Staff IAM Engineer

About the role

The Staff IAM Engineer plays a crucial role in designing, building, and scaling CLEAR's core identity infrastructure. This includes managing Okta and SailPoint platforms, implementing robust access controls, and driving automation to streamline processes.

Responsibilities

• Lead the engineering, architecture, and scaling of core identity platforms, specifically Okta and SailPoint.
• Design and implement least-privilege access controls across AWS environments, FedRAMP boundaries, and corporate infrastructure.
• Drive automation across the IAM lifecycle by writing custom scripts and integrating APIs to eliminate manual toil.
• Leverage Infrastructure as Code (Terraform) to deploy and manage security configurations consistently.
• Take the technical lead on major IAM initiatives, navigating roadblocks and driving projects from design through deployment.
• Troubleshoot complex identity workflows, federation issues, and access anomalies.

Requirements

• Experience: 8+ years of hands-on experience in Identity and Access Management and Security Engineering.
• Core IAM Expertise: Deep administrative and architectural proficiency with Okta (SSO, lifecycle management, advanced workflows) and SailPoint (identity governance, access certifications).
• Cloud Security: Strong background securing AWS access (IAM policies, roles, SCPs, AWS IAM Identity Center).
• Automation & Scripting: Solid coding/scripting abilities (Python, Bash, etc.) to build automations and work with REST APIs.
• Infrastructure as Code: Hands-on experience with Terraform is a strong plus.
• Mindset: Relentless perseverance and a self-starter attitude. You push through obstacles, drive issues to resolution despite setbacks, and don't wait for instructions to find vulnerabilities or solve operational inefficiencies.

Qualifications

• BS in Computer Science or related field, or equivalent practical experience.
• CISSP, CISM, or GSEC certification preferred.

Skills

• Strong understanding of IAM concepts and principles.
• Experience with SSO technologies such as Okta and SailPoint.
• Proficiency in scripting languages like Python and Bash.
• Hands-on experience with Terraform for Infrastructure as Code.
• Experience with AWS IAM and FedRAMP compliance.

Benefits

At CLEAR, we provide a comprehensive benefits package including:

• Comprehensive healthcare plans
• Fertility and adoption/surrogacy support
• Flexible time off
• Annual wellness stipend
• Free OneMedical memberships for you and your dependents
• CLEAR Plus membership
• 401(k) retirement plan with employer match

Pay

The base salary range for this role is $200,000 - $240,000, depending on levels of skills and experience.

Schedule

Full-time position.