts, or infrastructure as code. - Knowledge of modern identity assurance, PKI, secrets management, short-lived credentials, and workload identity federation. - Familiarity with standards or technologies such as OIDC, OAuth, and SPIFFE/SPIRE. - Ability to reason about access across distributed systems and work with technical teams on secure designs.

Benefits and work setup The listed benefits include family health, dental, and vision coverage; retirement and employee stock programs; flexible vacation; parental and fertility support; learning funds; commuter benefits; and work equipment support. The listing gives a US base salary range of $155,000–$195,000; final pay may vary based on location, experience, and qualifications.