Staff Identity and Access Management Engineer

We're looking for a Staff IAM engineer to design, implement, and manage identity and access management (IAM) and identity governance (IGA) solutions across Tanium's corporate infrastructure.

You'll evaluate new IAM/IGA technologies, partner with cross-functional teams on strategy, and keep our identity ecosystem secure, compliant, and efficient.

Responsibilities

• Design and manage IAM/IGA solutions across corporate infrastructure, including SSO, MFA, and PAM
• Build and maintain identity automation - onboarding, off-boarding, entitlements, and approval workflows - and troubleshoot issues surfaced by testing, user, or peer feedback
• Own the identity lifecycle: monitor, document, and continuously improve it
• Partner with GRC to develop and maintain IAM/IGA policies and standards that satisfy regulatory requirements (ISO 27001, FedRAMP, GDPR, HIPAA, etc.)
• Assess IAM systems regularly for security gaps and insure ongoing patch and policy compliance
• Lead technical delivery on IAM/IGA projects - upgrades, migrations, integrations - and monitor system performance to identify optimizations
• Respond to and resolve IAM-related incidents
• Mentor engineers across IT and Security and track industry trends to keep our IAM/IGA approach current
• Maintain system design documentation

Requirements

• Education - Bachelor's Degree in Computer Science, IT or other relevant degree or equivalent work experience
• Experience - 8–10 years in identity and access management, including IGA integrations with HRIS systems (Workday, SuccessFactors, or similar)
• Experience implementing, configuring, and managing an IGA product like Lumos, SailPoint, Saviynt, etc
• Hands-on expertise with Entra ID and Active Directory (preferably in a hybrid environment) with respect to identity and access
• Solid grasp of onboarding/off-boarding standards and lifecycle workflows
• Scripting proficiency (PowerShell)
• Working knowledge of security/compliance frameworks - ISO 27001, FedRAMP, GDPR, HIPAA
• Experience with SSO, MFA, and PAM tooling
• Strong problem-solving skills and the communication chops to work across IT, Security, and business teams

Benefits

• Annual base salary range: $180,000 to $230,000
• Equity awards
• Medical, dental and vision plan
• Family planning benefits
• Health savings account
• Flexible spending account
• Transportation savings account
• 401(k) retirement savings plan with company match
• Life, accident and disability coverage
• Business travel accident insurance
• Employee assistance programs
• Disability insurance
• Other well-being benefits