Staff Engineer, Identity & Access Management (IAM)

<h3>Accountabilities</h3><li>Assess the existing IAM environment and develop a comprehensive strategy spanning products, platforms, cloud and on-premises infrastructure, and corporate applications.</li><li>Lead IAM initiatives as a core component of a broader zero-trust security strategy, aligning identity controls with organizational security objectives.</li><li>Architect and design cloud-based identity governance, access management, authentication, authorization, and directory solutions.</li><li>Implement and evolve RBAC and ABAC-based workflows supporting employee onboarding, access provisioning, changes, reviews, and ongoing identity lifecycle management.</li><li>Partner with engineering and IT teams to ensure applications and products implement appropriately scoped privileges and risk-based access controls.</li><li>Serve as a senior technical and strategic advisor to security, IT, engineering, and other cross-functional stakeholders, embedding IAM principles into broader security architecture.</li><li>Establish KPIs, KCIs, and KRIs that provide meaningful visibility into IAM control effectiveness, operational health, and security risk.</li><li>Design and implement IAM solutions that support regulatory and compliance requirements, including SOX, GxP, and other applicable standards.</li><li>Lead large-scale IAM programs from strategy and architecture through implementation, deployment, optimization, and continuous improvement.</li><li>Evaluate emerging identity technologies and continuously improve IAM capabilities, processes, and security controls.</li><li>Translate business requirements and use cases into technology-agnostic IAM solutions, acting as a business systems analyst and trusted technical advisor.</li><li>Influence cross-functional teams through strong technical leadership, clear communication, and a pragmatic approach to security, risk, and business priorities.</li><h2>Requirements</h2><li>Bachelor’s or Master’s degree in Computer Science, Information Security, or a related technical field.</li><li>7+ years of experience in Identity &amp; Access Management and related information security disciplines, with substantial experience in dedicated IAM roles.</li><li>Proven success leading enterprise-scale IAM programs from strategy and architecture through production implementation, particularly in cloud-first and hybrid environments.</li><li>Deep expertise with enterprise identity administration and governance platforms, with experience serving as an accountable owner of production identity or governance solutions.</li><li>Expert knowledge of adaptive authentication and modern identity protocols and standards, including OAuth, OpenID Connect, and SAML.</li><li>Extensive experience with enterprise directory and identity platforms such as Active Directory, Okta, Microsoft Entra ID/Azure AD, Duo, or equivalent technologies.</li><li>Strong experience with privileged access management platforms such as CyberArk, Delinea, or comparable solutions.</li><li>Understanding of identity governance for both human and non-human identities, including service accounts, workload identities, CI/CD credentials, and other machine identities.</li><li>Proficiency in at least one programming language, such as Java, C++, or Python, as applied to IAM products and integrations.</li><li>Working knowledge of UNIX/Linux, macOS, and Windows operating systems, as well as database management systems.</li><li>Strong understanding of security principles, risk management, zero-trust architecture, and regulatory requirements.</li><li>Excellent communication, stakeholder management, and leadership skills, with the ability to influence technical and non-technical teams across an organization.</li><li>Ability to articulate requirements and use cases clearly while remaining technology agnostic and focused on business outcomes.</li><li>Continuous improvement mindset with a strong interest in emerging IAM technologies, security trends, and modern identity architectures.</li><li>Relevant security certifications such as CISSP, OSCP, or GWAPT are highly desirable.</li><h2>Benefits</h2><li>Estimated annual base salary of<strong>$180,600–$212,900 USD</strong>, depending on skills, experience, and qualifications.</li><li>Eligibility for an annual performance bonus.</li><li>Equity compensation.</li><li>Comprehensive employee benefits package.</li><li>Remote work opportunity across the United States, with Salt Lake City, Utah considered an ideal home base.</li><li>Regular onsite visits for remote employees to support collaboration, routine work, and departmental events.</li><li>Opportunity to lead high-impact IAM and zero-trust initiatives across a technology-driven organization.</li><li>Cross-functional exposure spanning information security, IT, engineering, and business teams.</li><li>Opportunity to influence enterprise security strategy and identity architecture at significant scale.</li><li>Collaborative environment focused on continuous learning, ownership, innovation, and measurable impact.</li><li>Equal opportunity workplace with accommodations available throughout the selection process.</li>