Senior Security IAM Engineer

Role overview Design, build, and operate identity and access management systems across cloud platforms, SaaS applications, and remote access environments. This hands-on security engineering role focuses on reducing identity risk through least-privilege design, infrastructure-as-code automation, and reliable access workflows. You’ll work with engineering, infrastructure, and security teams to make access safer, more consistent, and easier to audit.

Responsibilities - Evolve identity architecture across cloud, SaaS, AI tooling, and remote access systems. - Develop federated identity, workforce access, role-based and attribute-based controls, and Zero Trust patterns. - Improve least-privilege access, segmentation, cross-account access, and governance of service accounts and workload identities. - Build and maintain reusable Terraform modules and workflows for roles, policies, groups, application assignments, and permission sets. - Automate identity lifecycle tasks, access requests, approvals, entitlement changes, reviews, and reporting. - Use code review and CI/CD practices to make access changes repeatable, traceable, and safe to roll out. - Partner with technical teams to reduce excessive permissions and improve access visibility and auditability.

Requirements - The available source describes a senior, hands-on IAM security engineering role, but does not provide a complete list of required qualifications. It emphasizes practical experience designing and automating identity and access controls across cloud and SaaS environments. - Relevant technical areas named in the role include AWS, Google Cloud, Okta, Terraform, and identity federation standards such as SAML, OIDC, OAuth, and SCIM. - The work calls for engineering judgment around least privilege, access risk, automation, and safe production changes.