Cybersecurity Engineer (IAM)

Location: Austin, Texas, United States; hybrid with at least 3 days in the office. Travel: 5–10% of the time.

Salary: $112,100–$173,400 USD per year, with potential bonus and equity eligibility.

Company

hirify.global operates global payments technology connecting consumers, merchants, financial institutions, and governments across more than 200 countries and territories.

What you will do

• Operate and continuously improve IAM controls for human and non-human identities across the Pismo platform, AWS, and hybrid environments.
• Run access reviews and recertifications, monitor joiner/mover/leaver events, review permission changes, and maintain access evidence.
• Analyze excessive, unused, orphaned, privileged, just-in-time, and break-glass access and coordinate remediation.
• Maintain inventories and catalogues for service accounts, workload roles, API credentials, AI agent identities, roles, entitlements, and application access matrices.
• Build scripts and automations using identity and cloud APIs and SDKs; maintain Terraform-based IAM definitions through the review process.
• Support PCI DSS, ISO 27001, SOC 2, and hirify.global security assessments, track findings, report IAM metrics, and maintain runbooks and procedures.

Requirements

• 2+ years of relevant work experience and a Bachelor's degree, or 5+ years of relevant work experience. Master's graduates must have 2+ years of relevant experience to qualify at the Analyst (I5) level.
• Hands-on experience in identity and access management, cloud security, or security operations.
• Experience with an enterprise identity provider, preferably Okta or Microsoft Entra ID, including SSO using SAML/OIDC, MFA, groups, group rules, and SCIM lifecycle provisioning.
• Working knowledge of AWS IAM roles, policies, trust policies, and IAM Identity Center permission sets, including evaluating policy documents.
• Understanding of RBAC, ABAC, least privilege, separation of duties, just-in-time access, and break-glass access.
• Experience with access reviews or certifications and joiner/mover/leaver processes.
• Scripting in Python or an equivalent language, including REST API and SDK integrations.
• Ability to read and change Terraform and work with Git and pull requests; familiarity with Kubernetes RBAC and service accounts.
• Knowledge of access-control requirements in PCI DSS Requirements 7 and 8, ISO 27001, and NIST SP 800-53 AC controls; clear written communication for documentation and audit evidence.

Nice to have

• Exposure to Azure or GCP IAM.
• Relevant certifications such as Okta Certified Administrator, Microsoft SC-300, AWS Certified Solutions Architect – Associate or Security – Specialty, or CompTIA Security+.

Culture & Benefits

• Hybrid office-based work with at least 3 days in the office, confirmed by the Hiring Manager.
• Work hours vary according to department needs.
• Benefits may include medical, dental, vision, 401(k), FSA/HSA, life insurance, paid time off, and a wellness program.
• The position is performed in an office setting and requires regular in-person communication and standard computer and office-equipment use.