IAM Engineer

IAM Engineer

The Identity & Access Management Engineer will provide Identity and Access Management consulting and engineering services supporting customer identity platform configuration, integration, migration, and authentication modernization initiatives.

Responsibilities:

• IDP Platform Administration & Configuration
• Authentication Modernization & Application Migration
• Application Team Enablement & Technical Support
• Security, Compliance & Identity Operations
• Tooling, Automation & Continuous Improvement

Qualifications:

• Required:
• 3+ years of experience in Identity and Access Management, IT security, or a closely related technical discipline with hands-on platform administration responsibilities.
• Demonstrated, hands-on experience administering customer IDP's in a production environment: application integrations, sign-on policies, MFA, Universal Directory, and Lifecycle Management.
• Working knowledge of identity protocols and standards: OAuth 2.0, OpenID Connect (OIDC), SAML 2.0, and SCIM 2.0 — able to read and interpret protocol flows, tokens, and assertions.
• Experience troubleshooting authentication and provisioning issues end-to-end using system logs, browser developer tools, and HAR file analysis.
• Ability to read and write code in at least one modern language (JavaScript/Node.js, Python, Java, or Go) sufficient to build integrations, automation scripts, and code samples.
• Comfortable working directly with application development teams in a consulting or enablement capacity — able to explain IAM concepts clearly to non-IAM engineers.
• Familiarity with private cloud and cloud platforms (AWS, Azure, or GCP) and how identity integrates with cloud-native services (e.g., API Gateway authorizers, managed identity, cloud IAM roles).
• Preferred:
• Certifications in customer identity platforms. (or willingness to obtain within 6 months of hire).
• Experience with workflows for no-code/low-code identity orchestration.
• Hands-on experience with FIDO2/WebAuthn or phishing resistant enrollments and policy configuration.
• Experience managing IDP configuration as code using Terraform or similar IaC tools.
• Familiarity with CIAM-specific patterns: progressive profiling, social login (Google, Apple, Facebook), consent and preference management, and customer-facing MFA enrollment UX.
• Exposure to SIEM integration for identity telemetry, and experience writing alert logic or dashboards for IAM signals.
• Understanding of Zero Trust principles and practical experience implementing device trust or continuous access evaluation policies.
• Bachelor's degree in Computer Science, Information Systems, Cybersecurity, or a related field; equivalent experience considered.