About the Role
We are looking for an experienced Lead Engineer - Identity & Access Management (IAM) to lead the design, implementation, and modernization of enterprise identity solutions across Okta, Microsoft Entra ID and other platforms. The role is responsible for architecting secure authentication and authorization frameworks, implementing industry best practices, SSO, MFA, and access governance capabilities, and implementing automation initiatives to improve operational efficiency.
What You Will Do
•Lead the design, implementation, and support of enterprise IAM solutions across Okta, Microsoft Entra ID, and other IAM platforms and services.
•Design and implement SSO, MFA, Conditional Access, and authentication policies to strengthen enterprise security.
•Architect and deploy identity integrations using SAML, OAuth 2.0, OIDC, SCIM, LDAP, and REST APIs.
•Manage and enhance Okta Lifecycle Management and Entra ID identity lifecycle processes, including provisioning, deprovisioning, and access governance.
•Develop and maintain IAM automation solutions using Python, PowerShell, and cloud-native capabilities.
•Design and implement RBAC, PIM, and least-privilege access controls across enterprise environments.
•Partner with security, infrastructure, application, and cloud teams to onboard applications and integrate them with enterprise identity platforms.
•Provide technical leadership for IAM projects, including requirements gathering, solution design, implementation, and operational transition.
•Drive IAM platform modernization initiatives and adoption of industry best practices and security standards.
•Troubleshoot and resolve complex authentication, federation, provisioning, and access-related issues.
•Create and maintain architecture documentation, operational procedures, and technical standards.
•Mentor engineers and provide technical guidance to support team growth and capability development.
•Support audit, compliance, and risk management activities by ensuring identity controls are implemented and operating effectively.
•Evaluate emerging identity technologies and recommend improvements to enhance security, scalability, and operational efficiency.
What You Need
•8+ years of IAM experience in enterprise environments.
•Strong understanding of Identity and Access Management (IAM) concepts, standards, and best practices, including authentication, authorization, Life cycle Management and access governance.
•Hands-on experience with SSO libraries and providing technical guidance to developers on secure integration using SAML, OAuth 2.0, OIDC, and SCIM.
•Hands-on experience with Multi-Factor Authentication (MFA) solutions, including configuration, deployment, and policy management.
•Extensive experience with the Okta platform, including:
•Authentication and authorization policy design
•SSO integrations
•Lifecycle Management (LCM)
•Identity governance and access controls
•Strong knowledge of Microsoft Entra ID (Azure AD), including:
•Tenant configuration and administration
•Conditional Access policy design and implementation
•MFA and authentication methods configuration
•Role-Based Access Control (RBAC)
•Privileged Identity Management (PIM)
•Identity security controls
•Experience in building automation solutions within the IAM domain, leveraging source control and CI/CD tools such as Bitbucket, Jenkins, and CloudBees.
•Strong scripting and automation skills using Python and PowerShell for identity management, operational efficiency, and workflow automation.
•Experience designing, developing, and deploying automation solutions across Microsoft Entra ID and AWS environments.
•Experience with SIEM platforms, including dashboard design and visualization of key security KPIs, metrics, and threat trends.
•Ability to lead projects independently, manage stakeholder expectations, and mentor junior engineers and team members.
Nice to Have
•Experience with Identity Governance and Administration (IGA) platforms.
•Understanding of Zero Trust architecture and modern identity security frameworks.
•Experience designing and supporting high-availability and disaster recovery architectures for identity platforms.
•Experience working in Agile/Scrum environments and leading cross-functional initiatives.
•Understanding/Experience in AI identity security.
•Experience in Managing Active Directory/LDAP.
•Experience with Infrastructure as Code (IaC) tools such as Terraform for secure and automated infrastructure deployment and management.
What You'll Receive
•Competitive compensation.
•Limitless growth and learning opportunities.
•A collaborative and positive culture - join a diverse team of professionals that are as smart and driven as you.
•A chance to make an impact – your work will contribute directly to our strategy.
•Enjoy the flexibility of working from home and the energy of collaborating with peers in our dynamic offices.
•20+ PTO days plus holidays and floating holidays in your first year.
•Extensive medical, dental insurance and vision plan.
•401K with corporate match, immediate vesting.
•Health-and-wellness-related allowance programs.
•Parental leave.
•Tuition reimbursement.
•Employee Stock Purchase Plan.
•Employee Assistance Program.
•Gartner Gives Charity Match.
Compensation
A reasonable estimate of the base salary range for this role is 116,000 USD - 170,000 USD. Actual salaries may vary based on factors including education, training, experience, professional achievement, business need, and location. In addition to base salary, employees will participate in either an annual bonus plan based on company and individual performance, or a role-based, uncapped sales incentive plan. Benefits also include generous PTO, a 401k match up to $7,200 per year, and the opportunity to purchase company stock at a discount.
