IAM Engineer

Job Title: IAM Engineer

Location: Irvine, CA - onsite

Duration: 6 months

PAM Lead

• Minimum 7+ years as an IAM Engineer with hands-on experience in privileged access technologies, with recent experience in agentic AI and securing OWASP to 10 NHI risks.
• StrongDM, CyberArk, Azure Key Vault, AWS Secrets and other privileged solution areas are a plus.
• Understanding of agentic AI systems, including binding AI agents to enterprise identities, least privilege enforcement, policy-based guardrails, Model Context Protocol (MCP), mutual TLS, OAuth2 token exchanges, and AI security tools.
• Familiarity with API gateways, service meshes (Kong, Istio, Apigee), and machine identity management (certificates, workload IDs, SPIFFE/SPIRE).
• Experience with IAM automation and administration using Terraform, Ansible, Cloud-init, Pulumi, Python, and Unix/Windows systems.
• Strong proficiency in authentication technologies: SSO, federation protocols (SAML, OIDC, OAuth2), API authentication, SCIM, RBAC, ABAC, JIT provisioning, and zero-trust principles.
• Expertise in privileged access management, including credential vaulting, session management, and PAM/PAW models.
• Skilled in directory services and multi-cloud identity governance (Azure AD, AWS AD, EntraID, Okta) and cloud IAM across AWS, Azure, and Google Cloud Platform.
• Awareness of open standards, threat modeling, insider threats, and continuous authentication.
• Serve as subject matter expert for AI identity security, privileged access, assigned product portfolios, engineering guardrails and preventative/detective controls
• Support IAM encryption, data privacy strategies, and secure integrations with external vendors and cloud providers
• Leading and ensuring success with cross-team stakeholder management through multiple formats (status updates, demos, training, and clarify requirements)
• Integrate with enterprise security tools and platforms; identify automation opportunities to improve security process accuracy and efficiency
• Respond to security incidents, perform root cause analysis, and provide on-call support for IAM platforms