IAM Automation Engineer

About the role

This role is based in San Francisco (with additional offices in Austin, New York, and Washington DC) and requires 5+ years of experience at a mid‑senior level. The position is a 12‑month contract, 100% onsite five days per week. The engineer will automate employee access to company applications using Okta, Terraform, and CI/CD to provision and de‑provision access when employees join, change roles, or leave.

Responsibilities

• Automate employee onboarding and offboarding
• Automatically provision and remove application access
• Manage Okta applications, groups, policies, and workflows
• Build Terraform modules for Okta
• Build CI/CD pipelines for identity/security changes
• Connect HR systems such as ADP with Okta
• Integrate Okta with SaaS applications
• Work with REST APIs
• Use Git, pull requests, and code reviews
• Add testing, approvals, logging, monitoring, and rollback
• Create documentation and operational runbooks
• Follow least-privilege and secrets-management practices

Requirements

• Okta hands‑on automation/integration
• Terraform
• CI/CD
• Git + Pull Requests + Code Reviews
• REST APIs
• IAM / Identity Lifecycle Management
• SaaS/Application Provisioning
• Python, TypeScript, Go, or similar scripting/programming
• Secrets Management & Least Privilege
• Ability to work onsite 5 days/week

Good-to-Have Skills

• Okta Workflows
• Okta Lifecycle Management
• Okta Identity Governance
• ADP / HRIS integrations
• SCIM
• SAML
• OAuth 2.0
• OpenID Connect (OIDC)
• AI coding assistants / agentic development tools
• High-growth technology company experience

Best Candidate Profile

A strong candidate should have actually built and automated Okta/IAM processes, not just administered Okta manually.