Staff Engineer, Identity & Access Management (IAM)

About the role

Your work will change lives. Including your own. In this role, you will assess our current state of IAM and revamp our IAM strategy across our products, platforms, cloud/on-premise infrastructure and corporate applications to accelerate key business outcomes. Drive IAM implementation as part of our larger zero-trust security strategy. Architect and design cloud-based identity governance, access management and cloud directory solutions. Implement RBAC/ABAC based IAM workflows for onboarding and ongoing identity lifecycle management. Act as a key technical and strategic advisor for cross-functional teams including IT, security, and development to ensure that IAM principles are integrated into broader security architecture. Partner with Engineering and IT teams to ensure our products and applications are developed and implemented with fine-tuned access privileges and are appropriately risk.

Responsibilities

• Establish well-defined KPIs, KCIs, and KRIs that provide visibility into IAM control effectiveness and support continuous improvement.
• Ensure regulatory compliance by partnering with other teams to design IAM solutions that meet standards for SOX, GxP, etc.

Requirements

• Bachelor's or Master's degree in Computer Science, Information Security, or a related field.
• Minimum of 7 years of experience in Identity & Access Management and other information security related domains.
• Deep understanding of security principles and proven track record of successfully leading large-scale IAM projects from strategy to execution, particularly within cloud-first and hybrid environments.
• Expertise in one or more programming languages (e.g., Java, C++, Python) as they relate to IAM products.
• Expert level experience in one or more of the leading Enterprise Identity Administration & Governance solutions.
• Expert level experience in Adaptive Authentication, OAuth, OpenID, SAML etc.
• Expert level experience with the identity stack like Enterprise Active Directory as well as experience working with IAM products in the cloud like Okta, AWS, Azure AD, Duo or equivalent.
• Expert level experience with privileged access management solutions (e.g., Delinea, CyberArk).
• Knowledge of operating systems (UNIX/Linux, macOS, Windows) and of database management systems.
• Excellent communication and leadership skills, capable of driving security initiatives and influencing change across multiple teams and disciplines.
• Experience with risk management, ensuring that IAM solutions are aligned with organizational risk tolerance and compliance requirements.

Qualifications

• Relevant security certifications (e.g., CISSP, OSCP, GWAPT) are highly desirable.

Skills

• Identity & Access Management (IAM)
• Zero-trust security
• Cloud-based identity governance
• Access management
• Cloud directory solutions
• RBAC/ABAC based IAM workflows
• Onboarding and ongoing identity lifecycle management
• Strategic advisor
• Technical advisor
• Collaboration with cross-functional teams
• Engineering and IT teams
• Regulatory compliance
• Adaptive Authentication
• OAuth, OpenID, SAML
• Enterprise Active Directory
• Privileged access management solutions
• Operating systems (UNIX/Linux, macOS, Windows)
• Database management systems
• Risk management
• Security principles
• Programming languages (Java, C++, Python)
• Enterprise Identity Administration & Governance solutions
• Adaptive Authentication, OAuth, OpenID, SAML
• Enterprise Active Directory
• Privileged access management solutions
• Operating systems (UNIX/Linux, macOS, Windows)
• Database management systems
• Risk management
• Security principles
• Programming languages (Java, C++, Python)
• Enterprise Identity Administration & Governance solutions
• Adaptive Authentication, OAuth, OpenID, SAML
• Enterprise Active Directory
• Privileged access management solutions
• Operating systems (UNIX/Linux, macOS, Windows)
• Database management systems
• Risk management
• Security principles
• Programming languages (Java, C++, Python)
• Enterprise Identity Administration & Governance solutions
• Adaptive Authentication, OAuth, OpenID, SAML
• Enterprise Active Directory
• Privileged access management solutions
• Operating systems (UNIX/Linux, macOS, Windows)
• Database management systems
• Risk management
• Security principles
• Programming languages (Java, C++, Python)
• Enterprise Identity Administration & Governance solutions
• Adaptive Authentication, OAuth, OpenID, SAML
• Enterprise Active Directory
• Privileged access management solutions
• Operating systems (UNIX/Linux, macOS, Windows)
• Database management systems
• Risk management
• Security principles
• Programming languages (Java, C++, Python)
• Enterprise Identity Administration & Governance solutions
• Adaptive Authentication, OAuth, OpenID, SAML
• Enterprise Active Directory
• Privileged access management solutions
• Operating systems (UNIX/Linux, macOS, Windows)
• Database management systems
• Risk management
• Security principles
• Programming languages (Java, C++, Python)
• Enterprise Identity Administration & Governance solutions
• Adaptive Authentication, OAuth, OpenID, SAML
• Enterprise Active Directory
• Privileged access management solutions
• Operating systems (UNIX/Linux, macOS, Windows)
• Database management systems
• Risk management
• Security principles
• Programming languages (Java, C++, Python)
• Enterprise Identity Administration & Governance solutions
• Adaptive Authentication, OAuth, OpenID, SAML
• Enterprise Active Directory
• Privileged access management solutions
• Operating systems (UNIX/Linux, macOS, Windows)
• Database management systems
• Risk management
• Security principles
• Programming languages (Java, C++, Python)
• Enterprise Identity Administration & Governance solutions
• Adaptive Authentication, OAuth, OpenID, SAML
• Enterprise Active Directory
• Privileged access management solutions
• Operating systems (UNIX/Linux, macOS, Windows)
• Database management systems
• Risk management
• Security principles
• Programming languages (Java, C++, Python)
• Enterprise Identity Administration & Governance solutions
• Adaptive Authentication, OAuth, OpenID, SAML
• Enterprise Active Directory
• Privileged access management solutions
• Operating systems (UNIX/Linux, macOS, Windows)
• Database management systems
• Risk management
• Security principles
• Programming languages (Java, C++, Python)
• Enterprise Identity Administration & Governance solutions
• Adaptive Authentication, OAuth, OpenID, SAML
• Enterprise Active Directory
• Privileged access management solutions
• Operating systems (UNIX/Linux, macOS, Windows)
• Database management systems
• Risk management
• Security principles
• Programming languages (Java, C++, Python)
• Enterprise Identity Administration & Governance solutions
• Adaptive Authentication, OAuth, OpenID, SAML
• Enterprise Active Directory
• Privileged access management solutions
• Operating systems (UNIX/Linux, macOS, Windows)
• Database management systems
• Risk management
• Security principles
• Programming languages (Java, C++, Python)
• Enterprise Identity Administration & Governance solutions
• Adaptive Authentication, OAuth, OpenID, SAML
• Enterprise Active Directory
• Privileged access management solutions
• Operating systems (UNIX/Linux, macOS, Windows)
• Database management systems
• Risk management
• Security principles
• Programming languages (Java, C++, Python)
• Enterprise Identity Administration & Governance solutions
• Adaptive Authentication, OAuth, OpenID, SAML
• Enterprise Active Directory
• Privileged access management solutions
• Operating systems (UNIX/Linux, macOS, Windows)
• Database management systems
• Risk management
• Security principles
• Programming languages (Java, C++, Python)
• Enterprise Identity Administration & Governance solutions
• Adaptive Authentication, OAuth, OpenID, SAML
• Enterprise Active Directory
• Privileged access management solutions
• Operating systems (UNIX/Linux, macOS, Windows)
• Database management systems
• Risk management
• Security principles
• Programming languages (Java, C++, Python)
• Enterprise Identity Administration & Governance solutions
• Adaptive Authentication, OAuth, OpenID, SAML
• Enterprise Active Directory
• Privileged access management solutions
• Operating systems (UNIX/Linux, macOS, Windows)
• Database management systems
• Risk management
• Security principles
• Programming languages (Java, C++, Python)
• Enterprise Identity Administration & Governance solutions
• Adaptive Authentication, OAuth, OpenID, SAML
• Enterprise Active Directory
• Privileged access management solutions
• Operating systems (UNIX/Linux, macOS, Windows)
• Database management systems
• Risk management
• Security principles
• Programming languages (Java, C++, Python)
• Enterprise Identity Administration & Governance solutions
• Adaptive Authentication, OAuth, OpenID, SAML
• Enterprise Active Directory
• Privileged access management solutions
• Operating systems (UNIX/Linux, macOS, Windows)
• Database management systems
• Risk management
• Security principles
• Programming languages (Java, C++, Python)
• Enterprise Identity Administration & Governance solutions
• Adaptive Authentication, OAuth, OpenID, SAML
• Enterprise Active Directory
• Privileged access management solutions
• Operating systems (UNIX/Linux, macOS, Windows)
• Database management systems
• Risk management
• Security principles
• Programming languages (Java, C++, Python)
• Enterprise Identity Administration & Governance solutions
• Adaptive Authentication, OAuth, OpenID, SAML
• Enterprise Active Directory
• Privileged access management solutions
• Operating systems (UNIX/Linux, macOS, Windows)
• Database management systems
• Risk management
• Security principles
• Programming languages (Java, C++, Python)
• Enterprise Identity Administration & Governance solutions
• Adaptive Authentication, OAuth, OpenID, SAML
• Enterprise Active Directory