Senior IAM Engineer

Senior IAM Engineer

Work Location:

Plano(TX), Bethpage(NY)

The Senior IAM Engineer will provide senior-level IAM consulting and architecture services supporting customer identity initiatives. You will provide architecture recommendations and implementation guidance, design the automation that keeps configuration consistent at scale, and enable application development teams to move faster and more securely.

• IAM Platform Architecture & IDP Governance
• Authentication Modernization
• Developer Platform & Enablement Engineering
• Security Engineering & Threat Modeling
• Infrastructure as Code & Platform Engineering
• Compliance, Audit & Risk Leadership

• 6 years of progressive experience in Identity and Access Management, security engineering, or a closely related technical field.
• 3 years of hands-on, production ownership of the IDP platform at significant scale — including Identity Engine, authentication policy design, SCIM provisioning, Workflows, and multi-environment tenant management.
• Expert-level command of identity protocols: OAuth 2.0 (all grant types, token introspection, token revocation), OpenID Connect (all flows, claims, discovery), SAML 2.0, SCIM 2.0, and FIDO2/Web Authn — able to implement, debug, and review at the protocol layer.
• Demonstrated experience designing and implementing as-Code using Terraform module authorship, CI/CD pipeline integration, drift detection, and multi-environment management.
• Experience leading authentication modernization programs or large-scale IAM migrations across a diverse application portfolio.
• Proficiency in at least two modern programming languages (Node.js, Java, Python, or Go) with the ability to write production-quality integration code, automation tooling, and reference implementations.
• Track record of conducting threat modeling, security design reviews, and producing actionable written security guidance for engineering audiences.
• Experience owning IAM-related compliance controls and leading or supporting external audits (SOC 2, SOX, PCI-DSS, or equivalent).
• Demonstrated ability to influence technical direction across teams, and operate effectively with senior stakeholders.

• Certifications in customer identity platforms.
• Experience with Customer Identity Engine advanced features: assurance-level step-up, global session policies, device trust integration, and authenticator enrollment policy design.
• Experience building identity observability pipelines:
  Custom dashboards, SLO burn-rate alerting and anomaly detection rules.
• Familiarity with Zero Trust architecture frameworks (NIST SP 800-207) and practical implementation experience via IDP and network/endpoint controls.
• Exposure to adjacent IAM disciplines:
  Privileged Access Management (PAM), workforce SSO, or B2B federation with external identity providers.
• Experience contributing to open-source IAM tooling, presenting at identity conferences, or publishing technical content on CIAM topics.
• Bachelor's degree or higher in Computer Science, Information Systems, Cybersecurity, or a related field; equivalent professional experience considered.