# Staff Identity and Access Management Engineer

**Company**: Tanium
**Location**: Addison, TX (Hybrid); Bellevue, WA (Hybrid); Durham, NC (Hybrid); Emeryville, CA (Hybrid); Reston, VA (Hybrid)
**Work arrangement**: hybrid
**Experience**: staff
**Job type**: full-time
**Salary**: $180,000 to $230,000
**Category**: IT
**Industry**: Technology

**Apply**: https://job-boards.greenhouse.io/tanium/jobs/8126772?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply
**Canonical**: https://yubhub.co/jobs/job_e651d057-1b3

## Description

We're looking for a Staff IAM engineer to design, implement, and manage identity and access management (IAM) and identity governance (IGA) solutions across Tanium's corporate infrastructure.

You'll evaluate new IAM/IGA technologies, partner with cross-functional teams on strategy, and keep our identity ecosystem secure, compliant, and efficient.

**Responsibilities**

- Design and manage IAM/IGA solutions across corporate infrastructure, including SSO, MFA, and PAM

- Build and maintain identity automation - onboarding, off-boarding, entitlements, and approval workflows - and troubleshoot issues surfaced by testing, user, or peer feedback

- Own the identity lifecycle: monitor, document, and continuously improve it

- Partner with GRC to develop and maintain IAM/IGA policies and standards that satisfy regulatory requirements (ISO 27001, FedRAMP, GDPR, HIPAA, etc.)

- Assess IAM systems regularly for security gaps and insure ongoing patch and policy compliance

- Lead technical delivery on IAM/IGA projects - upgrades, migrations, integrations - and monitor system performance to identify optimizations

- Respond to and resolve IAM-related incidents

- Mentor engineers across IT and Security and track industry trends to keep our IAM/IGA approach current

- Maintain system design documentation

**Requirements**

- Education - Bachelor's Degree in Computer Science, IT or other relevant degree or equivalent work experience

- Experience - 8–10 years in identity and access management, including IGA integrations with HRIS systems (Workday, SuccessFactors, or similar)

- Experience implementing, configuring, and managing an IGA product like Lumos, SailPoint, Saviynt, etc

- Hands-on expertise with Entra ID and Active Directory (preferably in a hybrid environment) with respect to identity and access

- Solid grasp of onboarding/off-boarding standards and lifecycle workflows

- Scripting proficiency (PowerShell)

- Working knowledge of security/compliance frameworks - ISO 27001, FedRAMP, GDPR, HIPAA

- Experience with SSO, MFA, and PAM tooling

- Strong problem-solving skills and the communication chops to work across IT, Security, and business teams

**Benefits**

- Annual base salary range: $180,000 to $230,000

- Equity awards

- Medical, dental and vision plan

- Family planning benefits

- Health savings account

- Flexible spending account

- Transportation savings account

- 401(k) retirement savings plan with company match

- Life, accident and disability coverage

- Business travel accident insurance

- Employee assistance programs

- Disability insurance

- Other well-being benefits

## Skills

### Required
- Identity and Access Management
- IGA
- IAM
- Entra ID
- Active Directory
- PowerShell
- Security/compliance frameworks

---

Source: [Apply at job-boards.greenhouse.io](https://job-boards.greenhouse.io/tanium/jobs/8126772?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply)