Senior IAM Engineer (AI)

Location: Hybrid work policy; specific office location is not stated.

Company

hirify.global provides a cloud data platform for open-source databases, search, streaming, and application infrastructure across a multi-cloud environment.

What you will do

• Own the employee joiner-mover-leaver lifecycle from the HRIS through Okta to downstream applications.
• Build and maintain identity automation with Okta Workflows, access requests, approvals, and self-service access processes.
• Define provisioning, scoping, review, and deprovisioning practices for service accounts, bots, and AI agents.
• Onboard applications to SSO and automated provisioning, including Okta groups, role mappings, SCIM provisioning, and push groups.
• Review integrations and access requests, assess permission scope and credential exposure, and provide identity evidence for PCI, SOC 2, and ISO 27001 audits.
• Partner with Engineering, IT, People Operations, and Security Operations on identity and access decisions.

Requirements

• Five or more years of experience in IAM, identity engineering, or a related security discipline.
• Deep identity provider expertise; Okta is preferred, while Entra ID and Ping are also considered.
• Automation proficiency in Python, JavaScript, or a similar language, plus the ability to use AI tooling to improve IAM capabilities and service delivery.
• End-to-end experience with technical employee onboarding, offboarding, access requests, approvals, and automated fulfillment.
• Hands-on IAM experience with AWS, GCP, or Azure, including roles, policies, permission boundaries, and identity federation.
• Experience managing identity resources with Infrastructure as Code, such as Terraform, and comfort defining ambiguous work with strong ownership.

Nice to have

• Advanced practical experience with Okta Universal Directory, profile mappings, group rules, Expression Language, application assignments, SSO, and lifecycle management.
• Experience with Okta Workflows or an equivalent identity automation platform driven by an HRIS.
• Broader security experience in areas such as security operations, vulnerability management, cloud security posture, or incident response.
• Experience governing machine identities, API tokens, bot users, and credentials for automation platforms or AI agents.
• Exposure to IGA products, GRC platforms, or access certification tooling.

Culture & Benefits

• Hybrid work policy with a global, multi-cloud team.
• Participation in hirify.global’s equity plan.
• Choice of work equipment.
• Professional Development Plan budget for learning.
• Global Employee Assistance Program and country-specific benefits, including parental, sick, and personal time off.

Hiring process

• Submit a resume for consideration.
• Interviews are conducted by video call or in person.