Senior IAM Engineer

About the job

What You Will Do Architect, configure, and deploy enterprise identity platforms such as Okta, Auth0, Ping Identity, or Microsoft Entra ID. Build complex SSO and MFA policies, integrating custom applications via SAML 2.0, OAuth 2.0, and OIDC. Implement identity governance and lifecycle automation — Okta OIG, SailPoint, Saviynt, or Microsoft Entra ID Governance — to manage joiner/mover/leaver workflows at scale. Design no-code/low-code identity orchestration using tools like Okta Workflows, Auth0 Actions, or Microsoft Logic Apps to automate complex provisioning and deprovisioning events. Manage complex directory synchronizations (Active Directory, LDAP, cloud directories) and B2B/B2C identity routing. Monitor identity security posture using ISPM capabilities — Okta ISPM, Microsoft Entra Permissions Management, or CrowdStrike Falcon Identity — to continuously audit access risks. Participate in daily agile standups with international engineering teams to scope identity requirements for new application rollouts. What We’re Looking For 5+ years of dedicated IAM engineering experience. Proven, hands-on experience deploying enterprise identity platforms such as Okta, Auth0, Ping Identity, or Microsoft Entra ID in production (vendor certifications are a strong plus). Deep understanding of directory services, federation protocols, and API-driven provisioning (SCIM). Experience with identity governance (IGA): access certifications, segregation of duties, and automated lifecycle policies. Familiarity with Privileged Access Management (PAM) tools such as CyberArk, BeyondTrust, or Delinea is a strong plus. Flawless English communication skills to present architectural decisions directly to enterprise security leadership.