Staff IT Systems Engineer

Job Summary

We are seeking a Staff Engineer to join our Identity and Access Management (IAM) team. You will be responsible for designing, implementing, and maintaining enterprise-grade authentication and authorization systems that secure corporate user access across our organization. This role combines deep technical expertise in identity protocols with hands-on automation and infrastructure work.

Responsibilities

• Design, implement, and maintain Single Sign-On (SSO) solutions for enterprise applications
• Develop and optimize SAML and OIDC integrations across diverse application ecosystems
• Build and maintain automation pipelines using Python to streamline IAM operations
• Manage and administer Windows Active Directory environments, including user provisioning, group policies, and federation services
• Create and maintain shell scripts and automation tools for Linux-based identity infrastructure
• Collaborate with security teams to ensure compliance with authentication and authorization best practices
• Troubleshoot complex authentication flows and resolve integration issues across multiple platforms
• Mentor team members and provide technical leadership on IAM architecture decisions
• Document systems, processes, and runbooks for operational excellence
• Integrate with Google Workspace and other Google services for identity management workflows

Qualifications

• 7+ years of experience in software engineering, systems engineering, or a related technical role
• Expert-level knowledge of SSO protocols including SAML 2.0 and OpenID Connect (OIDC)
• Strong proficiency in Python for automation, scripting, and tool development
• Deep experience with Windows Active Directory, including ADFS, LDAP, Group Policy, and Azure AD integration
• Solid Linux administration skills with proficiency in Bash scripting
• Experience with identity providers (Okta, Ping Identity, CyberArk, Entra ID, Google Workspace, or similar)
• Understanding of OAuth 2.0 flows and token-based authentication
• Familiarity with certificate management and PKI infrastructure
• Must be local to SF bay area

Preferred Qualifications

• Experience with Google Cloud Platform and Google Workspace Admin SDK
• Knowledge of SCIM provisioning and directory synchronization
• Familiarity with infrastructure-as-code tools (Terraform, Ansible, or similar)
• Experience with containerization and orchestration (Docker, Kubernetes)
• Background in security compliance frameworks (SOC 2, ISO 27001, FedRAMP)
• Contributions to open-source identity projects