Назад
Company hidden
7 дней назад

Identity & Access Management (IAM) Engineer

155 000 - 195 000$
Формат работы
remote (только USA)
Тип работы
fulltime
Грейд
senior
Английский
b2
Страна
US
Вакансия из списка Hirify.GlobalВакансия из Hirify Global, списка международных tech-компаний
Для мэтча и отклика нужен Plus

Мэтч & Сопровод

Для мэтча с этой вакансией нужен Plus

Описание вакансии

Текст:
/
TL;DR
Identity & Access Management (IAM) Engineer (Cloud Security): Designing and operating identity and access capabilities for human users, workloads, devices, services, and AI agents with an accent on least privilege, strong authentication, and automated lifecycle management. Focus on implementing short-lived workload identities, securing distributed systems, and rapidly revoking compromised access.

Location: Remote - US

Base pay: $155,000–$195,000 annually

Company

hirify.global provides open cloud object storage for businesses, developers, IT professionals, and individuals, serving over 500,000 customers in more than 175 countries.

What you will do

  • Design and operate authentication, authorization, federation, SSO, MFA, RBAC/ABAC, PAM, conditional access, policy-based authorization, just-in-time access, continuous verification, and privileged-access capabilities.
  • Engineer roles, groups, entitlements, and privilege assignments around least privilege and separation of duties.
  • Automate identity provisioning, access reviews, privilege changes, revocation, and deprovisioning.
  • Implement phishing-resistant MFA, cryptographically bound authentication, and strong identity assurance.
  • Govern human and non-human identities, including service accounts, machines, devices, workloads, APIs, and AI agents.
  • Partner with architects, engineers, resource owners, and Security Operations to secure access, monitor identity posture, investigate threats, and revoke compromised access.

Requirements

  • Hands-on experience engineering enterprise IAM systems and integrations.
  • Strong knowledge of authentication, authorization, federation, identity lifecycle management, role and group design, separation of duties, and least privilege.
  • Knowledge of phishing-resistant MFA, cryptographic authentication, identity proofing, federation, and modern identity assurance practices.
  • Experience managing human and non-human identities, including service, machine, workload, or device identities.
  • Experience automating identity processes using APIs, scripting, or Infrastructure-as-Code.
  • Understanding of PKI, secrets management, short-lived credentials, workload identity federation, OIDC, OAuth, and SPIFFE/SPIRE.
  • Ability to reason about identity and authorization across distributed systems and collaborate with architects and engineers on secure access design.

Culture & Benefits

  • Healthcare for family, including dental and vision.
  • Competitive compensation, 401(k), RSU grants for full-time employees, and an ESPP program.
  • Flexible vacation policy, maternity and paternity leave, and childcare and fertility support.
  • MacBook Pro for work, workstation personalization stipend, learning and development program, and commuter benefits.
  • Culture supporting healthy work-life balance and equal opportunity employment.

Будьте осторожны

Если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого. Это мошенники. Обязательно жмите «Пожаловаться» или пишите в поддержку. Подробнее в гайде →