Senior Security Engineer I, IAM

What you'll do

• Build identity and access management disciplines across internal applications, Okta, Google Workspace, and AWS systems.
• Design least privilege access models and enterprise identity architectures.
• Develop identity threat detection and response capabilities to protect workforce and customer identities.
• Manage identity lifecycle processes including role-based and attribute-based access controls.
• Partner with software engineering teams to review permission models and design secure authorization patterns.
• Analyze identity telemetry, detection logic, and high-risk configuration states for incident response.
• Automate identity workflows and platform integrations using production-quality code or queries.

What we're looking for

• At least 4 years of relevant experience in Identity engineering.
• Experience designing or implementing IAM controls for enterprise systems, cloud environments, SaaS platforms, and internal applications.
• Strong understanding of least privilege, RBAC, ABAC, privileged access patterns, identity lifecycle management, and access review processes.
• Hands-on experience with Okta, Google Workspace Identity, and Google Cloud permission models.
• Working knowledge of authentication and authorization protocols including SAML, OAuth, OIDC, SCIM, and LDAP.
• Experience partnering with software engineering teams to design secure authorization patterns and improve access controls in custom applications.
• Ability to analyze identity telemetry, detection logic, high-risk configurations, and incident response workflows.
• Strong written and verbal communication skills to explain technical risks and architecture tradeoffs to diverse audiences.