Staff Engineer, Identity & Access Management

Responsibilities

• Assess and revamp IAM strategy across products, platforms, cloud and on-premises infrastructure, and corporate applications.
• Drive IAM implementation as part of Recursion’s broader zero-trust security strategy.
• Architect and design cloud-based identity governance, access-management, and cloud-directory solutions.
• Implement RBAC/ABAC workflows for onboarding and ongoing identity lifecycle management.
• Advise IT, security, development, and cross-functional teams on integrating IAM principles into broader security architecture.
• Partner with engineering and IT teams to enforce appropriately limited access privileges in products and applications.
• Establish KPIs, KCIs, and KRIs to measure IAM control effectiveness and support continuous improvement.
• Design IAM solutions that satisfy regulatory and compliance requirements, including SOX and GxP.
• Lead large-scale IAM initiatives from strategy through execution and influence change across teams.

Requirements

• Bachelor’s or master’s degree in computer science, information security, or a related field.
• At least 7 years of experience in identity and access management and related information-security domains.
• Deep understanding of security principles and experience leading large-scale IAM projects in cloud-first and hybrid environments.
• Expertise in one or more programming languages, such as Java, C++, or Python, as applied to IAM products.
• Expert-level experience with enterprise identity administration and governance solutions.
• Expert-level experience with adaptive authentication, OAuth, OpenID, and SAML.
• Expert-level experience with Enterprise Active Directory and cloud IAM products such as Okta, AWS, Azure AD, and Duo or equivalent.
• Expert-level experience with privileged access management solutions such as Delinea and CyberArk.
• Knowledge of UNIX/Linux, macOS, Windows, and database management systems.
• Ability to act as a business systems analyst and elicit technology-agnostic requirements and use cases.
• Experience with risk management and aligning IAM solutions with organizational risk tolerance and compliance requirements.
• Strong communication, leadership, collaboration, and cross-functional influence skills.
• Relevant security certifications such as CISSP, OSCP, or GWAPT are highly desirable.

Benefits

• Estimated annual base salary is $180,600–$212,900, plus annual bonus eligibility, equity compensation, and a comprehensive benefits package.
• Salt Lake City is the preferred home base, but remote work may be considered with regular onsite visits for routine work and departmental events.