Security Engineer, IAM

Security Engineer, IAM The Security Engineer, IAM will design, implement, and manage Identity and Access Management systems across Talent Systems' global technology stack. This role sits within the Corporate IT team and is critical to ensuring that the right people have the right access to the right resources and that unauthorized access is proactively detected and prevented. You will work cross-functionally with Engineering, Product, Security, and HR teams to build scalable, secure, and compliance-aligned identity infrastructure that supports our global platforms and workforce. Required Skills: 4+ years of hands-on experience in IAM engineering, identity security, or a closely related field Proficiency with IAM protocols: SAML, OAuth 2.0, OpenID Connect, LDAP, SCIM Experience administering an enterprise identity provider (e.g., Okta, Azure AD / Entra ID, Google Workspace Identity, or equivalent) Solid understanding of RBAC, least-privilege, and zero-trust principles Familiarity with compliance frameworks including SOC 2 Type II, GDPR, and ISO 27001 Excellent written and verbal communication skills; able to explain complex identity concepts to non-technical stakeholders Preferred Skills: Experience with Privileged Access Management (PAM) tools (e.g., CyberArk, BeyondTrust, HashiCorp Vault) Demonstrated ability to script and automate IAM workflows using Python, PowerShell, Bash, or similar Hands-on experience with cloud IAM (AWS IAM, GCP IAM, or Azure RBAC) Background in SaaS or multi-tenant platform environments with complex user hierarchy management Exposure to entertainment, media, or marketplace platform security Experience working in a globally distributed team across multiple time zones IAM Architecture & Engineering: Design, deploy, and maintain IAM solutions including SSO, MFA, RBAC, and PAM across cloud and on-premise environments Architect and manage identity federation using protocols such as SAML, OAuth 2.0, and OpenID Connect Build and maintain lifecycle management processes for user provisioning, de-provisioning, and access reviews Integrate IAM systems with SaaS platforms (Google Workspace, Slack, GitHub, Zendesk, and others) and internal applications Develop and maintain automation for access request workflows and entitlement management Security Operations & Compliance: Conduct periodic access reviews and certification campaigns to ensure least-privilege principles are enforced Monitor IAM systems for anomalous activity, access violations, and policy drift; respond to and remediate incidents Support audit and compliance activities related to SOC 2, PCI-DSS, GDPR, and other applicable frameworks Define and enforce IAM policies, standards, and procedures in alignment with industry best practices Collaborate with the Information Security Office to evaluate and close identity-related vulnerabilities Cross-Functional Collaboration: Partner with Engineering and DevOps teams to embed IAM controls into CI/CD pipelines and cloud infrastructure Work with IT Team to align identity processes with endpoint and network security policies Support onboarding, offboarding, and role-change workflows in coordination with People Operations Participate in cross-functional planning to surface IAM-related risks, roadmap items, and quarterly priorities Talent Systems, LLC