Identity & Access Management (IAM) Engineer

📋 Description

• Design and operate authentication, authorization, federation, SSO, MFA, RBAC/ABAC, PAM, conditional
• Engineer roles, groups, entitlements, and privilege assignments around least privilege and
• Automate identity provisioning, access reviews, privilege changes, revocation, and deprovisioning.
• Implement phishing-resistant MFA, cryptographically bound authentication, and strong identity
• Govern service accounts, machine and device identities, workloads, automated processes, APIs, and
• Implement short-lived workload and agent identities using federation, certificates, and modern

🎯 Requirements

• Hands-on experience engineering enterprise IAM systems and integrations.
• Strong knowledge of authentication, authorization, federation, identity lifecycle management
• Knowledge of phishing-resistant MFA, cryptographic authentication, identity proofing, federation
• Experience managing human and non-human identities, including service, machine, workload, or device
• Experience automating identity processes using APIs, scripting, or Infrastructure-as-Code.
• Understanding of PKI, secrets management, short-lived credentials, workload identity federation

🎁 Benefits

• Healthcare for family, including dental and vision
• Competitive compensation and 401K
• RSU grants for full-time employees
• ESPP program
• Flexible vacation policy
• Maternity & paternity leave