This role pays less than
98%
of similar roles. Most pay
$158,850–$233,575
— the shaded band above.
At the midpoint, this role pays about
$116k
versus about
$196k
for comparable roles.
Based on 240 similar postings.
Employer
About Braze
Braze is a leading cloud-based customer engagement platform that enables brands to foster human connection with consumers through interactive, real-time, cross-channel marketing.
Braze currently has
108 open roles
on FindRole.
Listed pay typically runs
$149,000–$234,000
across 107 roles with salary data.
Lead IAM Engineer serves as a senior individual contributor responsible for the technical direction and evolution of the enterprise identity and access management strategy. Working within the Information Systems, Security, Engineering, Financial, and People Systems teams, this role focuses on building a secure, scalable, and automated identity ecosystem centered on Okta. The position involves architecting lifecycle automation, improving onboarding and offboarding reliability, and managing access governance for employees, contractors, and partners. Key responsibilities include developing infrastructure as code, integrating systems like Workday, Google Workspace, Slack, and GitHub, and implementing protocols such as SAML, OIDC, OAuth, and SCIM. The role requires proficiency in Python, PowerShell, and Terraform to automate identity configuration changes while ensuring compliance with SOX controls. This position solves the challenge of reducing manual administration through automated workflows and robust engineering practices.
Own the technical roadmap and architecture for enterprise Identity & Access Management using Okta as the core platform.
Architect and improve Okta capabilities including SSO, authentication, lifecycle automation, and identity governance.
Design automated onboarding, role-change, and offboarding processes for employees, contractors, and partners.
Build and maintain integrations between Okta and enterprise systems like Workday, Google Workspace, and Slack.
Drive identity automation using Okta Workflows, APIs, scripting, and infrastructure as code tools like Terraform.
Lead identity governance initiatives including access reviews, role-based access controls, and least-privilege management.
Implement authentication and provisioning solutions using standards such as SAML, OIDC, OAuth, and SCIM.
Serve as a senior escalation point for complex identity issues and lead root cause analysis investigations.
What we're looking for
Deep hands-on expertise with Okta in a complex enterprise environment including SSO, Lifecycle Management, Authentication, MFA, Workflows, and Identity Governance.
Advanced understanding of SAML, OIDC, OAuth 2.0, SCIM, federation, provisioning, authentication, and authorization.
Experience automating employee onboarding, role changes, and offboarding using an HRIS such as Workday.
Strong experience with identity governance including access reviews, entitlement management, access requests, RBAC, and least privilege.
Strong scripting and automation skills using Python, PowerShell, or similar languages.
Strong API integration experience to connect identity platforms with broader enterprise systems.
Experience with Terraform or another infrastructure-as-code framework.
Experience supporting IAM controls in a SOX-regulated or similarly controlled environment.
Okta certifications such as Administrator, Consultant, Developer, or Identity Governance (preferred).
Experience managing Okta configuration through Terraform or similar tooling (preferred).
Experience using Git-based workflows or CI/CD practices to manage identity or infrastructure changes (preferred).
Familiarity with adjacent enterprise platforms like Google Workspace, Slack, GitHub, Atlassian, Iru, Kandji, Jamf, Zscaler, or 1Password (preferred).
Experience with partner, reseller, B2B, or external identity architectures (preferred).
Experience managing service accounts, machine identities, workload identities, or other non-human access (preferred).
Experience automating audit evidence or identity governance controls (preferred).
Identity and Access Management
Microsoft Entra ID
AWS
Active Directory
Zero Trust
PAM
PKI
SAML
OAuth
MFA
ADFS
MIM
LDAP
Kerberos
DNS
Certificate Services
Access Governance