IAM (Identity & Access Management) Engineer
Core
Design, operate, and integrate identity, token, directory, federation, and SSO services while implementing RBAC/ABAC models and automating identity lifecycle activities.
Role type
Senior IAM Engineer (Security & Platform)
Builds
Secure identity patterns for pipelines, APIs, automation, and platform services within cloud and Kubernetes environments.
Domain
Cybersecurity, Identity & Access Management, Cloud Infrastructure
Required skills
Identity federation, SSO, OAuth/OIDC, SAML, RBAC, ABAC, Privileged Access Management, Identity lifecycle automation, Scripting, Troubleshooting complex auth/authorization issues
Preferred skills
Keycloak, AWS IAM, Kubernetes RBAC, GitLab identity integration, ServiceNow integration, Zero Trust architectures, Classified/multi-domain identity environments
Technologies
OAuth, OIDC, SAML, LDAP, GitLab, Kubernetes, ServiceNow, AWS IAM
Responsibilities
Design and maintain RBAC and ABAC models for users, administrators, privileged users, services, and tenants. Integrate identity and authorization services with GitLab, Kubernetes, mission applications, ServiceNow, and federated AWS access. Automate user, group, role, entitlement, and identity lifecycle activities. Support privileged-access workflows, elevated-role approvals, access reviews, recertification, and separation-of-duties requirements. Maintain identity-service monitoring, documentation, recovery procedures, and operational support processes.
Seniority
Senior, hands-on IC
