Infra Application Engineer - Identity

Identity Platform Engineer

As an Identity Platform Engineer, you will lead the architecture and engineering of our global identity fabric. Your primary objective is to build a high-performance, invisible identity infrastructure that enables seamless access for a number of users and non-human identities without manual intervention. You will ensure that identity is never a bottleneck for engineering velocity but a high-availability utility that supports our digital transformation goals.

We are an Infrastructure team dedicated to building resilient, distributed identity services. We partner with Security, DevOps, Data, and Product teams to abstract away the complexity of access management. We provide "paved-road" automation patterns that make secure access effortless for developers and invisible to the end user.

Responsibilities

• Platform-Orchestration: Architect a unified, API-driven control plane that orchestrates identity lifecycles across a fragmented ecosystem of SaaS, Cloud (AWS, OCI), and data warehouses (Snowflake).
• Infrastructure-as-Code (IaC) Engineering: Designing and implementing "Governance Wrappers" for cloud provisioning, ensuring resources deployed with Terraform or CloudFormation integrate seamlessly into lifecycle management systems.
• Distributed-Systems Reliability: Ensure 99.99% uptime for authentication and authorization services, implementing redundancy, failover patterns, and "Chaos Engineering" to test system resilience in production.
• NHI-Lifecycle Management: Designing the lifecycle framework for "NHI" service accounts, API keys, and AI agents ensures automated management of machine identities comparable to human user processes.
• Self-Service Enablement: Build and maintain an internal "Identity AppStore" and chat-driven request flows to reduce helpdesk volume and improve time-to-productivity for new hires.
• Data-Driven Optimization: Utilize usage-aware intelligence to independently reclaim unused licenses and right-size over-provisioned infrastructure roles, driving down Total Cost of Ownership (TCO).

What We're Looking For

• 5+ years of experience in Infrastructure, Platform, or Systems Engineering, with a proven track record of supporting high-throughput distributed systems in a large-scale product environment.
• Demonstrate expertise in SCIM 2.0, OIDC, SAML, and OAuth2 protocols. Showcase experience with modern identity platforms like Okta and Entra ID. Develop custom connectors using SDKs for specialized systems.
• Demonstrate expertise in managing infrastructure access in AWS, OCI, and Snowflake by automating cross-account trust and data-layer permissions effectively.
• Exhibit proficiency in Go, Python, or Java to create scalable automation services and apply Terraform to implement Identity-as-Code efficiently.
• Demonstrate expertise in the "Visibility-Before-Governance" principle, ensuring complete discovery of applications and identities prior to implementing automated workflows.
• Utilize agentic AI tools to address complex identity telemetry issues and automate the resolution of "permission drift" without requiring human involvement.

Our structured hybrid approach is centered around our offices and remote work environments. The work style of each role, Hybrid, Remote, or In-Person is indicated in the job description/posting.

As part of our award-winning workplace culture and commitment to delivering happiness, our benefits program offers a variety of perks, benefits, and options to help employees maintain their physical, mental, emotional, and financial health; support work-life balance; and contribute to their community in meaningful ways. Click Learn for more information.

Zoomies help people stay connected so they can get more done together. We set out to build the best collaboration platform for the enterprise, and today help people communicate better with products like Zoom Contact Center, Zoom Phone, Zoom Events, Zoom Apps, Zoom Rooms, and Zoom Webinars. We're problem-solvers, working at a fast pace to design solutions with our customers and users in mind. Find room to grow with opportunities to stretch your skills and advance your career in a collaborative, growth-focused environment.

At Zoom, we believe great work happens when people feel supported and empowered. We're committed to fair hiring practices that ensure every candidate is evaluated based on skills, experience, and potential. If you require an accommodation during the hiring process, let us know—we're here to support you at every step.

If you need assistance navigating the interview process due to a medical disability, please submit an Accommodations Request Form and someone from our team will reach out soon. This form is solely for applicants who require an accommodation due to a qualifying medical disability. Non-accommodation-related requests, such as application follow-ups or technical issues, will not be addressed.