Identity & Access Management (IAM) Engineer

Job Description

TITLE: Identity & Access Management (IAM) Engineer

TEAM: Cybersecurity

LOCATION: San Francisco, CA

SCHEDULE: Hybrid (Target 3 days onsite per week)

WORK HOURS: Standard business hours (9:00 AM - 5:00 PM PT)

DURATION: 6+ Month Contract

START DATE: Mid September

ABOUT THIS ROLE:

Insight Global is seeking an Identity & Access Management Engineer to help mature the client's IAM program across both corporate systems and cloud infrastructure.

This role is heavily focused on access governance, least privilege architecture, entitlement management, privileged access, and modern cloud IAM controls. The team is specifically looking for an engineer with deep expertise in Okta and AWS IAM who can move beyond simple application assignments and build scalable authorization frameworks and access management processes. This is not an Active Directory-focused role. Candidates should come from modern cloud-first environments and have experience building IAM programs at scale.

DAY-TO-DAY

• Assess current IAM architecture and access risks

• Design least privilege access models

• Build and improve RBAC/ABAC frameworks

• Improve Okta authorization and entitlement design

• Reduce excessive administrative access across environments

• Improve AWS production access controls

• Secure GitHub and engineering platform access workflows

• Develop access review and certification programs

• Partner with Engineering, Platform, SRE, IT, and Security teams

Looking for:

• Okta expertise

• AWS IAM ownership

• Access Governance and Privileged Access Management experience

We are a company committed to creating diverse and inclusive environments where people can bring their full, authentic selves to work every day. We are an equal opportunity/affirmative action employer that believes everyone matters. Qualified candidates will receive consideration for employment regardless of their race, color, ethnicity, religion, sex (including pregnancy), sexual orientation, gender identity and expression, marital status, national origin, ancestry, genetic factors, age, disability, protected veteran status, military or uniformed service member status, or any other status or characteristic protected by applicable laws, regulations, and ordinances. If you need assistance and/or a reasonable accommodation due to a disability during the application or recruiting process, please send a request to View email address on click.appcast.io learn more about how we collect, keep, and process your private information, please review Insight Global's Workforce Privacy Policy:

Skills and Requirements

Required Skills & Experience

• 5-12 years of IAM, Cloud Security, or Security Engineering experience

• Advanced Okta expertise

• Deep AWS IAM experience

• Experience implementing RBAC and ABAC models

• Privileged Access Management (PAM) experience

• Experience with JIT/JEA access models

• Experience conducting access reviews and certifications

• Experience implementing least privilege access controls

• Experience reducing standing administrative access

• Experience supporting cloud-native environments

Tech Stack

• Okta

• AWS IAM

• GitHub

• Google Workspace

• RBAC

• ABAC

• PAM

• MFA

• SSO Nice to Have Skills & Experience

• Infrastructure as Code

• ZTNA platforms

• Terraform

• Python automation

• Identity Governance platforms