Enterprise IAM Security Engineer

What you'll do

• Build and operate workforce authentication and authorization, including passwordless authentication, per-application policies, and non-human identities.
• Develop identity automation and first-party tooling; manage identity configuration as code through pull requests.
• Integrate identity telemetry with detection and response, support incident response, and establish secure-by-default identity standards.

What they ask for

• Enterprise-scale workforce identity platform experience with deep hands-on Okta engineering, including automation and API-driven integrations.
• Shipped an enterprise-scale Okta passkey rollout; knowledge of WebAuthn and FIDO2 adoption challenges.
• Identity infrastructure as code using Terraform or an equivalent IaC tool, with changes reviewed and shipped through pull requests.
• Software engineering ability in Python, Go, or TypeScript; experience with SSO, SAML, OIDC, SCIM provisioning, conditional access, and least privilege.

Nice to have

• Hands-on Google Workspace administration and automation.
• Experience with device trust or posture signals, identity-aware proxy patterns, SOC 2 or SOX access-control evidence, or open-source identity tooling.

Tools

Okta, Okta Workflows, Google Workspace, Terraform, Python, Go, TypeScript, WebAuthn

AI focus

Build agentic systems and treat AI agents as a distinct identity class, using scoped, single-use credentials, delegation, and auditable actions; establish identity-layer standards for AI tools.