Senior Identity & Access Management Engineer

Join our team as a Senior Identity & Access Management Engineer. In this role, you will design, operate, and improve enterprise identity services, focusing on authentication, federation, access management, and identity lifecycle processes. You will work on platform engineering, application onboarding, automation, troubleshooting, and support for business events such as mergers and acquisitions. You will report to the Engineering Manager, Enterprise Identity Services, and collaborate with security, infrastructure, application, and business teams to deliver identity solutions.

• Design and improve enterprise identity services across authentication, federation, access management, lifecycle, and governance.
• Build and operate identity platform services for workforce, cloud, and enterprise application access, and support identity integration work for mergers, acquisitions, and divestitures.
• Create reusable standards, patterns, automation, and runbooks for identity integrations and operations, and implement and support SSO, MFA, conditional access, federation, OAuth, OpenID Connect, SAML, SCIM, and directory integrations.

• Do you thrive in an environment where you can work on engaging and challenging projects? Do you have a start-up mentality? Every year,
• A minimum of 5 years of experience engineering identity and access management solutions across authentication, federation, access control, lifecycle management, access governance, or related identity domains
• Proven ability to work independently, prioritize effectively, and manage multiple engineering initiatives simultaneously
• Exceptional problem-solving and analytical skills with the ability to troubleshoot complex technical issues across distributed systems
• Excellent communication and collaboration abilities, including the ability to work effectively with technical teams, business stakeholders, and application owners
• Deep understanding of identity and authentication protocols such as SAML, OAuth, OpenID Connect, LDAP, Kerberos, and SCIM
• Demonstrable experience integrating, modernizing, or migrating IAM capabilities across enterprise environments, including public cloud and on-premises systems
• Working knowledge of MFA, conditional access, privileged access, identity lifecycle processes, access reviews, and least-privilege access models
• Proficiency in scripting, automation, or programming languages such as Python, PowerShell, JavaScript, or similar
• Strong knowledge of security standards, control frameworks, risk management practices, and identity security best practices
• Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related field, or equivalent experience
• Experience with enterprise identity platforms such as Okta, Microsoft Entra ID, Ping, SailPoint, Saviynt, CyberArk, or similar technologies
• Certification in relevant security, identity, or cloud technologies such as CISSP, SSCP, CCSP, Microsoft, Okta, AWS, or similar
• Master’s degree in a related field
• Knowledge of DevOps, infrastructure as code, CI/CD, API integrations, and platform engineering practices
• Experience with cloud services and infrastructure across AWS, Azure, Google Cloud, or hybrid enterprise environments
• Experience supporting identity-related work for mergers, acquisitions, divestitures, application rationalization, or enterprise transformation programs
• Experience leading technical projects, mentoring engineers, or influencing cross-functional technical direction