Staff Identity and Access Management Engineer
Tanium · Reston, VA · 1 mo ago
Hybrid$180k–$230k/yrFull-time
This position follows the Company’s hybrid schedule which currently requires employees to work in the office at one of the following locations a minimum of three days per week: Addison, TX; Bellevue, WA; Durham, NC; Emeryville, CA; or Reston, VA.
What You'll Do
- Design and manage IAM/IGA solutions across corporate infrastructure, including SSO, MFA, and PAM
- Build and maintain identity automation - onboarding, off-boarding, entitlements, and approval workflows - and troubleshoot issues surfaced by testing, user, or peer feedback
- Own the identity lifecycle: monitor, document, and continuously improve it
- Partner with GRC to develop and maintain IAM/IGA policies and standards that satisfy regulatory requirements (ISO 27001, FedRAMP, GDPR, HIPAA, etc.)
- Assess IAM systems regularly for security gaps and ensure ongoing patch and policy compliance
- Lead technical delivery on IAM/IGA projects - upgrades, migrations, integrations - and monitor system performance to identify optimizations
- Respond to and resolve IAM-related incidents
- Mentor engineers across IT and Security and track industry trends to keep our IAM/IGA approach current
- Maintain system design documentation
Requirements
- Bachelor's Degree in Computer Science, IT or other relevant degree or equivalent work experience
- 8–10 years in identity and access management, including IGA integrations with HRIS systems (Workday, SuccessFactors, or similar)
- Experience implementing, configuring, and managing an IGA product like Lumos, SailPoint, Saviynt, etc
- Hands-on expertise with Entra ID and Active Directory (preferably in a hybrid environment) with respect to identity and access
- Solid grasp of onboarding/off-boarding standards and lifecycle workflows
- Scripting proficiency (PowerShell)
- Working knowledge of security/compliance frameworks - ISO 27001, FedRAMP, GDPR, HIPAA
- Experience with SSO, MFA, and PAM tooling
- Strong problem-solving skills and the communication chops to work across IT, Security, and business teams
- Comfortable working independently and juggling multiple priorities in a fast-paced environment
Pay
The annual base salary range for this full-time position is $180,000 to $230,000. The actual annual base salary offered may be adjusted based on a variety of factors, including but not limited to, location, education, skills, training, and experience. In addition to an annual base salary, team members will receive equity awards and a generous benefits package.
Benefits
- Medical, dental and vision plan
- Family planning benefits
- Health savings account
- Flexible spending account
- Transportation savings account
- 401(k) retirement savings plan with company match
- Life, accident and disability coverage
- Business travel accident insurance
- Employee assistance programs
- Disability insurance
- Other well-being benefits
- 5 days of volunteer time off (VTO) annually