Identity and Access Management (IAM) Engineer
Мэтч & Сопровод
Для мэтча с этой вакансией нужен Plus
Описание вакансии
TL;DR
Identity and Access Management (IAM) Engineer (Okta/Terraform): Own, implement, and continuously improve IAM tooling across the enterprise, including scalable access controls (RBAC/ABAC/JIT) and access integrations for M&A. Focus on designing and enforcing strong access controls that meet compliance and audit requirements (SOX, PCI-DSS, ISO 27001) without slowing down engineers and business teams.
Location: United States (Remote)
Salary: $96K–$192K base annually (equity, bonus, and other benefits available)
Company
is a crypto platform building secure, globally accessible financial infrastructure.
What you will do
- Own and improve IAM tooling such as Okta and ConductorOne across the enterprise.
- Drive adoption of scalable access controls including RBAC, ABAC, and JIT models.
- Partner with compliance and audit teams to align access with SOX, PCI-DSS, and ISO 27001.
- Collaborate on cross-functional security, engineering, and IT projects.
- Mentor junior engineers and promote IAM best practices.
- Support access integration for mergers & acquisitions by onboarding acquired identity systems.
Requirements
- 2+ years using Terraform to manage IAM infrastructure at scale.
- 2+ years managing an Okta tenant with 1,000+ users, including SSO, MFA, and policy control best practices.
- 2+ years writing scripts for operational tasks (e.g., generating reports or manipulating data from APIs).
- 2+ years working with IGA platforms such as SailPoint, ConductorOne, or Lumos.
- Experience designing and implementing ABAC or RBAC models and understanding of Zero Trust security architecture.
- Experience supporting M&A from an IAM perspective and familiarity with IAM project lifecycle (requirements, design, testing, change management).
Culture & Benefits
- US-only compensation package includes medical, dental, vision, and 401(k), plus bonus and equity.
- Ongoing improvements to secure, user-friendly access systems with a focus on creativity, speed, and precision.
- Collaboration across security, engineering, and IT with stakeholder-facing communication.
Hiring process
- Applications are accepted on an ongoing basis.
- May include job-related skills or work-style assessments as part of the hiring process.
Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →