The Senior Identity and Access Management (IAM) and Platform Engineer plays a critical role in designing, implementing, and maintaining secure, scalable, and user-centric identity and access solutions across the organization's technology ecosystem. This role sits at the intersection of security, infrastructure, and developer experience, ensuring that access controls are robust while enabling engineering teams to move quickly and safely.
As a senior member of the engineering team, this role collaborates with the Leads on overall strategy and architecture of IAM and platform services, helping to define best practices, drive automation, and help with the integration of identity systems across cloud and on-prem environments. The role also supports broader platform engineering efforts by contributing to tooling, infrastructure-as-code, CI/CD pipelines, and service orchestration.
Your ImpactIdentity and Access Management (IAM)- Design and implementation of identity and access management solutions, including federated identity, SSO, RBAC, and lifecycle management.
- Collaborate on the integration of IAM with cloud platforms (e.g., AWS, Azure), SaaS applications, and internal services.
- Partner with security, DevOps, and application teams to enforce least privilege access, auditability, and compliance.
- Build and maintain platform tooling to manage secrets, certificates, authentication, and authorization flows.
- Automate IAM provisioning and de-provisioning using infrastructure-as-code and CI/CD pipelines.
- Participate in incident response and root cause analysis related to identity or platform infrastructure.
Platform Security Engineering- Collaborate with lead engineers on operational support of security tools (Email Security, SASE, EDR, SIEM, etc.)
- Collaborate with lead engineers to integrate security best practices into CI/CD pipelines and cloud infrastructure (Azure, Google Cloud Platform).
- Assist in securing container platforms (e.g., Kubernetes, Docker) and infrastructure as code (Terraform, CloudFormation, etc.).
- Participate in threat modeling and security reviews of new infrastructure components.
Security Operations & Monitoring- Stay current with industry trends and threat landscapes related to identity security and platform resilience.
- Collaborate with SOC and security analysts to investigate IAM-related incidents.
- Develop scripts and automation (e.g., Python, PowerShell) to enhance identity workflows and platform security.
- Monitor system logs, access events, and security alerts from IAM and cloud platforms.
- Maintain documentation for IAM processes, security controls, and supported systems.
Click here for benefit details related to this position.
6+ years related cybersecurity experience
Experience with SailPoint ISE, CyberArk, PingIdentity, Directory Services, EntraAD
Understanding of networking applications and multiple platforms
Demonstrated knowledge of security controls in relation to authentication, authorization, privilege access management, identity governance
Customer Service orientation
Understanding of security controls and how they are used to detect and respond
Ability to communicate technical issues to non-technical audiences across functions
Ability to assess/evaluate/prioritize risk
Ability to lead small (sometimes cross functional) teams/projects/programs
Demonstratable shell scripting abilities. Bash, python, Powershell, .Net, Java.
Required: Deep expertise in IAM technologies such as PingIdentity, Azure AD, Google Cloud Platform, or similar systems.
Strong understanding of authentication protocols (OAuth2, OIDC, SAML) and access control models (RBAC, ABAC, PBAC).
Proficiency in infrastructure-as-code (Terraform, Pulumi) and automation tooling.
Experience with CI/CD systems (e.g., GitHub Actions, GitLab CI, Jenkins) and secrets management tools (e.g., CyberArk, HashiCorp Vault, Azure Secrets Manager).
Solid background in cloud infrastructure (Azure, or Google Cloud Platform) and container orchestration (Kubernetes preferred).
Familiarity with regulatory and compliance requirements (e.g., SOX, PCI) and how they relate to IAM.
Experience prioritizing work and/or managing a queue
Education: Bachelor's degree in Information Technology/Information Security or equivalent experience
We will consider for employment all qualified applicants, including those with arrest records, conviction records, or other criminal histories, in a manner consistent with the requirements of any applicable state and local laws. Please see links: California Fair Chance Act, Los Angeles Fair Chance Initiative for Hiring Ordinance, Philadelphia Fair Chance Law, San Francisco Fair Chance Ordinance, Los Angeles County Fair Chance Ordinance
An equal opportunity employer, we do not discriminate in hiring or terms and conditions of employment because of an individual's race, color, religion, gender, gender identity, national origin, citizenship, age, disability, sexual orientation, marital status or any other protected category recognized by state, federal or local laws. We only hire individuals authorized for employment in the United States.
Never miss an opportunity! Create an alert based on the job you applied for.
