Senior Workforce IAM Engineer (AI Governance)

Location: Remote in the USA; employees near hirify.global offices may choose fully remote or hybrid work with Tuesdays and Wednesdays in the office. Occasional business travel is required.

Salary: $153,000–$166,000 annually, adjusted based on location, experience, and qualifications.

Company

hirify.global is a self-sustaining nonprofit focused on expanding educational and career opportunities.

What you will do

• Own the Governance and Compliance pillar of the Workforce Identity and Access Management team.
• Plan, configure, launch, monitor, and close access reviews, account reviews, and security attestations in Okta for human, service, and AI agent identities.
• Run annual user access reviews from scoping and reviewer assignment through remediation, closure, and auditor reporting.
• Define ownership, lifecycle states, reviewable access, and governance controls for AI agents and other non-human identities.
• Build and maintain identity integrations, automations, vaults, provisioning, offboarding, and access controls across AD, Entra ID, Okta, CyberArk, and 1Password.
• Measure controls against NIST and support audits, troubleshooting, incident response, and continuous improvement.

Requirements

• 5+ years of identity and access management and/or security engineering experience, including hands-on work with Active Directory, Entra ID, and Okta.
• Experience designing and running access reviews, certifications, or attestation campaigns at scale, including scoping, reviewer assignment, remediation, closure, and auditor evidence.
• Hands-on production experience with Okta, especially Okta Identity Governance and Okta Workflows.
• Experience with agentic AI governance, including owners, lifecycle states, and certifiable access for agents and workload identities.
• Working knowledge of NIST and similar policy and compliance frameworks, with the ability to translate guidance into practical controls.
• Knowledge of SAML, OIDC, OAuth 2.0, SCIM, role- and attribute-based access control, SSO, MFA, and least privilege.
• Secure-by-design mindset, attention to actual system state and traceable source data, and strong written communication.
• Ability to explain identity controls to business and end-user audiences.
• Authorization to work in the United States for any employer.
• Clear communication, curiosity about emerging technologies, independent learning, collaboration, empathy, and a data-informed approach to complex problems.

Nice to have

• Experience as an IT auditor or in a GRC function testing identity, provisioning, and access controls.
• Enterprise security certifications or recent coursework such as CISSP, CISA, CRISC, or Okta certifications.
• Working understanding of defense in depth and layered control implementation.

Culture & Benefits

• Mission-driven work at a self-sustaining nonprofit with a focus on educational and career opportunities.
• Remote work in the USA, with a hybrid option for employees near hirify.global offices.
• Comprehensive compensation and benefits with salary adjustments based on location and market data.
• Collaborative, empathetic culture with feedback, learning, continuous improvement, and shared accountability.
• Participation in an on-call rotation and occasional in-person business travel are required.

Hiring process

• Applications are reviewed immediately and remain open for at least five business days, until the position is filled.
• Typical stages include application and resume review, recruiter screen, hiring manager interview, performance exercise such as live coding, panel interview, leadership conversation, and reference checks.