Senior Security Engineer, Identity (IAM)

Location: New York, NY (HQ); hybrid workplace. Relocation expense coverage to NYC or SF may be available if needed.

Salary: $175.2K–$240.9K annually, plus equity.

Company

Ramp builds financial infrastructure for finance teams, automating payment authorization, risk flagging, spend categorization, and book closing for businesses.

What you will do

• Own Terraform configuration for Okta applications, authorization servers, authentication policies, groups, group rules, and SCIM provisioning.
• Design and operate custom authorization servers with audiences, scopes, claims, and access policies for internal services and AI agents.
• Implement delegated app-to-app and agent access through Cross App Access (XAA) and ID-JAG.
• Own the IGA platform, including entitlement catalogs, ownership, access requests, time-bound grants, and certifications.
• Build agentic workflows that create governed entitlements and open Terraform and IGA changes for review.
• Build identity graphs and an identity data lake to identify excessive access, automate remediation, and support an on-call agent answering Okta access questions.

Requirements

• 6+ years in identity engineering or IAM, including operational ownership of Okta or an equivalent identity provider at scale.
• Deep understanding of OAuth 2.0, OIDC, SAML, and SCIM, including custom authorization server handling of audiences, scopes, and claims.
• Working knowledge of XAA and ID-JAG, including token exchange and JWT bearer grants.
• Experience with ISPM or identity graph tooling and automated remediation of its findings.
• Experience owning an IGA platform or building an equivalent in-house.
• Terraform experience managing identity providers, including module design, state, and CI.
• Programming experience in Python or Go and experience building against platform APIs.

Culture & Benefits

• Full-time role with flexible PTO, centralized home-office equipment ordering, health and wellness stipend, intra-office travel budget, and weekly coffee stipend.
• United States benefits include medical, dental, and vision coverage, One Medical membership, 401(k) with employer match, fertility HRA, parental leave, pet insurance, and in-office meals and refreshments.
• Benefits are also available for employees in Canada and the United Kingdom.

Hiring process

• If referred, contact the referring person so they can apply on your behalf.
• Ramp considers qualified applicants with arrest and conviction records under the San Francisco Fair Chance Ordinance.
• Ramp only contacts candidates through official Ramp.com email addresses and does not request payment or sensitive personal information during hiring.