Staff Engineer, Identity & Access Management (IAM)

In This Role, You Will
- Assess current IAM state and revamp IAM strategy across products, platforms, and cloud/on-prem infrastructure and corporate applications.
- Drive IAM implementation as part of a larger zero-trust security strategy.
- Architect and design cloud-based identity governance, access management, and cloud directory solutions.
- Implement RBAC/ABAC IAM workflows for onboarding and ongoing identity lifecycle management.
- Advise IT, security, and development teams to integrate IAM into broader security architecture.
- Partner with Engineering and IT to ensure fine-tuned access privileges and appropriate risk management.
- Establish KPIs, KCIs, and KRIs to measure IAM control effectiveness and support continuous improvement.
- Design IAM solutions to meet regulatory standards (e.g., SOX, GxP).

The Experience You’ll Need
- Bachelor’s or Master’s in Computer Science, Information Security, or related field.
- 7+ years in Identity & Access Management and related information security domains.
- Proven track record leading large-scale IAM projects (cloud-first and hybrid).
- Expertise in one or more programming languages (e.g., Java, C++, Python).
- Expert experience with enterprise identity administration & governance solutions.
- Expert experience with Adaptive Authentication, OAuth, OpenID, SAML.
- Expert experience with Enterprise Active Directory and cloud IAM (e.g., Okta, AWS, Azure AD, Duo).
- Expert experience with privileged access management (e.g., Delinea, CyberArk).
- Knowledge of UNIX/Linux/macOS/Windows and database management systems.
- Strong communication/leadership; ability to elicit technology-agnostic requirements.
- Continuous improvement mindset; risk management experience.
- CISSP/OSCP/GWAPT highly desirable.

Working Location & Compensation
- Remote considered; regular on-site visits required.
- Estimated base salary: $180,600–$212,900; eligible for bonus, equity, and comprehensive benefits package.