This role pays less than
91%
of similar roles. Most pay
$158,850–$233,575
— the shaded band above.
At the midpoint, this role pays about
$130k
versus about
$196k
for comparable roles.
Based on 240 similar postings.
Employer
About Braze
Braze is a leading cloud-based customer engagement platform that enables brands to foster human connection with consumers through interactive, real-time, cross-channel marketing.
Braze currently has
108 open roles
on FindRole.
Listed pay typically runs
$149,000–$234,000
across 107 roles with salary data.
Lead IAM Engineer will own the technical direction and evolution of the enterprise identity and access management strategy. In this senior individual contributor role, you will architect, build, and improve a secure, scalable, and automated identity ecosystem centered on Okta. You will manage lifecycle automation, access governance, and integration with systems like Workday, Google Workspace, Slack, and GitHub. The role involves modernizing configuration management through APIs, infrastructure as code using Terraform, and scripting in Python or PowerShell. You will implement authentication and provisioning solutions utilizing SAML, OIDC, OAuth, SCIM, and MFA. Key responsibilities include designing identity processes for employees and partners while ensuring compliance with SOX controls. This position requires deep expertise in Okta capabilities to solve complex security challenges regarding access requests, least-privilege controls, and automated validation within a high-growth environment.
Own the technical roadmap and architecture for enterprise Identity & Access Management using Okta as the core platform.
Architect and improve Okta capabilities including SSO, authentication, lifecycle automation, Workflows, and identity governance.
Design automated onboarding, role-change, and offboarding processes for employees, contractors, and partners.
Build and maintain integrations between Okta and enterprise systems like Workday, Google Workspace, Slack, and GitHub.
Drive identity automation using Okta Workflows, APIs, scripting, and infrastructure as code tools like Terraform.
Lead identity governance initiatives including access reviews, role-based access controls, and least-privilege management.
Implement authentication, federation, and provisioning solutions using SAML, OIDC, OAuth, SCIM, and MFA standards.
Serve as a senior escalation point for complex identity issues and lead root cause analysis for failed processes.
What we're looking for
Deep hands-on expertise with Okta in a complex enterprise environment including SSO, Lifecycle Management, Authentication, MFA, Workflows, and Identity Governance.
Advanced understanding of SAML, OIDC, OAuth 2.0, SCIM, federation, provisioning, authentication, and authorization.
Experience automating employee lifecycle processes using an HRIS such as Workday as the authoritative source.
Strong experience with identity governance including access reviews, entitlement management, and least privilege controls.
Strong scripting and automation skills using Python, PowerShell, or similar languages.
Strong API integration experience to connect identity platforms with broader enterprise systems.
Experience with Terraform or other infrastructure-as-code frameworks.
Experience supporting IAM controls in a SOX-regulated or similarly controlled environment.
Okta certifications such as Administrator, Consultant, Developer, or Identity Governance (preferred).
Experience managing Okta configuration through Terraform or Git-based workflows/CI/CD practices (preferred).
Familiarity with enterprise platforms like Google Workspace, Slack, GitHub, Atlassian, Zscaler, or 1Password (preferred).
Experience with partner, reseller, B2B, or non-human identity architectures (preferred).
Identity and Access Management
Microsoft Entra ID
AWS
Active Directory
Zero Trust
PAM
PKI
SAML
OAuth
MFA
ADFS
MIM
LDAP
Kerberos
DNS
Certificate Services
Access Governance