IAM Security Engineer

Quick Facts

• Role: IAM Security Engineer

Description

You will design, deploy, and operate IAM controls across cloud and on-premises infrastructure. The role focuses on building secure identity, authentication, and authorization (including for AI agents and other non-human actors), enforcing least privilege, and simplifying identity lifecycle management.

Responsibilities

• Design, deploy, and operate IAM controls across cloud and on-premises infrastructure

• Implement secure identity, authentication, and authorization for AI agents and non-human actors

• Enforce least-privilege access using RBAC, ABAC, permission boundaries, service control policies, and just-in-time access

• Design secure integrations using SAML, OAuth 2.1, OpenID Connect, SCIM, and SPIFFE/SPIRE

• Automate identity lifecycle processes to grant, modify, and revoke access promptly

• Build identity guardrails using infrastructure-as-code and policy-as-code

• Create monitoring and alerting for anomalous authentication, privilege escalation, credential misuse, and unauthorized access

• Partner with Incident Response to investigate identity-related incidents and revoke compromised access

• Perform security reviews and threat modeling for new identity architectures and integrations

• Maintain IAM services with reliability, documentation, operational ownership, and on-call support

Requirements

• 5+ years of security engineering experience, including substantial IAM or identity-security experience

• Hands-on experience with Okta (including Okta for AI Agents) or SailPoint (or comparable technologies)

• Strong understanding of authentication, authorization, least privilege, zero trust, and identity lifecycle management

• Experience with SAML, OAuth 2.0/2.1, OpenID Connect, SCIM, and MFA

• Experience designing RBAC or ABAC authorization models

• Experience securing human and non-human identities (services, workloads, automation, CI/CD)

• Experience with agentic frameworks and MCP tool integration

• Experience implementing access reviews, privileged-access controls, and joiner/mover/leaver workflows

• Proficiency in Python, Go, Java, Ruby, or Bash

• Experience with infrastructure-as-code, policy-as-code, APIs, and security automation

• Bachelor’s degree in Computer Science, Information Security, or related field (or equivalent practical experience)

Benefits

• Participation in on-call rotations (teams may require availability during core and non-core business hours)

• Engineering Career Framework defining expectations for each career level