Director, IAM Engineering

** Job

Requisition  #*
* 26WD97993

** Position Overview*
* Autodesk's Enterprise Identity Services team is looking for a  
** Director, IAM Engineering
** to lead the strategy and execution for modern Identity and Access Management engineering across workforce identity,  
** non-human identity** , directory and identity infrastructure, authentication, federation, access governance integrations, identity platform modernization, and emerging  
** AI and agentic identity
** patterns.

Reporting to the  
** Senior Director, Information Security Engineering** , this leader will own the IAM Engineering pillar and build a scalable engineering organization that delivers secure, resilient, and developer friendly identity platforms across Autodesk. The role will partner closely with the  
** Director of IAM Operations
** and the  
** Senior Manager of IAM Security and Trust
** to ensure strong separation of duties, secure by default engineering, and operational excellence.

This role requires both strong engineering depth and strong security judgment, with leadership across platforms and services such as  
** SailPoint, Microsoft Entra, Okta, SSO, MFA, federation, directory services, identity lifecycle automation, privileged access integrations, custom identity applications, non-human identity security, and AI or agent enabled access patterns** . This leader should also bring experience operating in regulated environments, including  
** FedRAMP and public sector security requirements** .

This role is remote-friendly within North America. For those who prefer in-office or hybrid work, the role can be based in San Francisco, CA;
Portland, OR;
Boston, MA;
Denver, CO; or Toronto, ON.

Travel requirements are approximately 20%

** Responsibilities*
* + Define the engineering strategy, architecture, and roadmap for Autodesk's IAM platforms across workforce, non-human, and agentic identity

+ Lead engineering teams responsible for IAM platforms, APIs, automation services, and identity integrations

+ Oversee engineering for  
** SailPoint, Microsoft Entra, Okta, SSO, MFA, app onboarding, directory services, identity verification, and privileged access integrations*
* + Build secure, scalable, and reusable identity paved roads for internal teams

+ Own engineering patterns for  
** non-human identities
** including service accounts, workload identities, API identities, automation accounts, and federated machine identities

+ Define secure patterns for  
** agentic and on behalf of identity** , including  
** OBO flows** , delegated access, scoped tokens, constrained execution, and least privilege controls

+ Drive adoption of short lived credentials, federation, secret reduction, lifecycle controls, and stronger ownership for non-human and agentic identities

+ Ensure engineering designs align to least privilege, privileged access, separation of duties, logging, and traceability requirements

+ Partner with IAM Security and Trust on RBAC, ABAC, PIM, PAM integrations, auditability, and identity risk reduction

+ Lead and grow a high performing IAM Engineering organization with strong technical ownership, delivery standards, and production readiness

+ Encourage effective and secure use of  
** AI assisted engineering tools
** to improve delivery, documentation, and operational efficiency

** Minimum Qualifications*
* + 10+ years of experience in IAM, security engineering, platform engineering, or related enterprise identity domains

+ 5+ years leading engineering teams responsible for IAM platforms, identity services, or security infrastructure at enterprise scale

+ Strong experience with  
** SailPoint, Microsoft Entra, and Okta*
* + Deep knowledge of  
** OAuth2, OIDC, SAML, JWT, token exchange, OBO flows, federation, and modern workload identity patterns*
* + Experience designing identity architectures across SSO, MFA, provisioning, lifecycle automation, directory services, access governance, and app onboarding

+ Experience securing and engineering for  
** non-human identities
** across cloud, CI CD, platform, and runtime environments

+ Experience defining secure patterns for  
** agentic identity
** and software acting  
** on behalf of
** users or services

+ Strong…