Senior Identity & Access Management Engineer - Moveworks

Company Description Moveworks is the Agentic AI Assistant platform that empowers the entire workforce. Our platform enables employees to converse with all of their business systems through natural language to quickly find answers and automate tasks. Powered by the world's most advanced LLMs, our proprietary models, and a sophisticated Agentic AI platform, we're transforming how work gets done by allowing AI to take initiative, streamline complex workflows, and continuously learn and adapt. Moveworks is trusted by over 5.5 million employees at more than 350 of the world’s largest companies, including 10% of the Fortune 500, to automate everyday tasks and streamline business operations. Recognized on the Forbes Cloud 100 and AI 50 lists, Moveworks was also named one of Fast Company’s 2025 Most Innovative Companies and Inc’s Best in Business, in the Best in Innovation category. Moveworks was also recognized at Microsoft’s 2025 Partner of the Year and in 2024, received the AI Breakthrough Award. In December 2025, Moveworks was acquired by ServiceNow, marking a pivotal milestone in our journey to create a single front door to work for all business systems. By combining ServiceNow’s leading workflow automation with Moveworks’ Reasoning Engine and natural language capabilities, we deliver the AI platform for every person and every workflow. Built to go beyond basic summaries to deliver meaningful business impact. Together, our AI acts across enterprise systems to turn conversations into completed work. By joining our team, you’ll be at the forefront of the AI transformation, backed by the global scale of ServiceNow and the agility of a high‑growth company. We are looking for world‑class talent to help us extend agentic AI to every employee across every corner of the business. Job Description Do you care deeply about secure access at scale? Making sure the right people have the right access, exactly when they need it, without slowing teams down? Join Moveworks and help shape the future of our identity and access strategy. As a Senior Identity & Access Management Engineer, you’ll be a hands‑on technical developer, coding, designing, building, and scaling IAM solutions across cloud infrastructure, SaaS applications, and internal systems. You’ll own the development of IAM initiatives end‑to‑end, from untangling ambiguous access challenges to architecting secure, automated solutions and driving them into production. The Role In this role, you’ll develop robust access models across AWS, Azure, Kubernetes, and beyond; reduce privilege sprawl through thoughtful role design; and build strong observability through logging, metrics, and reporting in our SIEM. You’ll modernize access reviews to deliver real security impact with minimal friction, continuously de‑risk IAM threats, and partner closely with teams to drive adoption of secure‑by‑default patterns. Your work will directly protect Moveworks’ most critical systems while enabling our engineers to move fast, safely, and confidently. What You Get To Do In This Role Drive IAM application development: Code, design, and implement solutions with extensive knowledge in AWS, Azure, Teleport, and Terraform. Lead IAM projects end‑to‑end: Take ambiguous access problems, understand requirements, architect solutions, and own the rollout/operationalization. Develop secure access models: Continuously improve role design and access assignment patterns across AWS, Kubernetes, SaaS apps, and internal systems to reduce unnecessary privileges and create scalable safe‑baseline access. Operationalize logging and metrics: Ensure access changes are observable in SIEM and build repeatable reporting that surfaces risky access and drift. Lead user access reviews (UAR): Design and execute a UAR process/solution that meets compliance requirements while improving security signal and minimizing approver burden. Develop de‑risk technology: Identify high‑risk permissions and misuse paths, propose controls and mitigations, drive adoption with partner teams, and create continuous de‑risk solutions. Apply strong security judgment: Distinguish meaningful IAM risk from noise, gather context efficiently, and provide actionable mitigations. Document and standardize: Write procedures, runbooks, and automation to make access decisions consistent and scalable. Qualifications US citizenship preferred. Willingness to work onsite at our Mountain View or New York offices. 5+ years of experience in IAM, security engineering, or platform engineering with substantial IAM responsibilities. Strong grasp of IAM best practices and common failure modes. Practical experience in AWS, Azure, GCP IAM and partner environments; expertise in Teleport, Terraform, Kubernetes is a plus. Experience with Okta or similar SSO product (grouping, app assignments, lifecycle/provisioning). Threat‑aware thinking, spotting risky permissions and misuse paths. Automation‑first mindset using scripting languages and AI coding tools. Protocol fluency: OAuth, OIDC, SAML, SCIM. Collaboration skills with Engineering, IT, infrastructure, DevOps teams. BS+ in computer science or related field, or equivalent experience. Work Personas We approach our distributed world with flexibility and trust. Work personas (flexible, remote, office) are assigned to ServiceNow employees based on work nature and location. Learn more here. Eligibility may be determined by confirming distance from your residence to the nearest office. Equal Opportunity Employer ServiceNow is an equal‑opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, creed, religion, sex, sexual orientation, national origin or nationality, ancestry, age, disability, gender identity or expression, marital status, veteran status, or any other category protected by law. In addition, all qualified applicants with arrest or conviction records will be considered for employment in accordance with legal requirements. Accommodations We strive to create an accessible and inclusive experience for all candidates. If you require a reasonable accommodation to complete any part of the application process, or are unable to use this online application and need an alternative method to apply, please contact View email address on click.appcast.io for assistance. Export Control Regulations For positions requiring access to controlled technology subject to export control regulations, including the U.S. Export Administration Regulations (EAR), ServiceNow may be required to obtain export control approval from government authorities for certain individuals. All employment is contingent on ServiceNow obtaining any required export license or approval. #J-18808-Ljbffr ServiceNow