Senior Staff Identity & Access Management Engineer

Early Warning

. Lead the architecture, design, engineering, integration, and continuous improvement of enterprise IAM solutions across cloud and on-premises environments .

Posted 11/3/2026full-timeUnited StatesSenior💰 $160,000 - $200,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates advanced expertise in Identity and Access Management (IAM) solutions, including identity lifecycle management, authentication, and authorization, while effectively leading complex engineering initiatives across cloud and on-premises environments. Possesses strong problem-solving abilities and communication skills to influence technical decisions and mentor engineering teams.

Highest-signal resume keywords

IAM EngineeringIdentity Lifecycle ManagementAuthentication and AuthorizationSAML, OAuth 2.0, OpenID ConnectTechnical Leadership

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Identity GovernancePrivileged Access ManagementActive DirectoryREST APIsPowerShellPythonSQLIntegration TechnologiesCloud EnvironmentsIAM Standards

Soft Skills

Problem-SolvingCollaborationAnalytical SkillsCommunication SkillsMentorship

Tools & Technologies

SaviyntSailPointOktaMicrosoft Entra IDAWSAzure

Certifications & Qualifications

IAM CertificationsCloud CertificationsInformation Security Certifications

Industry Keywords

Identity Governance and AdministrationRegulatory ComplianceSecurity AssessmentsVulnerability ManagementOperational Effectiveness

Tech Stack

Tools & technologies

AWSAzureCloudPythonSQL

About the role

Key responsibilities & impact

Lead the architecture, design, engineering, integration, and continuous improvement of enterprise IAM solutions across cloud and on-premises environments
Serve as a technical expert for identity governance and administration, authentication, authorization, privileged access, directory services, and identity lifecycle management
Anticipate identity, security, operational, and regulatory challenges and recommend scalable improvements
Lead complex IAM engineering initiatives involving multiple systems, applications, technology teams, and stakeholders
Define and evolve IAM engineering standards, patterns, and technical practices
Evaluate IAM architecture, configurations, integrations, and controls to improve security, resiliency, scalability, automation, and operational effectiveness
Design and enhance identity lifecycle processes, including provisioning, deprovisioning, access certification, role and entitlement management, and privileged access
Engineer and optimize integrations between IAM platforms and enterprise applications, directories, cloud platforms, HR systems, and authoritative sources
Develop automation and reusable engineering patterns to improve IAM delivery and reduce manual processes
Partner with Enterprise Architects, Security Architects, application teams, and technology stakeholders to drive secure design practices
Lead troubleshooting, root cause analysis, and sustainable corrective actions for complex IAM platform, integration, authentication, and access issues
Provide technical expertise for security assessments, audits, control reviews, vulnerability management, and remediation
Evaluate emerging identity technologies and recommend adoption where valuable
Influence technical decisions by communicating IAM concepts, risks, alternatives, and recommendations to technical and nontechnical stakeholders
Mentor and provide technical guidance to engineers
Maintain architecture, configuration, operational, and engineering documentation
Participate in production support and escalation activities, including an on-call rotation as required
Support the company’s risk management and protection of systems and data

Requirements

What you’ll need

Bachelor’s degree in Computer Science, Information Security, Information Technology, or a related field, or equivalent work experience
Typically 12 years of experience or demonstrated portfolio consistent with the experience required for the role
Significant experience engineering enterprise identity and access management solutions
Advanced expertise in IAM concepts and technologies, including identity lifecycle management, authentication, authorization, identity governance, privileged access, directory services, least-privilege access, and role-based access
Experience designing, integrating, and supporting IAM solutions in complex enterprise cloud and/or on-premises environments
Experience leading technically complex IAM initiatives involving multiple applications, platforms, teams, or business functions
Strong understanding of SAML, OAuth 2.0, OpenID Connect, SCIM, and related standards
Experience with enterprise directory and identity services such as Active Directory and cloud-based identity platforms
Experience integrating IAM solutions with enterprise applications and authoritative data sources through APIs, connectors, scripting, or other integration technologies
Ability to identify and solve complex technical problems across multiple systems, technologies, and information sources
Ability to influence technical decisions, establish engineering practices, and communicate complex technical concepts across functions
Experience providing technical leadership, coaching, or mentorship to other engineers
Ability to work independently and provide technical direction in complex or ambiguous situations
Strong written and verbal communication, collaboration, analytical, and problem-solving skills
Preferred: Experience with Saviynt, SailPoint, or comparable Identity Governance and Administration platforms
Preferred: Experience with Okta, Microsoft Entra ID, or comparable identity providers and authentication platforms
Preferred: Experience with Privileged Access Management and Public Key Infrastructure technologies
Preferred: Experience engineering identity solutions across AWS, Azure, or other cloud environments
Preferred: Experience with PowerShell, Python, or comparable scripting languages
Preferred: Experience with REST APIs, JSON, XML, SQL, or related integration technologies
Preferred: Experience implementing IAM capabilities within a highly regulated environment
Preferred: Relevant IAM, cloud, or information security certifications
Must independently possess eligibility to work in the United States for any employer at the date of hire
Position is ineligible for employment visa sponsorship

Benefits

Comp & perks

Competitive medical (PPO/HDHP), dental, and vision plans
Company contributions to Health Savings Account (HSA)
Flexible spending accounts (FSA) for commuting, health, and dependent care expenses
401(k) retirement plan with 100% Company Safe Harbor Match on the first 6% deferral immediately upon eligibility
Flexible Time Off for exempt (salaried) employees
Generous PTO for non-exempt (hourly) employees
11 paid company holidays
Paid volunteer day
12 weeks of paid parental leave
Maven Family Planning support, including egg freezing, fertility, adoption, surrogacy, pregnancy, postpartum, early pediatrics, and returning to work
Discretionary incentive plan
Benefits program enhancements and additional benefits