Sr. Staff IAM Engineer

📋 Description

• Own target-state identity architecture for workforce, non-employee, external, non-human, and AI
• Lead end-to-end customer identity architecture incl. MFA, phishing-resistant auth.
• Define interfaces/federation between customer/patient and workforce identity.
• Consolidate app authentication to a unified workforce identity provider.
• Design SSO, SCIM provisioning, deprovisioning, lifecycle patterns.
• Define federation strategies across Okta, Entra ID, AWS, GCP.

🎯 Requirements

• 8+ years in identity/security engineering or related field.
• Hands-on CIAM with Auth0 or equivalent platform.
• Expertise: SAML, OIDC, OAuth 2.0, SCIM, WebAuthn, FIDO2.
• Experience with Okta or similar IDP, migrations from legacy auth.
• Proven ability to influence engineering without formal authority.
• Strong written comms: architecture decisions, standards.

🎁 Benefits

• Medical, dental, vision insurance.
• FSA/HSA options.
• Flexible PTO and 401(k) with match.
• Life and pet insurance.
• Autonomy-focused culture with ownership.