{ "count" : 127221, "data" : [ { "id" : "6a2c5f4074d8ee00a08ea5bc", "title" : "Staff Security Engineer, Privileged Access (PAM)", "company" : "Nscale", "industry" : "AI infrastructure", "salary" : { "min" : 175000.0, "max" : 225000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "AMER", "locations" : [ "AMER" ], "timestamp" : "2026-06-14T23:57:18.877", "fingerprint" : "f5893c0f8994039b11ba2026e3b98c93d4db2ad3a08eecafeab89d42fc06b2b5", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://job-boards.eu.greenhouse.io/nscaleoperationsukltd/jobs/4860940101", "externalId" : "4860940101", "industryFunction" : { }, "structuredLocations" : [ { "country" : "United States", "continent" : "na", "workMode" : "remote" }, { "country" : "Canada", "continent" : "na", "workMode" : "remote" } ], "locationText" : "United States; Canada", "experienceMinYears" : 8, "experienceMaxYears" : 15, "experienceLevel" : "Staff", "technicalSkills" : "Python, AWS, Terraform, Docker, Kubernetes, API integration", "professionalSkills" : [ "Access automation", "Access governance", "Least privilege", "Risk assessment", "System design" ], "hardSkillsList" : [ "Privileged access management", "Access control", "Identity management", "Automation", "API integration", "Scripting" ], "hardSkills" : [ { "name" : "Privileged access management", "level" : "intermediate" }, { "name" : "Access control", "level" : "intermediate" }, { "name" : "Identity management", "level" : "intermediate" }, { "name" : "Automation", "level" : "intermediate" }, { "name" : "API integration", "level" : "intermediate" }, { "name" : "Scripting", "level" : "intermediate" } ], "majorSkills" : "Privileged Access Management, Identity Security, Access Automation", "majorSkillsList" : [ "Privileged Access Management", "Identity Security", "Access Automation" ], "coreResponsibilities" : "Build privileged access workflows, Design access patterns, Define practical controls, Establish clean audit trails, Implement JIT access patterns, Create privileged access baseline, Drive entitlement cleanup, Reduce stale privilege, Design break-glass access standards, Test emergency access workflows, Validate break-glass readiness, Develop tiering model, Identify highest-risk privileges, Create remediation paths, Define telemetry requirements, Establish privileged access detections, Source-health requirements, Track metrics", "teamCollaboration" : "Identity control plane; Identity; Endpoint; Security Data; Network Security; Platform Engineering; IT; Service owners", "domainKnowledge" : "Privileged Access Management; Identity and Access Management; Cloud security; SaaS administration; Infrastructure security; Source control security; Data platform security; Endpoint security; Break-glass procedures; Tiering model; JIT access", "domainList" : [ "privileged-access-management", "identity-and-access-management", "cloud-security", "saas-administration", "infrastructure-security", "source-control-security", "data-platform-security", "endpoint-security", "break-glass-procedures", "tiering-model", "jit-access" ], "domainSpecificKnowledge" : [ "Privileged Access Management", "Identity and Access Management", "Cloud security", "SaaS administration", "Infrastructure security", "Source control security", "Data platform security", "Endpoint security", "Break-glass procedures", "Tiering model", "JIT access" ], "problemSolvingSkills" : "Root cause analysis", "outcomesObjectives" : "Standing privilege reduction; JIT adoption; Stale admin cleanup; Break-glass test success; Approval SLA; Access review closure", "qualificationsBasic" : "7+ years identity security, 7+ years privileged access, 7+ years security engineering, 7+ years infrastructure security, Hands-on designing privileged access, Hands-on operating privileged access, Hands-on designing JIT access, Hands-on operating JIT access, Hands-on designing break-glass access, Hands-on operating break-glass access, Hands-on designing access request workflows, Hands-on operating access request workflows, Hands-on designing approval workflows, Hands-on operating approval workflows, Hands-on designing access review workflows, Hands-on operating access review workflows, Understanding authentication, Understanding authorization, Understanding RBAC, Understanding SSO, Understanding MFA, Understanding access governance, Understanding admin tiering, Understanding least privilege, Experience automating access workflows, Experience automating entitlement cleanup, Experience automating evidence collection, Experience automating revocation, Scripting skills, Workflow automation skills, API integration skills, Platform engineering skills, Ability translate access risk, Experience with service accounts, Experience with non-human identities, Experience with workload identities, Experience with API tokens, Experience with automation accounts, Experience with secrets governance, Experience securing production access, Experience securing source control administration, Experience securing data platforms, Experience securing cloud administration, Experience securing endpoint admin, Experience designing access evidence", "qualificationsPreferred" : "Experience with Kubernetes", "remoteFriendly" : true, "workSiteFlexibility" : "Flexible", "rawDescription" : "About Nscale Nscale is the GPU cloud engineered for AI. We provide cost-effective, high-performance infrastructure for AI start-ups and large enterprise customers. Nscale enables AI-focused companies to achieve superior results by reducing the complexity of AI development. Our GPU cloud bolsters technical capabilities and directly supports strategic business outcomes, including cost management, rapid innovation, and environmental responsibility. We thrive on a culture of relentless innovation, ownership, and accountability, where every team member takes pride in their work and drives it with excellence and urgency. As an Nscaler, you’ll build trust through openness and transparency, where everyone is inspired to do their best work. If you join our team, you’ll be contributing to building the technology that powers the future. About the Role We’re hiring a Staff Security Engineer focused on Privileged Access and Access Automation to build Nscale’s privileged access operating model across enterprise systems, SaaS administration, infrastructure, production environments, source control, data platforms, and emergency access paths. This role sits inside the identity control plane and is intentionally execution-focused. You’ll work across Identity, Endpoint, Security Data, Network Security, Platform Engineering, IT, and service owners to turn privileged access into a practical engineering mechanism with request, approval, justification, time-bound elevation, session or event evidence, automated revocation, break-glass, and clean audit trails. This role is critical because standing privilege is one of the highest-risk patterns in a fast-growing infrastructure company. Your work will help make privileged access secure, fast, measurable, and recoverable so engineers can move quickly without relying on manual reviews, tribal knowledge, or permanent admin rights. What you'll be doing Privileged Access Workflows Build privileged access workflows across enterprise SaaS admin roles, production systems, cloud consoles, infrastructure management systems, source control, data platforms, endpoint admin, and emergency access paths Design access patterns that support request, approval, justification, time-bound elevation, and automated revocation Define practical controls that reduce reliance on permanent admin rights across high-risk environments Establish clean audit trails for privileged access activity across critical systems JIT Access and Governance Controls Implement JIT access patterns with approval, justification, expiry, revocation, and evidence collection Create a privileged access baseline that defines who can approve access, what justification is required, how long access lasts, what evidence is captured, and how revocation works Own exception governance for access paths that cannot yet meet the standard Drive entitlement cleanup and stale privilege reduction through automation Break-Glass and Tiering Model Design break-glass access standards, ownership models, monitoring, and recovery procedures Test emergency access workflows and validate break-glass readiness Develop a tiering model for privileged access covering Tier 0 and Tier 1 systems, admin paths, sensitive groups, service-owner roles, and high-risk workflows Identify the top 10 highest-risk standing privileges and create remediation paths Telemetry, Detection, and Measurement Define privileged access telemetry requirements for detection, investigations, audit, compliance, and executive reporting Partner with Security Data to establish privileged access detections and source-health requirements Track metrics including standing privilege reduction, JIT adoption, stale admin cleanup, break-glass test success, approval SLA, and access review closure Build an inventory of top admin paths, owners, approvers, access methods, logging, expiry, and current risk KPIs Standing privilege reduction JIT adoption Stale admin cleanup Break-glass test success About You 7+ years in identity security, privileged access, security engineering, infrastructure security, or related engineering roles Hands-on experience designing or operating privileged access, JIT, break-glass, access request, approval, or access review workflows Strong understanding of authentication, authorization, RBAC, SSO, MFA, access governance, admin tiering, and least privilege Experience automating access workflows, entitlement cleanup, evidence collection, or revocation processes Strong scripting, workflow automation, API integration, or platform engineering skills Ability to translate access risk into practical controls that engineering and operations teams will adopt Ability to work across enterprise systems, production environments, SaaS platforms, IT, infrastructure, and compliance stakeholders Experience with service accounts, non-human identities, workload identities, API tokens, automation accounts, or secrets governance Experience securing production access, source control administration, data platforms, cloud administration, or endpoint admin workflows Experience designing access evidence for audit, customer assurance, or incident response What we can offer you At Nscale, you'll find a collaborative, supportive, and innovative environment where your contributions spark real impact. We're building something extraordinary, and we want you at the core. Highly competitive US compensation package (base + bonus + equity), with performance reviews every 12 months. \uD83D\uDE80 Join one of the fastest-growing AI infrastructure companies — your chance to directly shape how global AI capacity is planned and deployed. ✨ Expect a dynamic progression plan tailored to your ambitions. Grow by leading critical cross-functional initiatives and shaping capital strategy — always with our full support. Human-First Flexibility: We treat you as humans first. \uD83E\uDEF6\uD83C\uDFFD Our flexible workplace trusts Nscalers to deliver, giving you the autonomy to shape your day around life's moments. Equal Opportunities Statement We strongly encourage applications from people of colour, the LGBTQ+ community, people with disabilities, neurodivergent people, parents, carers, and people from lower socio-economic backgrounds. If there’s anything we can do to accommodate your specific situation, please let us know. The responsibilities outlined in this job description are not exhaustive and are intended to provide a general overview of the position. The employee may be required to perform additional duties, tasks, and responsibilities as assigned by management, consistent with the skills and qualifications required for the role. For information on how Nscale handles candidate personal data, please see our Employee & Candidate Privacy Notice: Here. Salary Range The range below reflects the base salary for the position. Actual compensation may vary based on job-related factors such as skill set, experience, education, and location. In addition to base salary, this role may be eligible for bonus, equity, and/or commission programs. Nscale may offer a competitive benefits package including medical, dental, vision, flexible paid time off, parental leave, and retirement plan participation. The range below reflects the base salary for the position. Actual compensation may vary based on job-related factors such as skill set, experience, education, and location. In addition to base salary, this role may be eligible for bonus, equity, and/or commission programs. Nscale may offer a competitive benefits package including medical, dental, vision, flexible paid time off, parental leave, and retirement plan participation. Salary Range $175,000—$225,000 USD For information on how Nscale handles candidate personal data, please see our Employee & Candidate Privacy Notice: Here.", "summaryDescription" : "Staff Security Engineer, Privileged Access (PAM) at Nscale. Skills: Privileged Access Management, Identity Security, Access Automation. Build privileged access workflows. Design access patterns", "postedDate" : "2026-06-12T22:22:23.596", "createdAt" : "2026-06-12T22:22:23.596", "lastUpdated" : "2026-06-14T23:57:18.877", "ingestTimestamp" : "2026-06-12T22:22:23.596", "mongoId" : "6a2c5f4074d8ee00a08ea5bc", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 175000, "salaryAnnualMax" : 225000, "salaryBand" : "150k-200k", "hasSalary" : true, "allSkills" : [ "Privileged access management", "Access control", "Identity management", "Automation", "API integration", "Scripting", "Privileged Access Management", "Identity Security", "Access Automation", "Access automation", "Access governance", "Least privilege", "Risk assessment", "System design", "Identity and Access Management", "Cloud security", "SaaS administration", "Infrastructure security", "Source control security", "Data platform security", "Endpoint security", "Break-glass procedures", "Tiering model", "JIT access" ], "skillCount" : 24, "jobCategory" : "other", "jobSubcategory" : "security", "dataQualityScore" : 0.8888889, "_score" : 1623.5894, "daysOld" : 2, "hasLocation" : true, "hasGeo" : false, "llmIndustry" : "AI infrastructure" }, { "id" : "6a2c8bea74d8ee00a0974153", "title" : "Privileged Access Management(PAM) Engineer", "company" : "Müller`s Solutions", "industry" : "Information Technology and Services", "salary" : { "min" : 300000.0, "max" : 450000.0, "currency" : "AED", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Senior PAM Engineer in Dubai, UAE, adjusted for the cybersecurity industry and a mid-size company." }, "location" : "Dubai, Dubai, United Arab Emirates", "locations" : [ "Dubai, Dubai, United Arab Emirates" ], "certifications" : [ "Delinea Certified Administrator", "Delinea Secret Server Certification", "Delinea Privilege Manager Certification", "Microsoft Certified Certifications", "CISSP", "CISM", "Security+" ], "timestamp" : "2026-06-15T21:47:28.753", "fingerprint" : "e75fab2e9e267497e7a8aa743d0fdab80b210e23cb95f69921c8c03d654a547c", "source" : "workable", "language" : "en", "applyUrl" : "https://apply.workable.com/j/DE6F5FCDB3/apply", "externalId" : "DE6F5FCDB3", "industryFunction" : { }, "locationPoint" : "25.07725,55.30927", "structuredLocations" : [ { "city" : "Dubai", "state" : "Dubai", "country" : "United Arab Emirates", "continent" : "as", "source" : "llm", "workMode" : "onsite", "geo" : "25.0742823,55.1885387" } ], "locationText" : "Dubai, Dubai, United Arab Emirates", "employmentType" : "FULL_TIME", "minimumEducation" : "Bachelor's Degree", "experienceMinYears" : 5, "experienceMaxYears" : 8, "experienceLevel" : "Senior", "technicalSkills" : "Delinea PAM, Secret Server, Privilege Manager, Remote Access Service, Password management, Active Directory, Entra ID, LDAP, MFA, SIEM, ITSM, APIs, Connectors", "professionalSkills" : [ "Privileged account governance", "Access controls", "Security incidents", "Risk mitigation", "Technical support", "Knowledge transfer", "Account onboarding", "PAM administration", "Platform performance" ], "hardSkillsList" : [ "PAM solutions", "Privileged access policies", "Access monitoring", "Log analysis", "Security standards", "Cybersecurity best practices", "Audit compliance", "Scripting" ], "hardSkills" : [ { "name" : "PAM solutions", "level" : "intermediate" }, { "name" : "Privileged access policies", "level" : "intermediate" }, { "name" : "Access monitoring", "level" : "intermediate" }, { "name" : "Log analysis", "level" : "intermediate" }, { "name" : "Security standards", "level" : "intermediate" }, { "name" : "Cybersecurity best practices", "level" : "intermediate" }, { "name" : "Audit compliance", "level" : "intermediate" }, { "name" : "Scripting", "level" : "intermediate" } ], "majorSkills" : "Privileged Access Management, Delinea PAM, Cybersecurity", "majorSkillsList" : [ "Privileged Access Management", "Delinea PAM", "Cybersecurity" ], "coreResponsibilities" : "Design Delinea PAM solutions, Deploy Delinea PAM solutions, Maintain Delinea PAM solutions, Secure privileged accounts, Develop privileged access policies, Enforce privileged access policies, Monitor access activities, Analyze logs, Respond to security incidents, Collaborate IT, security, audit teams, Implement access controls, Implement access workflows, Perform audits privileged accounts, Identify risks, Mitigate risks, Provide technical support, Provide training, Provide documentation, Integrate Delinea PAM, Automate account onboarding, Configure APIs, Configure connectors, Support scripting, Conduct discovery accounts, Onboard privileged accounts, Migrate privileged accounts, Implement PAM controls, Support audit efforts, Support compliance efforts, Provide Level 2/3 support, Troubleshoot issues, Monitor platform performance, Participate on-call duties, Develop HLD documentation, Develop LLD documentation, Develop implementation guides, Develop SOPs, Conduct knowledge transfer sessions", "teamCollaboration" : "Infrastructure teams; Security teams; Application teams; Operations teams; IT teams; Audit teams", "domainKnowledge" : "Privileged Access Management; Cybersecurity best practices; Identity integrations; MFA; SIEM; ITSM", "domainList" : [ "privileged-access-management", "cybersecurity-best-practices", "identity-integrations", "mfa", "siem", "itsm" ], "domainSpecificKnowledge" : [ "Privileged Access Management", "Cybersecurity best practices", "Identity integrations", "MFA", "SIEM", "ITSM" ], "toolProficiency" : [ "Delinea Secret Server", "Delinea Privilege Manager", "Microsoft Active Directory", "Entra ID", "SIEM platforms", "ITSM platforms" ], "documentationSkills" : "HLD documentation; LLD documentation; Implementation guides; SOPs", "problemSolvingSkills" : "Troubleshoot issues", "specialRequirements" : "On-call duties", "qualificationsBasic" : "5-8 years IT/Cybersecurity experience, 3 years hands-on Delinea PAM, Implement PAM solutions enterprise, Experience Active Directory, MFA, Identity, Onboard privileged accounts Windows, Linux, databases, network devices, applications", "qualificationsPreferred" : "Delinea Certified Administrator, Delinea Secret Server Certification, Delinea Privilege Manager Certification, Microsoft Certified Certifications, CISSP, CISM, Security+", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "Müller's Solutions is seeking a skilled Privileged Access Management (PAM) Engineer to design, implement, and manage PAM solutions, ensuring secure access to critical systems and compliance with policies. The ideal candidate has hands-on experience with Delinea products such as Secret Server, Privilege Manager (EPM), Remote Access Service (PRA), and capabilities in password management, session monitoring, and privileged account governance. They will collaborate with infrastructure, security, application, and operations teams to maintain PAM controls aligned with cybersecurity best practices. **Key Responsibilities:** * Design, deploy, and maintain Delinea PAM solutions to secure privileged accounts across the enterprise. * Develop and enforce privileged access policies ensuring compliance with security standards. * Monitor access activities, analyze logs, and respond to security incidents. * Collaborate with IT, security, and audit teams to implement access controls and workflows. * Perform regular audits of privileged accounts to identify and mitigate risks. * Provide technical support, training, and documentation for PAM tools and best practices. * Integrate Delinea PAM with Microsoft Active Directory, Entra ID, LDAP, MFA, SIEM, and ITSM platforms. * Automate account onboarding, configure APIs, connectors, and support scripting for PAM administration. * Conduct discovery, onboarding, and migration of privileged accounts from legacy systems. * Implement PAM controls aligned with cybersecurity frameworks; support audit and compliance efforts. * Provide Level 2/3 support, troubleshoot issues, monitor platform performance, and participate in on-call duties. * Develop HLD/LLD documentation, implementation guides, SOPs, and conduct knowledge transfer sessions. **Requirements** **Requirements:** * Mandatory * • Minimum 5-8 years of IT/Cybersecurity experience. * • Minimum 3 years hands-on experience with Delinea PAM solutions. * • Experience implementing PAM solutions in large enterprise environments. * • Experience with Active Directory, MFA, and Identity integrations. * • Experience onboarding privileged accounts across Windows, Linux, databases, network devices, and * applications. * Education * • Bachelor's Degree in Computer Science, Information Technology, Cyber Security, or related field. **Certifications (Preferred)** At least one of the following: • Delinea Certified Administrator (Preferred) • Delinea Secret Server Certification • Delinea Privilege Manager Certification • Microsoft Certified Certifications • CISSP (Preferred) • CISM (Preferred) • Security+ (Preferred) **Benefits** 1- Attractive Package. 2- Family Benefits. 3- Visa. 4-Air Tickets.", "summaryDescription" : "Privileged Access Management(PAM) Engineer at Müller`s Solutions. Skills: Privileged Access Management, Delinea PAM, Cybersecurity. Design Delinea PAM solutions. Deploy Delinea PAM solutions", "postedDate" : "2026-06-12T00:00:00.000", "createdAt" : "2026-06-14T19:15:30.212", "lastUpdated" : "2026-06-15T21:47:28.753", "ingestTimestamp" : "2026-06-14T19:15:30.212", "mongoId" : "6a2c8bea74d8ee00a0974153", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://apply.workable.com/j/DE6F5FCDB3", "salaryBand" : "200k+", "hasSalary" : false, "allSkills" : [ "PAM solutions", "Privileged access policies", "Access monitoring", "Log analysis", "Security standards", "Cybersecurity best practices", "Audit compliance", "Scripting", "Privileged Access Management", "Delinea PAM", "Cybersecurity", "Privileged account governance", "Access controls", "Security incidents", "Risk mitigation", "Technical support", "Knowledge transfer", "Account onboarding", "PAM administration", "Platform performance", "Identity integrations", "MFA", "SIEM", "ITSM", "Delinea Certified Administrator", "Delinea Secret Server Certification", "Delinea Privilege Manager Certification", "Microsoft Certified Certifications", "CISSP", "CISM", "Security+", "Delinea Secret Server", "Delinea Privilege Manager", "Microsoft Active Directory", "Entra ID", "SIEM platforms", "ITSM platforms" ], "skillCount" : 37, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "mid", "dataQualityScore" : 1.0, "_score" : 1493.1082, "daysOld" : 3, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Cybersecurity", "llmIndustryConfidence" : 0.98 }, { "id" : "6a2c6a7f74d8ee00a090c379", "title" : "Director, Identity & Access Management", "company" : "Datavant", "industry" : "Technology", "salary" : { "min" : 215000.0, "max" : 315000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline data for Director, Identity & Access Management in the United States, adjusted for seniority, company size, and the healthcare industry." }, "location" : "Remote - United States", "locations" : [ "Remote - United States" ], "timestamp" : "2026-06-16T05:01:54.322", "fingerprint" : "42e0ad18bdbcdabe6fcc51ef258d91a63b70750609f4367c25450212a83a2d41", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://www.datavant.com/about/careers/open-roles/job?gh_jid=5251134008", "externalId" : "5251134008", "industryFunction" : { }, "structuredLocations" : [ { "country" : "United States", "continent" : "na", "workMode" : "remote" } ], "locationText" : "United States", "experienceLevel" : "Director", "remoteFriendly" : true, "workSiteFlexibility" : "Remote", "rawDescription" : "Datavant is the data collaboration platform trusted for healthcare. Guided by our mission to make the world’s health data secure, accessible and actionable, we provide critical data solutions for organizations across the healthcare ecosystem - including providers, health plans, researchers, and life sciences companies. From fulfilling a single patient’s request for their medical records to powering the AI revolution in healthcare, Datavanters are building the future of how data is connected and used to improve health. By joining Datavant today, you’re stepping onto a driven and highly collaborative team that is passionate about creating transformative change in healthcare. What We’re Looking For We are seeking an experienced Director to lead our Identity & Access Management (IAM) team with a strong focus on hands-on execution and team leadership. In this role, you will oversee the implementation and daily management of our IAM program, ensuring secure, efficient, and scalable access control for our users and systems. Leading a small team, you will work closely with internal stakeholders to support business objectives, manage access policies, and maintain compliance with security standards. What You Will Do: Own the development and implementation of an Identity Strategy spanning internal and external identities, including multiple user personas and non-human (agentic, bot, service, etc.) Manage and execute IAM solution technology implementations that align with company goals, ensuring reliable access control across systems and applications. Lead a small team of IAM specialists, providing mentorship, guidance, and hands-on support to drive efficient and secure operations. Implement IAM policies, standards, and procedures to maintain compliance with industry regulations and internal policies. Collaborate with IT and other departments to integrate IAM requirements seamlessly within business processes. Manage the selection of deployment of Identity tools and solutions where applicable, while overseeing the management of IAM tools, services and processes including IGA, PAM, MFA/Passwordless, IDPs, etc. Ensuring solutions and services are scalable and operationally effective. Regularly assess and improve IAM configurations and workflows to address evolving security needs and industry trends. Conduct periodic reviews and audits, implementing improvements based on findings to enhance security and compliance. Provide IAM-related support for IT security measures to safeguard user data, applications, and systems against unauthorized access. What You Need to Succeed: Proven experience in IAM management, including successful program implementation and execution. Strong knowledge of IAM processes, technologies, and compliance requirements (e.g., NIST, FedRAMP). Ability to lead a small, dedicated team, fostering collaboration, accountability, and professional growth. Excellent organizational and problem-solving skills, with an emphasis on attention to detail and execution. Relevant certifications such as CISSP, CISM, or similar are a plus. This role is ideal for a hands-on IAM professional who thrives in a fast-paced, results-driven environment and is committed to building a secure, efficient access management program. We are committed to building a diverse team of Datavanters who are all responsible for stewarding a high-performance culture in which all Datavanters belong and thrive. We are proud to be an Equal Employment Opportunity employer and all qualified applicants will receive consideration for employment without regard to race, color, sex, sexual orientation, gender identity, religion, national origin, disability, veteran status, or other legally protected status. At Datavant our total rewards strategy powers a high-growth, high-performance, health technology company that rewards our employees for transforming health care through creating industry-defining data logistics products and services. The range posted is for a given job title, which can include multiple levels. Individual rates for the same job title may differ based on their level, responsibilities, skills, and experience for a specific job. The estimated total cash compensation range for this role is: $180,000—$225,000 USD To ensure the safety of patients and staff, many of our clients require post-offer health screenings and proof and/or completion of various vaccinations such as the flu shot, Tdap, COVID-19, etc. Any requests to be exempted from these requirements will be reviewed by Datavant Human Resources and determined on a case-by-case basis. Depending on the state in which you will be working, exemptions may be available on the basis of disability, medical contraindications to the vaccine or any of its components, pregnancy or pregnancy-related medical conditions, and/or religion. This job is not eligible for employment sponsorship. Datavant is committed to a work environment free from job discrimination. We are proud to be an Equal Employment Opportunity employer and all qualified applicants will receive consideration for employment without regard to race, color, sex, sexual orientation, gender identity, religion, national origin, disability, veteran status, or other legally protected status. To learn more about our commitment, please review our EEO Commitment Statement here. Know Your Rights, explore the resources available through the EEOC for more information regarding your legal rights and protections. In addition, Datavant does not and will not discharge or in any other manner discriminate against employees or applicants because they have inquired about, discussed, or disclosed their own pay. At the end of this application, you will find a set of voluntary demographic questions. If you choose to respond, your answers will be anonymous and will help us identify areas for improvement in our recruitment process. (We can only see aggregate responses, not individual ones. In fact, we aren’t even able to see whether you’ve responded.) Responding is entirely optional and will not affect your application or hiring process in any way. Datavant is committed to working with and providing reasonable accommodations to individuals with physical and mental disabilities. If you need an accommodation while seeking employment, please request it here, by selecting the ‘Interview Accommodation Request’ category. You will need your requisition ID when submitting your request, you can find instructions for locating it here. Requests for reasonable accommodations will be reviewed on a case-by-case basis. For more information about how we collect and use your data, please review our Privacy Policy.", "summaryDescription" : "Director, Identity & Access Management at Datavant", "postedDate" : "2026-06-14T18:36:59.133", "createdAt" : "2026-06-14T18:36:59.133", "lastUpdated" : "2026-06-16T05:01:54.322", "ingestTimestamp" : "2026-06-14T18:36:59.133", "mongoId" : "6a2c6a7f74d8ee00a090c379", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 215000, "salaryAnnualMax" : 315000, "salaryBand" : "200k+", "hasSalary" : true, "allSkills" : [ ], "skillCount" : 0, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Director", "dataQualityScore" : 0.7777778, "_score" : 1482.5026, "daysOld" : 1, "hasLocation" : true, "hasGeo" : false, "llmIndustry" : "Healthcare", "llmIndustryConfidence" : 0.95 }, { "id" : "6a2c7c2a74d8ee00a094c81d", "title" : "Identity & Access Management (IAM) Apprentice", "company" : "Man Group", "industry" : "Banking", "salary" : { "min" : 25000.0, "max" : 35000.0, "currency" : "GBP", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for an entry-level IAM Apprentice in London, adjusted for the financial services industry and company size." }, "location" : "London", "locations" : [ "London" ], "timestamp" : "2026-06-16T00:52:45.988", "fingerprint" : "394c7e837751c97de2a42fbb486f955b99dd60e20012ba0aa40054a4365a6574", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://job-boards.eu.greenhouse.io/mangroup/jobs/4799146101", "externalId" : "4799146101", "industryFunction" : { }, "structuredLocations" : [ { "city" : "London", "country" : "United Kingdom", "continent" : "eu", "source" : "llm", "workMode" : "onsite", "geo" : "51.5074456,-0.1277653" } ], "locationText" : "London, United Kingdom", "employmentType" : "INTERNSHIP", "experienceMinYears" : 0, "experienceMaxYears" : 2, "experienceLevel" : "Entry", "coreResponsibilities" : "Support user access requests, Process day-to-day requests, Assist with Joiner, Mover, Leaver activities, Support access reviews, Prepare materials for reviews, Chase responses for reviews, Track outcomes of reviews, Respond to queries, Manage team inbox, Manage ticket queue, Manage Slack channel, Answer straightforward questions, Escalate complex queries, Support audits, Gather information for auditors, Contribute to documentation updates, Collaborate on team projects, Work on improvement work", "teamCollaboration" : "IAM team; Senior colleagues; Experienced IAM analysts", "domainKnowledge" : "Identity and Access Management; Financial services", "domainList" : [ "identity-and-access-management", "financial-services" ], "domainSpecificKnowledge" : [ "Identity and Access Management", "Financial services" ], "documentationSkills" : "Keep team documentation up to date", "continuousLearning" : "Study Level 3 Business Administrator qualification; Guidance from senior colleagues; Mentoring from senior colleagues", "specialRequirements" : "Unable to sponsor visas, Not for higher qualification holders", "qualificationsBasic" : "Level 3 Business Administrator apprenticeship", "remoteFriendly" : true, "workSiteFlexibility" : "Onsite", "rawDescription" : "About Man Group Man Group is a global alternative investment management firm focused on pursuing outperformance for sophisticated clients via our Systematic, Discretionary and Solutions offerings. Powered by talent and advanced technology, our single and multi-manager investment strategies are underpinned by deep research and span public and private markets, across all major asset classes, with a significant focus on alternatives. Man Group takes a partnership approach to working with clients, establishing deep connections and creating tailored solutions to meet their investment goals and those of the millions of retirees and savers they represent. Headquartered in London, we manage $227.6 billion* and operate across multiple offices globally. Man Group plc is listed on the London Stock Exchange under the ticker EMG.LN and is a constituent of the FTSE 250 Index. Further information can be found at www.man.com * As at 31 December 2025 Job Profile Summary: Join Man Group's Identity and Access Management (IAM) team as an Apprentice. IAM sits within the broader Information Security function and is responsible for making sure the right people have the right access to the right systems at the right time. This entry-level role is designed for individuals who are curious about technology, security and how a global financial services business works behind the scenes. Reporting to the IAM team, the Apprentice will learn on the job whilst studying the Level 3 Business Administrator apprenticeship. The 15-month programme (12 months of training plus a 3-month end-point assessment) covers business administration skills that will support the apprentice both in this role and throughout their career. We are looking for someone enthusiastic, well-organised and keen to learn. No prior technical knowledge is required — full training and support will be provided. Responsibilities: Support User Access Requests: Help process day-to-day requests for system access, working through tickets and following team processes to make sure requests are handled accurately and on time. Help with Joiner, Mover and Leaver Activities: Assist the team with setting up access for new starters, updating access when people change roles, and removing access when people leave the firm. Support Access Reviews: Help the team run regular reviews where managers check that their staff still need the access they have. This includes preparing materials, chasing responses and tracking outcomes. Respond to Queries: Help manage the team's inbox, ticket queue and Slack channel — answering straightforward questions and escalating anything more complex to senior colleagues. Support Audits and Documentation: Help gather information when auditors ask questions about access controls, and contribute to keeping team documentation and guides up to date. Additional Job Description About the Apprenticeship: The Apprentice will study the Level 3 Business Administrator qualification alongside the chosen training provider and will be given full support in achieving the qualification. This is a 15-month fixed-term apprenticeship role offered as part of Man Group's School Leaver Programme, with the potential to move into a full-time role following successful completion of the programme. Senior colleagues will provide guidance, mentoring and clear explanations along the way — no prior experience of IAM or specific tools is expected. Collaborate on Projects: Work alongside experienced IAM analysts on team projects and improvement work, gaining exposure to how identity and access management runs in a financial services firm. We are unfortunately unable to sponsor visas for this programme or provide this opportunity to individuals who already hold a similar qualification at a higher level than the apprenticeship associated with this programme. Key Skills if you require help or information on reasonable adjustments as you apply for roles with us, please contact TalentAcquisition@man.com.", "summaryDescription" : "Identity & Access Management (IAM) Apprentice at Man Group. Support user access requests. Process day-to-day requests", "postedDate" : "2026-06-14T20:11:29.415", "createdAt" : "2026-06-14T20:11:29.415", "lastUpdated" : "2026-06-16T00:52:45.988", "ingestTimestamp" : "2026-06-14T20:11:29.415", "mongoId" : "6a2c7c2a74d8ee00a094c81d", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "<30k", "hasSalary" : false, "allSkills" : [ "Identity and Access Management", "Financial services" ], "skillCount" : 2, "jobCategory" : "operations", "jobSubcategory" : "general", "seniorityLevel" : "Entry", "dataQualityScore" : 1.0, "_score" : 1389.1249, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Financial Services", "llmIndustryConfidence" : 0.9 }, { "id" : "69c909349bc74574cbb072ad", "title" : "Manager, Identity & Access Management (IAM)", "company" : "Pharmacy Data Management, Inc.", "industry" : "Healthcare", "salary" : { "min" : 135000.0, "max" : 185000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Manager, Identity & Access Management in Poland, United States, adjusted for the healthcare industry and manager-level seniority." }, "location" : "Poland, OH", "locations" : [ "Poland", "OH" ], "timestamp" : "2026-06-16T04:13:20.793", "fingerprint" : "d3112fb8e45f1c30176d8f9adbad0442e65412fd2a504c794c0ed38648475243", "source" : "breezyhr", "language" : "en", "applyUrl" : "https://pdmi.breezy.hr/p/a6e45100fcfa-manager-identity-access-management-iam", "externalId" : "a6e45100fcfa", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Poland", "state" : "Ohio", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "41.0242260,-80.6147950" } ], "locationText" : "Poland, Ohio, United States", "employmentType" : "FULL_TIME", "experienceLevel" : "Manager", "majorSkills" : "Program leadership, Technical expertise", "majorSkillsList" : [ "Program leadership", "Technical expertise" ], "coreResponsibilities" : "Lead strategy for enterprise IAM initiatives, Lead architecture for enterprise IAM initiatives, Lead delivery for enterprise IAM initiatives", "domainKnowledge" : "Identity security; On-premises environments; Multi-cloud environments", "domainList" : [ "identity-security", "on-premises-environments", "multi-cloud-environments" ], "domainSpecificKnowledge" : [ "Identity security", "On-premises environments", "Multi-cloud environments" ], "remoteFriendly" : true, "workSiteFlexibility" : "Onsite", "rawDescription" : "PDMI is looking for a Manager, Identity & Access Management (IAM) to lead the strategy, architecture, and delivery of enterprise IAM initiatives across on-premises and multi-cloud environments. This role blends deep technical expertise in identity security with strong program leadership to stre", "summaryDescription" : "Manager, Identity & Access Management (IAM) at Pharmacy Data Management, Inc.. Skills: Program leadership, Technical expertise. Lead strategy for enterprise IAM initiatives. Lead architecture for enterprise IAM initiatives", "createdAt" : "2026-06-14T18:49:03.291", "lastUpdated" : "2026-06-16T04:13:20.793", "ingestTimestamp" : "2026-06-14T18:49:03.291", "mongoId" : "69c909349bc74574cbb072ad", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 135000, "salaryAnnualMax" : 185000, "salaryBand" : "100k-150k", "hasSalary" : true, "allSkills" : [ "Program leadership", "Technical expertise", "Identity security", "On-premises environments", "Multi-cloud environments" ], "skillCount" : 5, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Manager", "dataQualityScore" : 0.8888889, "_score" : 1377.9814, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Healthcare", "llmIndustryConfidence" : 0.95 }, { "id" : "6a2a929074d8ee00a06915ad", "title" : "Identity and Access Management Engineer", "company" : "Everpure", "industry" : "Technology", "salary" : { "min" : 1500000.0, "max" : 2500000.0, "currency" : "INR", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for an Identity and Access Management Engineer in Bangalore, India, adjusted for mid-seniority and the technology industry." }, "location" : "Bangalore, India", "locations" : [ "Bangalore", "India" ], "timestamp" : "2026-06-14T19:35:30.013", "fingerprint" : "7d0786672e5cb58ce8c846688c0068aa9cc22f7b1392b8aea48104b6581849fa", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://job-boards.greenhouse.io/purestorage/jobs/7988992", "externalId" : "7988992", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Bangalore", "country" : "India", "continent" : "as", "source" : "llm", "workMode" : "onsite", "geo" : "12.9767936,77.5900820" } ], "locationText" : "Bangalore, India", "technicalSkills" : "Okta, SAML, OAuth, OIDC, SCIM, Python, PowerShell, Terraform, Ansible, Git, Splunk, Datadog", "professionalSkills" : [ "Application onboarding", "Lifecycle management", "Zero-Trust architecture", "Least-Privilege architecture", "Role-based access controls", "Infrastructure integrity", "Root-cause analysis", "GitOps workflows", "Infrastructure-as-code" ], "hardSkillsList" : [ "Identity federation", "Automation architectures", "API integration", "User provisioning", "Configuration management", "System health monitoring", "Authentication pathways" ], "softSkillsList" : [ "Innovation", "Critical thinking", "Analytical mindset" ], "hardSkills" : [ { "name" : "Identity federation", "level" : "intermediate" }, { "name" : "Automation architectures", "level" : "intermediate" }, { "name" : "API integration", "level" : "intermediate" }, { "name" : "User provisioning", "level" : "intermediate" }, { "name" : "Configuration management", "level" : "intermediate" }, { "name" : "System health monitoring", "level" : "intermediate" }, { "name" : "Authentication pathways", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Innovation" }, { "name" : "Critical thinking" }, { "name" : "Analytical mindset" } ], "majorSkills" : "Automation, Zero-Trust, Infrastructure-as-code", "majorSkillsList" : [ "Automation", "Zero-Trust", "Infrastructure-as-code" ], "coreResponsibilities" : "Implement and support IAM solutions, Own application onboarding, Design secure configurations for integrations, Automate workforce identity lifecycle management, Engineer automated joiner, mover, and leaver processes, Enforce zero-trust and least-privilege architecture, Author and maintain access governance policies, Establish uncompromised perimeter, Build monitoring and alerting, Perform root-cause analysis on degradation, Implement GitOps workflows, Implement infrastructure-as-code, Remove manual configurations", "teamCollaboration" : "Enterprise IAM team; Security compliance; Infrastructure teams; Cross-functional business units; Non-technical internal partners", "projectManagementSkills" : [ "GitOps workflows" ], "domainKnowledge" : "Identity and Access Management; Cloud-native identity platforms; Identity federation; Automation workflows; SaaS integration; On-prem integration; Zero-Trust model; Least-privilege principle; Modern IAM protocols", "domainList" : [ "identity-and-access-management", "cloud-native-identity-platforms", "identity-federation", "automation-workflows", "saas-integration", "on-prem-integration", "zero-trust-model", "least-privilege-principle", "modern-iam-protocols" ], "domainSpecificKnowledge" : [ "Identity and Access Management", "Cloud-native identity platforms", "Identity federation", "Automation workflows", "SaaS integration", "On-prem integration", "Zero-Trust model", "Least-privilege principle", "Modern IAM protocols" ], "toolProficiency" : [ "Okta", "Lumos", "Terraform", "Ansible", "Git", "Splunk", "Datadog" ], "communicationSkills" : "Agile communication", "documentationSkills" : "Technical runbooks", "innovationCreativity" : "Innovative thinking", "problemSolvingSkills" : "Diagnostic capabilities; Root-cause analysis", "outcomesObjectives" : "Secure and scale workforce environment; Transform secure access; Eliminate operational friction; Enforce zero-trust model; Deliver secure authentication outcomes; Safeguard corporate data; Scale enterprise-grade identity ecosystem; Slash provisioning turnaround times; Eliminate manual overhead; Secure day-one productivity; Establish uncompromised perimeter; Minimize MTTR; Scale identity workflows", "qualificationsBasic" : "Hands-on experience building, scaling, and maintaining enterprise-grade IAM processes utilizing Okta or similar modern cloud-native identity platforms, Comprehensive expertise utilizing and troubleshooting identity federation and automation architectures, including deep familiarity with OAuth, SAML, OIDC, and API-driven SCIM patterns, Familiarity with APIs, JSON, and automation workflows for system integration, Comprehensive expertise supporting SSO, MFA, User Provisioning and Lifecycle Management, Experience integrating SaaS and on-prem applications with IAM systems, Proficient capabilities writing structured automation logic using languages like Python or PowerShell, Understanding of configuration management toolsets like Terraform or Ansible, Solid operational experience leveraging Git-based version control workflows, Systematic approach to system health monitoring through observability platforms such as Splunk or Datadog, Exceptional diagnostic capabilities to decouple convoluted authentication pathways, Agile communication style to guide non-technical internal partners smoothly through application onboarding initiatives", "qualificationsPreferred" : "Kubernetes experience a plus", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "We’re in an unbelievably exciting area of tech and are fundamentally reshaping the data storage industry. Here, you lead with innovative thinking, grow along with us, and join the smartest team in the industry. This type of work—work that changes the world—is what the tech industry was founded on. So, if you're ready to seize the endless opportunities and leave your mark, come join us. THE ROLE As an Identity and Access Management (IAM) Engineer at Everpure, you will secure and scale our workforce environment by transforming how our global team securely accesses critical systems. Operating within our Enterprise IAM team in Bengaluru, you will own the end-to-end integration of corporate applications, engineering seamless automated lifecycles that eliminate operational friction and enforce a zero-trust model. In this highly collaborative position, you will act as a vital bridge between security compliance, infrastructure, and cross-functional business units to deliver secure authentication outcomes. By engineering robust single sign-on (SSO) and automated lifecycle systems, you directly safeguard Everpure’s corporate data while scaling an elite, enterprise-grade identity ecosystem. WHAT YOU’LL DO IAM Implementation: Implement and support IAM solutions for enterprise workforce and applications Own Application Onboarding and Lifecycle Engineering: Design, build, and support secure configurations for enterprise application integrations leveraging modern IAM standard protocols (SAML, OAuth, OIDC, and SCIM) to scale our identity footprint safely. Automate Workforce Identity Lifecycle Management: Programmatically engineer automated joiner, mover, and leaver (JML) processes using Okta/ Lumos and scripting tools to slash provisioning turnaround times, eliminate manual overhead, and secure day-one productivity. Enforce Zero-Trust and Least-Privilege Architecture: Author and maintain fine-grained access governance policies, role-based access controls (RBAC), Single Sign On and multi-factor authentication (MFA) parameters to establish an uncompromised perimeter across workforce environments. Optimize Service Reliability and Infrastructure Integrity: Build robust monitoring, alerting, and comprehensive technical runbooks to perform root-cause analysis on complex authentication or automated workflow degradation, driving minimized MTTR (Mean Time to Resolution). Eradicate Technical Debt Through Code: Shift operational paradigms by implementing GitOps workflows and infrastructure-as-code (Terraform) to scale identity workflows, removing brittle, manual configurations across the enterprise environment. Work Location Commitment: We are primarily an in-office environment and therefore, you will be expected to work from the Bengaluru office in compliance with Everpure’s policies, unless you are on PTO, or work travel, or other approved leave. WHAT YOU BRING Core Identity and Access Management Competency: Hands-on experience building, scaling, and maintaining enterprise-grade IAM processes utilizing Okta or similar modern cloud-native identity platforms. Technical Protocol Mastery: Comprehensive expertise utilizing and troubleshooting identity federation and automation architectures, including deep familiarity with OAuth, SAML, OIDC, and API-driven SCIM patterns. Familiarity with APIs, JSON, and automation workflows for system integration IAM Process Mastery - Comprehensive expertise supporting SSO, MFA, User Provisioning and Lifecycle Management. Experience integrating SaaS and on-prem applications with IAM systems. Automation and Infrastructure-as-Code Acumen: Proficient capabilities writing structured automation logic using languages like Python or PowerShell, coupled with an understanding of configuration management toolsets like Terraform or Ansible to drive predictable deployments. Modern DevOps and Observability Fundamentals: Solid operational experience leveraging Git-based version control workflows paired with a systematic approach to system health monitoring through observability platforms such as Splunk or Datadog. Collaboration and Analytical Mindset: Exceptional diagnostic capabilities to decouple convoluted authentication pathways, alongside an agile communication style that allows you to guide non-technical internal partners smoothly through application onboarding initiatives. WHAT YOU CAN EXPECT FROM US: Innovation: We celebrate those who think critically, like a challenge, and aspire to be trailblazers. Growth: We give you the space and support to grow along with us and to contribute to something meaningful. We have been named Fortune's Best Workplaces in Technology™, Fortune's Best Workplaces in the Bay Area™, and certified as a Great Place to Work®! Team: We build each other up and set aside ego for the greater good. And because we understand the value of bringing your full and best self to work, we offer a variety of perks to manage a healthy balance, including flexible time off, wellness resources, and company-sponsored team events. Check out purebenefits.com for more information. ACCOMMODATIONS AND ACCESSIBILITY: Candidates with disabilities may request accommodations for all aspects of our hiring process. For more on this, contact us at TA-Ops@purestorage.com if you’re invited to an interview. OUR COMMITMENT TO A STRONG AND INCLUSIVE TEAM: We’re forging a future where everyone finds their rightful place and where every voice matters. Where uniqueness isn’t just accepted but embraced. That’s why we are committed to fostering the growth and development of every person, cultivating a sense of community through our Employee Resource Groups and advocating for inclusive leadership. Everpure is proud to be an equal opportunity employer. We do not discriminate based upon race, religion, color, national origin, sex (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender, gender identity, gender expression, transgender status, sexual stereotypes, age, status as a protected veteran, status as an individual with a disability, or any other characteristic legally protected by the laws of the jurisdiction in which you are being considered for hire. Join us and bring your best. Bring your bold. Pure and simple.", "summaryDescription" : "Identity and Access Management Engineer at Everpure. Skills: Automation, Zero-Trust, Infrastructure-as-code. Implement and support IAM solutions. Own application onboarding", "postedDate" : "2026-06-12T00:47:32.464", "createdAt" : "2026-06-12T00:47:32.464", "lastUpdated" : "2026-06-14T19:35:30.013", "ingestTimestamp" : "2026-06-12T00:47:32.464", "mongoId" : "6a2a929074d8ee00a06915ad", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "200k+", "hasSalary" : false, "allSkills" : [ "Identity federation", "Automation architectures", "API integration", "User provisioning", "Configuration management", "System health monitoring", "Authentication pathways", "Innovation", "Critical thinking", "Analytical mindset", "Automation", "Zero-Trust", "Infrastructure-as-code", "Application onboarding", "Lifecycle management", "Zero-Trust architecture", "Least-Privilege architecture", "Role-based access controls", "Infrastructure integrity", "Root-cause analysis", "GitOps workflows", "Identity and Access Management", "Cloud-native identity platforms", "Automation workflows", "SaaS integration", "On-prem integration", "Zero-Trust model", "Least-privilege principle", "Modern IAM protocols", "Okta", "Lumos", "Terraform", "Ansible", "Git", "Splunk", "Datadog" ], "skillCount" : 36, "jobCategory" : "other", "jobSubcategory" : "it", "dataQualityScore" : 0.7777778, "_score" : 1362.1621, "daysOld" : 2, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology" }, { "id" : "6a3055d5f292fd229cf2213e", "title" : "Senior Identity and Access Management (IAM) Engineer", "company" : "Zelis", "salary" : { "min" : 2200000.0, "max" : 3500000.0, "currency" : "INR", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market data for Senior Identity and Access Management (IAM) Engineer in India, adjusted for seniority, industry, and company size." }, "location" : "India", "locations" : [ "India" ], "timestamp" : "2026-06-16T15:07:36.926", "fingerprint" : "7db21c1bc465b3bbfc86fbc9cbf78ff15bd94a654283e513cfdc5f1ec1ecc6c4", "source" : "workday", "language" : "en", "applyUrl" : "https://zelis.wd1.myworkdayjobs.com/ZelisCareers/job/India-Hyderabad/Senior-Identity-and-Access-Management--IAM--Engineer_JR110900", "externalId" : "JR110900", "industryFunction" : { }, "locationPoint" : "20.5937,78.9629", "structuredLocations" : [ { "country" : "India", "continent" : "as", "workMode" : "onsite" } ], "locationText" : "India", "employmentType" : "FULL_TIME", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "remoteFriendly" : true, "workSiteFlexibility" : "Remote", "rawDescription" : "**About Us** Zelis is modernizing the healthcare financial experience in the United States (U.S.) across payers, providers, and healthcare consumers. We serve more than 750 payers, including the top five national health plans, regional health plans, TPAs and millions of healthcare providers and consumers across our platform of solutions. Zelis sees across the system to identify, optimize, and solve problems holistically with technology built by healthcare experts – driving real, measurable results for clients. At Zelis, AI is woven into the fabric of how we work. Every associate is expected - and empowered - to partner with AI to challenge the status quo, accelerate innovation, and amplify their impact. This is a place for builders with a growth mindset who act with agility, embrace change, and use modern technology to shape smarter solutions, exceptional experiences, and the future of our industry for our clients, customers, and our culture. **Why We Do What We Do** In the U.S., consumers, payers, and providers face significant challenges throughout the healthcare financial journey. Zelis helps streamline the process by offering solutions that improve transparency, efficiency, and communication among all parties involved. By addressing the obstacles that patients face in accessing care, navigating the intricacies of insurance claims, and the logistical challenges healthcare providers encounter with processing payments, Zelis aims to create a more seamless and effective healthcare financial system. Zelis India plays a crucial role in this mission by supporting various initiatives that enhance the healthcare financial experience. The local team contributes to the development and implementation of innovative solutions, ensuring that technology and processes are optimized for efficiency and effectiveness. Beyond operational expertise, Zelis India cultivates a collaborative work culture, leadership development, and global exposure, creating a dynamic environment for professional growth. With hybrid work flexibility, comprehensive healthcare benefits, financial wellness programs, and cultural celebrations, we foster a holistic workplace experience. Additionally, the team plays a vital role in maintaining high standards of service delivery and contributes to Zelis’ award-winning culture. **Position Overview** We are seeking a highly skilled and motivated Senior Identity and Access Management (IAM) Engineer to join our Information Security team. The ideal candidate will primarily be responsible for managing and optimizing our Privileged Access Management (PAM) solution to ensure the security and integrity of our organization’s privileged accounts. This role will also involve a secondary focus on IAM and Identity Governance and Administration (IGA). Key responsibilities include the daily administration and continuous improvement of Zelis’s PAM environment, as well as collaboration with the IAM team for identity management through the Zelis IGA tool. Additionally, this role requires collaboration with the broader Security Engineering team, which oversees all security platforms across Zelis. Key Responsibilities * CyberArk Administration: Manage the deployment, configuration, and maintenance of CyberArk Privilege Cloud, including the Central Policy Manager (CPM), Password Vault, and Privileged Session Manager (PSM). * CyberArk Engineering: Build and maintain integrations between CyberArk and third-party applications to enable remote access (RDP, SSH, etc.) and credential rotation * Identity and Access Management: Administer accounts, groups and services related to identity and access in Active Directory, Microsoft Azure/Entra, and Cisco Duo. * Identity Governance: Assist with configuration and management of SailPoint for mover/joiner/leaver scenarios and governance of all Zelis applications and associates * Policy Implementation: Implement and enforce policies and procedures for IAM to align with corporate guidelines, industry best practices and regulatory requirements. * Documentation: Maintain documentation for IAM configurations and procedures. * Training and Support: Provide training and support to other Zelis IT staff and business units on best practices for IAM and PAM. * Continuous Improvement: Stay up to date with the latest security trends and product updates. Identify opportunities for process improvements and implement enhancements. Required Qualifications * Education: Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related field. * Experience: 7+ years of experience with CyberArk Privilege Cloud, SailPoint, Microsoft Azure/Entra, Active Directory, or similar IAM/PAM tools * Certifications: CISSP, CISM or other relevant industry certifications are a plus. Technical Skills: * In-depth knowledge of CyberArk solutions and components. * In-depth knowledge of Active Directory * Experience with privileged access management, identity management, identity governance and security controls. * Experience with Single Sign On (SSO) and related protocols. * Familiarity with scripting languages (e.g., PowerShell, Python), REST APIs and API based authentication. Desired Skills * Analytical Skills: Strong problem-solving abilities and attention to detail. * Communication Skills: Excellent verbal and written communication skills, with the ability to convey technical concepts to non-technical stakeholders. * Project Management: Ability to manage multiple tasks and projects simultaneously, prioritize effectively, and meet deadlines. **Commitment to Diversity, Equity, Inclusion, and Belonging** At Zelis, we champion diversity, equity, inclusion, and belonging in all aspects of our operations. We embrace the power of diversity and create an environment where people can bring their authentic and best selves to work. We know that a sense of belonging is key not only to your success at Zelis, but also to your ability to bring your best each day. **Equal Employment Opportunity** Zelis is proud to be an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws. **Accessibility Support** We are dedicated to ensuring our application process is accessible to all candidates. If you are a qualified individual with a disability and require reasonable accommodation with any part of the application and/or interview process, please email [_talentacquisition @zelis.com_](mailto:talentacquisition@zelis.com?subject=Accessibility%20Support%20Request).", "summaryDescription" : "Senior Identity and Access Management (IAM) Engineer at Zelis", "postedDate" : "2026-06-16T03:47:22.552", "createdAt" : "2026-06-16T03:47:22.548", "lastUpdated" : "2026-06-16T15:07:36.926", "ingestTimestamp" : "2026-06-16T03:47:22.548", "mongoId" : "6a3055d5f292fd229cf2213e", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://zelis.wd1.myworkdayjobs.com/ZelisCareers/job/India-Hyderabad/Senior-Identity-and-Access-Management--IAM--Engineer_JR110900", "salaryBand" : "200k+", "hasSalary" : false, "allSkills" : [ ], "skillCount" : 0, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "senior", "dataQualityScore" : 0.8888889, "_score" : 1360.8375, "daysOld" : 0, "hasLocation" : true, "hasGeo" : false, "llmIndustry" : "Healthcare", "llmIndustryConfidence" : 0.95 }, { "id" : "6a30554df292fd229cf1ed69", "title" : "Senior Professional System Platform Engineer (w/m/d) Privileged Access Management", "company" : "R+V Allgemeine Versicherung AG", "industry" : "Insurance", "salary" : { "min" : 85000.0, "max" : 115000.0, "currency" : "EUR", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "The estimated salary is based on 2024-2025 market data for a Senior Professional System Platform Engineer in the Insurance industry in Wiesbaden, Germany, with adjustments for seniority and company size." }, "location" : "Wiesbaden, HE, Germany", "locations" : [ "Wiesbaden", "HE", "Germany" ], "certifications" : [ "Defender Level", "Sentry Level" ], "timestamp" : "2026-06-16T07:33:05.892", "fingerprint" : "95dd0642966645a26df391eae721b57e1f089d058c749598852d3bd3a511092d", "source" : "smartrecruiters", "language" : "de", "applyUrl" : "https://jobs.smartrecruiters.com/RVAllgemeineVersicherungenAG/744000132129294-senior-professional-system-platform-engineer-w-m-d-privileged-access-management", "externalId" : "744000132129294", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Wiesbaden", "state" : "Hesse", "country" : "Germany", "continent" : "eu", "source" : "llm", "workMode" : "hybrid", "geo" : "50.0820384,8.2416556" } ], "locationText" : "Wiesbaden, Hesse, Germany", "employmentType" : "FULL_TIME", "minimumEducation" : "Bachelor's", "experienceMinYears" : 2, "experienceMaxYears" : 5, "experienceLevel" : "mid", "technicalSkills" : "MS Windows, Linux, Active Directory, GPOs, PKI, Zertifikaten, CyberArk, Selenium, AutoIT, PowerShell, HTML, Java-Script", "professionalSkills" : [ "System design", "Market observation" ], "hardSkillsList" : [ "Privileged Access Management", "CyberArk Vault", "CyberArk PSM", "CyberArk CPM", "Hardening mechanisms" ], "softSkillsList" : [ "Innovationsvermögen", "Konzeptionelle Stärke" ], "hardSkills" : [ { "name" : "Privileged Access Management", "level" : "intermediate" }, { "name" : "CyberArk Vault", "level" : "intermediate" }, { "name" : "CyberArk PSM", "level" : "intermediate" }, { "name" : "CyberArk CPM", "level" : "intermediate" }, { "name" : "Hardening mechanisms", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Innovationsvermögen" }, { "name" : "Konzeptionelle Stärke" } ], "majorSkills" : "Privileged Access Management, CyberArk, System platform engineering", "majorSkillsList" : [ "Privileged Access Management", "CyberArk", "System platform engineering" ], "coreResponsibilities" : "Develop solutions for IT infrastructure, Develop solutions for high-availability IT infrastructure, Develop strategic direction for Privileged Access Management, Develop CyberArk System, Integrate CyberArk components, Integrate critical applications, Advise internal customers, Clarify customer requirements, Manage external service providers, Expand CyberArk infrastructure, Operate CyberArk infrastructure", "teamCollaboration" : "Agile Release Train Plattform; Agile Release Train Infrastruktur", "projectManagementSkills" : [ "Agile" ], "domainKnowledge" : "Privileged Access Management; CyberArk architecture; On-prem environments", "domainList" : [ "privileged-access-management", "cyberark-architecture", "on-prem-environments" ], "domainSpecificKnowledge" : [ "Privileged Access Management", "CyberArk architecture", "On-prem environments" ], "toolProficiency" : [ "CyberArk" ], "communicationSkills" : "Customer consulting", "continuousLearning" : "External qualification measures", "innovationCreativity" : "Neuentwicklungen; Innovationen", "problemSolvingSkills" : "Abstraktionsvermögen", "qualificationsBasic" : "Studienabschluss in Informatik/Wirtschaftsinformatik, Vergleichbare Berufserfahrung, Berufserfahrung im Bereich Privileged Access Management, Kenntnisse in MS Windows, Kenntnisse in Linux", "qualificationsPreferred" : "Knowhow bzgl. Active Directory, Knowhow bzgl. GPOs, Knowhow bzgl. PKI, Knowhow bzgl. Zertifikaten, Zertifizierung auf Defender Level, Zertifizierung auf Sentry Level, Erfahrungen in der Entwicklung von CyberArk CPM Plugins, Erfahrungen in der Entwicklung von PSM Connection Components", "remoteFriendly" : false, "workSiteFlexibility" : "Flexible", "rawDescription" : "Lass uns gemeinsam neue Wege gehen! Denn genau das tun wir bei der R+V, einem der größten Versicherer Deutschlands. Willkommen im Ressort Operations und IT, in dem die R+V alle kundennahen Operations-Einheiten und die IT bündelt. Ziel ist es, Prozesse und technische Voraussetzungen so zu verbessern, dass die R+V Kundenanliegen schneller, effizienter und digitaler bearbeiten kann. Innovative Technologien und unsere vielfältige Systemlandschaft bieten Möglichkeiten für fachliche und persönliche Entwicklung. * Du bist Teil des Agile Release Trains „Plattform und Infrastruktur“, der die Konzeption, Umsetzung, Wartung und Optimierung unserer Basisinfrastruktur, Cloud Plattform und Middleware verantwortet. * Gekonnt erarbeitest Du Lösungen für eine komplexe und hochverfügbare IT-Infrastruktur. * Als verantwortlicher System Platform Engineer arbeitest Du an der strategischen Weiterentwicklung des Privileged Access Management System CyberArk. Der Schwerpunkt Deiner Tätigkeit sind dabei Aufbau, Pflege und Erweiterung von CPM- und PSM-Komponenten zur Integration von Umsystemen und kritisch-wichtigen Anwendungen. * Zu Deinen Aufgaben gehört zudem die Beratung und Klärung von Anforderungen interner Kunden sowie die Steuerung externer Dienstleister. * Ein weiterer wichtiger Baustein Deiner Tätigkeit ist der konzeptionelle Ausbau und der Betrieb der CyberArk Infrastruktur. * Deine Expertise in puncto Technik und Kooperation wendest Du versiert an und kannst idealerweise auf Erfahrung in technischen Veränderungsprozessen zurückgreifen und durch Marktbeobachtung entsprechende Ableitungen für Neuentwicklungen und Innovationen tätigen. ## Qualifications * Du verfügst über einen Studienabschluss in Informatik/Wirtschaftsinformatik oder einem ähnlichen Fachgebiet oder bringst vergleichbare Berufserfahrung mit. * Du kannst relevante Berufserfahrung im Bereich Privileged Access Management vorweisen. * Fundierte Kenntnisse in den Betriebssystemen MS Windows und Linux zeichnen Dich aus. Idealerweise bringst Du darüber hinaus Knowhow bzgl.Active Directory, GPOs, PKI und Zertifikaten mit. * Deine Kenntnisse und Betriebserfahrungen mit der Software CyberArk (Vault-, PSM- und CPM-Architektur, Hardening-Mechanismen, Plattformen) konntest du ggf. sogar auf „Defender“ oder „Sentry“ Level“ für on-prem Umgebungen zertifizieren. * Bestenfalls konntest du in der Vergangenheit bereits Erfahrungen in der Entwicklung von CyberArk CPM Plugins und PSM Connection Components und den dafür benötigten Technologien (Selenium, CyberArk Plugin Frameworks, AutoIT, PowerShell, Webbrowser-Technologien wie HTML und Java-Script) sammeln. * Eine eigenverantwortliche und strukturierte Arbeitsweise kombiniert mit Abstraktions- und Innovationsvermögen ist für Dich genauso selbstverständlich wie deine konzeptionelle Stärke. * Du verfügst über sehr gute Deutsch- und Englischkenntnisse in Wort und Schrift (mindestens B2). ## Additional Information Homeoffice: Flexible Arbeitszeiten im Homeoffice und Büro. Mehr Infos zu unserem hybriden Arbeiten findest Du [hier](https://www.ruv.de/karriere/blog/HomeOffice-bei-ruv). Arbeitszeiten: Standardmäßig 38h-Woche, Zeiterfassungssystem, Gleitzeit & Lebensarbeitszeitkonto. Urlaub: 30 Tage Urlaub & zusätzliche arbeitsfreie Tage (24.12. und 31.12.). Vergütung: 14 Monatsgehälter (inkl. Weihnachts- & Urlaubsgeld) oder Teilnahme am variablen Vergütungssystem, Sonderzahlungen, Mitarbeitertarife & Rabattaktionen. Gesundheit: Betriebliche Altersvorsorge & Gesundheitsmanagement mit vielfältigen Angeboten. Unser hauseigenes Fitnessstudio und ein breites Netzwerk von Sportangeboten (Wellpass) stehen Dir zudem online und bundesweit zur Verfügung. Mobilität: Jobticket, Jobrad/Fahrradleasing, verkehrsgünstige Lage mit überdachten Fahrradparkplätzen. Familie & Beruf: Eltern-Kind-Büros, Kindernotfallbetreuung, eigene Kindertagespflege „Raiffeisenzwerge“ sowie Pflegenetzwerk & Unterstützung durch die R+V-Sozialberatung. Kulinarik: Gesunde & ausgewogene Speisen in unserem Betriebsrestaurant. Weiterentwicklung: Förderung & Weiterentwicklung durch die R+V Akademie. Die Übernahme externer Qualifizierungsmaßnahmen komplettiert Deine persönliche sowie fachliche Entwicklung. Kultur: Wir leben Gemeinschaft. Unser Motto „Was einer nicht schafft, schaffen viele“ spiegelt sich auch in unseren Teams und dem täglichen Miteinander wider.", "summaryDescription" : "Senior Professional System Platform Engineer (w/m/d) Privileged Access Management at R+V Allgemeine Versicherung AG. Skills: Privileged Access Management, CyberArk, System platform engineering. Develop solutions for IT infrastructure. Develop solutions for high-availability IT infrastructure", "postedDate" : "2026-06-15T07:36:06.000", "createdAt" : "2026-06-15T23:41:59.223", "lastUpdated" : "2026-06-16T07:33:05.892", "ingestTimestamp" : "2026-06-15T23:41:59.223", "mongoId" : "6a30554df292fd229cf1ed69", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "75k-100k", "hasSalary" : false, "allSkills" : [ "Privileged Access Management", "CyberArk Vault", "CyberArk PSM", "CyberArk CPM", "Hardening mechanisms", "Innovationsvermögen", "Konzeptionelle Stärke", "CyberArk", "System platform engineering", "System design", "Market observation", "Agile", "CyberArk architecture", "On-prem environments", "Defender Level", "Sentry Level" ], "skillCount" : 16, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Senior", "dataQualityScore" : 1.0, "_score" : 1348.0387, "daysOld" : 0, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Insurance", "llmIndustryConfidence" : 0.95 }, { "id" : "6a2c62f974d8ee00a08f7cf6", "title" : "Professional System Platform Engineer (w/m/d) Privileged Access Management", "company" : "R+V Allgemeine Versicherung AG", "industry" : "Insurance", "salary" : { "min" : 65000.0, "max" : 85000.0, "currency" : "EUR", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Mid-level System Platform Engineer in the Insurance industry in Wiesbaden, Germany, adjusted for company size and specific role." }, "location" : "Wiesbaden, HE, Germany", "locations" : [ "Wiesbaden", "HE", "Germany" ], "timestamp" : "2026-06-15T06:35:05.182", "fingerprint" : "4eb5fecae8839bd6b6c8c125181efea7a52591fb9dcc8b25fad9641bcdfa53cb", "source" : "smartrecruiters", "language" : "de", "applyUrl" : "https://jobs.smartrecruiters.com/RVAllgemeineVersicherungenAG/744000131880988-professional-system-platform-engineer-w-m-d-privileged-access-management", "externalId" : "744000131880988", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Wiesbaden", "state" : "Hesse", "country" : "Germany", "continent" : "eu", "source" : "llm", "workMode" : "hybrid", "geo" : "50.0820384,8.2416556" } ], "locationText" : "Wiesbaden, Hesse, Germany", "employmentType" : "FULL_TIME", "experienceMinYears" : 2, "experienceMaxYears" : 5, "experienceLevel" : "mid", "technicalSkills" : "CyberArk", "professionalSkills" : [ "System design", "Konzeptionelle Stärke" ], "hardSkillsList" : [ "Privileged Access Management" ], "softSkillsList" : [ "Eigenverantwortliche Arbeitsweise", "Strukturierte Arbeitsweise", "Innovationsvermögen" ], "hardSkills" : [ { "name" : "Privileged Access Management", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Eigenverantwortliche Arbeitsweise" }, { "name" : "Strukturierte Arbeitsweise" }, { "name" : "Innovationsvermögen" } ], "majorSkills" : "Privileged Access Management, CyberArk", "majorSkillsList" : [ "Privileged Access Management", "CyberArk" ], "coreResponsibilities" : "Verantworten Basisinfrastruktur, Verantworten Cloud Plattform, Verantworten Middleware, Erarbeiten Lösungen IT-Infrastruktur, Arbeiten betriebliche Aufgaben, Aufbau CPM Komponenten, Pflege CPM Komponenten, Erweiterung CPM Komponenten, Aufbau PSM Komponenten, Pflege PSM Komponenten, Erweiterung PSM Komponenten, Integration Umsystemen, Integration kritisch-wichtigen Anwendungen, Beratung interne Kunden, Klärung Anforderungen interne Kunden, Zusammenarbeit externe Dienstleister, Mitarbeit konzeptionellen Ausbau CyberArk Infrastruktur", "teamCollaboration" : "Agile Release Train; Plattform und Infrastruktur", "projectManagementSkills" : [ "Agile" ], "domainKnowledge" : "Privileged Access Management; IT-Infrastruktur; CyberArk Infrastruktur", "domainList" : [ "privileged-access-management", "it-infrastruktur", "cyberark-infrastruktur" ], "domainSpecificKnowledge" : [ "Privileged Access Management", "IT-Infrastruktur", "CyberArk Infrastruktur" ], "toolProficiency" : [ "CyberArk" ], "continuousLearning" : "Weiterentwicklung; Externe Qualifizierungsmaßnahmen", "innovationCreativity" : "Innovationsvermögen", "problemSolvingSkills" : "Abstraktionsvermögen", "qualificationsBasic" : "Studienabschluss in Informatik, Vergleichbare Berufserfahrung, Erste Berufserfahrung Privileged Access Management, Kenntnisse MS Windows, Kenntnisse Linux, Sehr gute Deutschkenntnisse, Sehr gute Englischkenntnisse", "qualificationsPreferred" : "Knowhow Active Directory, Knowhow GPOs, Knowhow PKI, Knowhow Zertifikaten", "remoteFriendly" : false, "workSiteFlexibility" : "Hybrid", "rawDescription" : "Lass uns gemeinsam neue Wege gehen! Denn genau das tun wir bei der R+V, einem der größten Versicherer Deutschlands. Willkommen im Ressort Operations und IT, in dem die R+V alle kundennahen Operations-Einheiten und die IT bündelt. Ziel ist es, Prozesse und technische Voraussetzungen so zu verbessern, dass die R+V Kundenanliegen schneller, effizienter und digitaler bearbeiten kann. Innovative Technologien und unsere vielfältige Systemlandschaft bieten Möglichkeiten für fachliche und persönliche Entwicklung. * Du bist Teil des Agile Release Trains „Plattform und Infrastruktur“, der die Konzeption, Umsetzung, Wartung und Optimierung unserer Basisinfrastruktur, Cloud Plattform und Middleware verantwortet. * Gekonnt erarbeitest Du Lösungen für eine komplexe und hochverfügbare IT-Infrastruktur. * Als verantwortlicher System Platform Engineer arbeitest Du an betrieblichen Aufgaben rund um das Privileged Access Management System CyberArk. Der Schwerpunkt Deiner Tätigkeit sind dabei Aufbau, Pflege und Erweiterung von CPM- und PSM-Komponenten zur Integration von Umsystemen und kritisch-wichtigen Anwendungen. * Zu Deinen Aufgaben gehört zudem die Beratung und Klärung von Anforderungen interner Kunden sowie die Zusammenarbeit mit externen Dienstleistern. * Ein weiterer wichtiger Baustein Deiner Tätigkeit ist die Mitarbeit bei dem konzeptionellen Ausbau der CyberArk Infrastruktur. ## Qualifications * Du verfügst über einen Studienabschluss in Informatik/Wirtschaftsinformatik oder einem ähnlichen Fachgebiet oder bringst vergleichbare Berufserfahrung mit. * Du kannst erste Berufserfahrung im Bereich Privileged Access Management vorweisen. * Kenntnisse in den Betriebssystemen MS Windows und Linux zeichnen Dich aus. Idealerweise bringst Du darüber hinaus Knowhow bzgl.Active Directory, GPOs, PKI und Zertifikaten mit. * Eine eigenverantwortliche und strukturierte Arbeitsweise kombiniert mit Abstraktions- und Innovationsvermögen ist für Dich genauso selbstverständlich wie deine konzeptionelle Stärke. * Du verfügst über sehr gute Deutsch- und Englischkenntnisse in Wort und Schrift (mindestens B2). ## Additional Information Homeoffice: Flexible Arbeitszeiten im Homeoffice und Büro. Mehr Infos zu unserem hybriden Arbeiten findest Du [hier](https://www.ruv.de/karriere/blog/HomeOffice-bei-ruv). Arbeitszeiten: Standardmäßig 38h-Woche, Zeiterfassungssystem, Gleitzeit & Lebensarbeitszeitkonto. Urlaub: 30 Tage Urlaub & zusätzliche arbeitsfreie Tage (24.12. und 31.12.). Vergütung: 14 Monatsgehälter (inkl. Weihnachts- & Urlaubsgeld) oder Teilnahme am variablen Vergütungssystem, Sonderzahlungen, Mitarbeitertarife & Rabattaktionen. Gesundheit: Betriebliche Altersvorsorge & Gesundheitsmanagement mit vielfältigen Angeboten. Unser hauseigenes Fitnessstudio und ein breites Netzwerk von Sportangeboten (Wellpass) stehen Dir zudem online und bundesweit zur Verfügung. Mobilität: Jobticket, Jobrad/Fahrradleasing, verkehrsgünstige Lage mit überdachten Fahrradparkplätzen. Familie & Beruf: Eltern-Kind-Büros, Kindernotfallbetreuung, eigene Kindertagespflege „Raiffeisenzwerge“ sowie Pflegenetzwerk & Unterstützung durch die R+V-Sozialberatung. Kulinarik: Gesunde & ausgewogene Speisen in unserem Betriebsrestaurant. Weiterentwicklung: Förderung & Weiterentwicklung durch die R+V Akademie. Die Übernahme externer Qualifizierungsmaßnahmen komplettiert Deine persönliche sowie fachliche Entwicklung. Kultur: Wir leben Gemeinschaft. Unser Motto „Was einer nicht schafft, schaffen viele“ spiegelt sich auch in unseren Teams und dem täglichen Miteinander wider.", "summaryDescription" : "Professional System Platform Engineer (w/m/d) Privileged Access Management at R+V Allgemeine Versicherung AG. Skills: Privileged Access Management, CyberArk. Verantworten Basisinfrastruktur. Verantworten Cloud Plattform", "postedDate" : "2026-06-12T11:44:24.000", "createdAt" : "2026-06-13T21:12:39.719", "lastUpdated" : "2026-06-15T06:35:05.182", "ingestTimestamp" : "2026-06-13T21:12:39.719", "mongoId" : "6a2c62f974d8ee00a08f7cf6", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "50k-75k", "hasSalary" : false, "allSkills" : [ "Privileged Access Management", "Eigenverantwortliche Arbeitsweise", "Strukturierte Arbeitsweise", "Innovationsvermögen", "CyberArk", "System design", "Konzeptionelle Stärke", "Agile", "IT-Infrastruktur", "CyberArk Infrastruktur" ], "skillCount" : 10, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Mid", "dataQualityScore" : 1.0, "_score" : 1283.5322, "daysOld" : 2, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Insurance", "llmIndustryConfidence" : 0.95 }, { "id" : "6a2c745374d8ee00a093488d", "title" : "Senior Security Engineer, Identity & Access Management", "company" : "Valon", "industry" : "Technical Infrastructure", "salary" : { "min" : 180000.0, "max" : 230000.0, "currency" : "USD", "frequency" : "Yearly" }, "location" : "Remote", "locations" : [ "Remote" ], "certifications" : [ "CISSP", "CISM", "CCSK", "CCSP" ], "timestamp" : "2026-06-15T09:06:56.113", "fingerprint" : "3dba7baa5e9af88243cc49f85bf68cb4a1fddbe36af536ce42b4c6cbf6734c2d", "source" : "ashby", "language" : "en", "applyUrl" : "https://jobs.ashbyhq.com/valon/7e06aa3c-8cdc-4b3d-ab0b-d82c8c2e4911/application", "externalId" : "7e06aa3c-8cdc-4b3d-ab0b-d82c8c2e4911", "industryFunction" : { }, "structuredLocations" : [ { "workMode" : "remote" } ], "locationText" : "", "employmentType" : "FULL_TIME", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "technicalSkills" : "SAML 2.0, OIDC/OAuth 2.0, SCIM, LDAP, GCP, RBAC, ABAC", "professionalSkills" : [ "Identity automation", "Access management", "Least-privilege enforcement", "Conditional access", "Directory synchronization", "Privileged access management", "Data security risks" ], "hardSkillsList" : [ "Enterprise identity solutions", "Cloud IAM", "Workload identity federation", "Policy-as-code" ], "hardSkills" : [ { "name" : "Enterprise identity solutions", "level" : "intermediate" }, { "name" : "Cloud IAM", "level" : "intermediate" }, { "name" : "Workload identity federation", "level" : "intermediate" }, { "name" : "Policy-as-code", "level" : "intermediate" } ], "majorSkills" : "Enterprise identity stack, Customer-facing authentication, Authorization capabilities", "majorSkillsList" : [ "Enterprise identity stack", "Customer-facing authentication", "Authorization capabilities" ], "coreResponsibilities" : "Design workforce identity systems, Support workforce identity lifecycle, Automate identity systems, Enforce least-privilege, Support secure identity design, Manage IdP, Evolve IdP, Integrate SSO, Define RBAC policies, Enforce RBAC policies, Support PAM, Design AI-assisted workflows, Automate IAM operations, Evaluate AI risks, Identify data security risks, Drive mitigation, Support operational duties, Support on-call duties, Manage vulnerabilities, Ensure regulatory compliance, Develop policies, Respond to incidents, Conduct security reviews", "teamCollaboration" : "Cross-functional teams; Product and Engineering; IT, Engineering, Security; Compliance, Legal", "domainKnowledge" : "Regulated finance; Mortgage servicing; AI-powered systems; AI pipelines; SOC 2; CCPA; NYDFS; FTC", "domainList" : [ "regulated-finance", "mortgage-servicing", "ai-powered-systems", "ai-pipelines", "soc-2", "ccpa", "nydfs", "ftc" ], "domainSpecificKnowledge" : [ "Regulated finance", "Mortgage servicing", "AI-powered systems", "AI pipelines", "SOC 2", "CCPA", "NYDFS", "FTC" ], "toolProficiency" : [ "Okta", "Azure AD", "Entra ID", "Google Workspace" ], "problemSolvingSkills" : "Root cause analysis", "specialRequirements" : "On-call duties", "qualificationsBasic" : "5+ years security engineering, Bachelor's degree, Hands-on experience enterprise IdP, Deep understanding authentication authorization, SAML OIDC/OAuth 2.0 RBAC, API access controls", "qualificationsPreferred" : "GCP experience preferred, Experience working high-growth environments", "remoteFriendly" : true, "workSiteFlexibility" : "Remote", "rawDescription" : "ABOUT THE COMPANY Valon is building the AI-native operating system for regulated finance, starting with mortgage servicing. We're a Series C company backed by a16z, transforming industries that others have written off as too complex to innovate. Rather than build on top of broken legacy systems, we took a different approach: we built and operate our own mortgage servicing business managing $110+ billion in loans. This wasn't the end goal, it was how we deeply understood the complexity needed to build software that actually works in regulated industries. The results speak for themselves. We've transformed mortgage servicing from a 0% margin business into 60%+ margins while dramatically improving customer experience. Major enterprise contracts are now deploying across the industry. ValonOS is our unified platform that makes every process structured and programmable and it is perfectly positioned for the AI era. When everything flows through one system with rich data, AI agents don't just automate tasks, they continuously improve entire operations. Mortgage servicing is just the beginning of our vision to transform regulated industries and beyond. SECURITY AT VALON Our customers entrust us with some of their most sensitive and personal financial information, and it is the ultimate mission of Valon’s Security team to ensure we have sound programs, processes, and automation in place to safeguard our customers’ data. The Security team protects the infrastructure and data for processing billions of dollars of mortgage loans. In addition to protecting Valon’s internal systems, the Security team partners closely with Product and Engineering to design and deliver secure, scalable, and trustworthy capabilities for ValonOS. As AI becomes central to how Valon builds and operates, our team is responsible for securing AI-powered systems and pipelines while also leveraging AI tools to optimize security and defense capabilities. We work cross-functionally across all teams at Valon to enable security throughout the organization. We engage with external security auditors, pentesting firms, and partners to continuously evaluate Valon’s security posture. Valon offices are located in New York City and San Francisco, but we fully support remote work! ABOUT THE ROLE We are seeking a skilled and experienced Senior Security Engineer, Identity & Access Management to join our team. In this role, you'll own the design, implementation, and operation of IAM systems for Valon’s enterprise identity stack that powers Valon's workforce, and support security for customer-facing authentication and authorization capabilities embedded in ValonOS. You'll be the connective tissue between IT, Engineering, and Security — ensuring every identity, human or machine, is governed consistently and securely. RESPONSIBILITIES - Design and support end-to-end lifecycle of workforce identity systems including identity automation, access management, and least-privilege enforcement across internal systems - Support design of secure identity design patterns for product teams building on ValonOS - Manage and evolve Valon's IdP in conjunction with IT including SSO integrations, MFA policies, conditional access rules, and directory synchronization - Define and enforce RBAC and group-based access policies for internal applications, cloud environments, and development tooling - Support privileged access management (PAM) for internal infrastructure in conjunction with Engineering teams - Design and build AI-assisted workflows that automate and accelerate core IAM operations - Evaluate AI risks across IAM pipelines, ensuring appropriate security controls around data exposure, prompt injection and other threats - Collaborate with Product, Engineering, Data, Compliance, Legal, and other teams to identify and drive mitigation for data security risks - Support other operational and on-call duties such as vulnerability management, regulatory compliance (SOC 2, CCPA, NYDFS, FTC), policy development, incident response and security reviews. IDEAL BACKGROUND - Extensive hands-on IAM security engineer with proven ownership of enterprise identity solutions, able to operate autonomously, drive complex cross-functional efforts, and influence across teams - Deep expertise in modern identity protocols and standards: SAML 2.0, OIDC/OAuth 2.0, SCIM, LDAP, and related specifications - Proven experience administering and scaling IdP platforms (e.g., Okta, Azure AD / Entra ID, Google Workspace) including SSO, MFA, conditional access, and directory sync - Solid background in cloud IAM (GCP preferred), including service accounts, workload identity federation, and policy-as-code approaches - Strong expertise in building PAM solutions / identity vaults and enforcing least-privilege across human and non-human identities - Experience building AI/LLM-powered workflows — ideally in a security or operations context — with a practical understanding of the identity and access risks they introduce - Familiarity with securing non-human and agentic identities, including AI service accounts, API key governance, and audit logging for automated systems - Applied knowledge with industry security and compliance frameworks (OWASP, NIST, CIS, SOC 2/ISO 27001 concepts) - Excellent communication and collaboration skills, including the ability to explain complex security concepts to both technical and non-technical stakeholders. - Experience working in high-growth or startup environments is a plus. MINIMUM QUALIFICATIONS - 5+ years in security engineering roles with a core focus on identity and access management - Bachelor's degree in Information Security, Computer Science, Technology or related field - Relevant security certifications (e.g., CISSP, CISM, CCSK, CCSP or similar) - Hands-on experience with an enterprise IdP (Okta, Entra ID, or Google Workspace) including SSO, MFA, SCIM - Deep understanding of authentication and authorization models across applications - SAML, OIDC/OAuth 2.0, RBAC, ABAC, and API access controls - Hands-on experience with modern identity security technologies and tooling BENEFITS - Base Compensation Band: $180K - 230K. Base salary offered is determined by a number of factors including the candidate’s experience, qualifications, and skills - This Base Compensation pay range applies to our New York City located staff and may differ according to location. - Compensation: Competitive salary with a meaningful stake in the company via equity, and 401k plan - Health & well-being: We’ll invest in your physical and mental well-being with comprehensive medical, dental, & vision benefits - Commuter benefits: We offer pre-tax deductions for public transportation, rideshare services, and parking expenses to make your commute more affordable and convenient - Grow together: Company wide orientation for you to successfully onboard and other learning & development opportunities including regular review cycles that feature 360 degree feedback - Play together: Quarterly budgets for team and company outings. Use it for team swag, cooking classes, or team dinners! - Generous time off: Flexible paid time off, sick days, and 11 company holidays - Baby bonding time!: 12 weeks off for both birthing and non-birthing parents - fully paid so you can focus your energy on your newest addition Throughout the interview process, please remember that emails will only be from valon.com http://valon.com email addresses. We will never ask for any personally identifiable information during the interview process itself. Please reach out to talent@valon.com if you have any requests to verify the authenticity of an outreach. Valon is an equal opportunity employer that is committed to diversity and inclusion in the workplace. We prohibit discrimination and harassment of any kind based on race, color, sex, religion, sexual orientation, national origin, disability, genetic information, pregnancy, or any other protected characteristic as outlined by federal, state, or local laws. Valon makes hiring decisions based solely on qualifications, merit, and business needs at the time.", "summaryDescription" : "Senior Security Engineer, Identity & Access Management at Valon. Skills: Enterprise identity stack, Customer-facing authentication, Authorization capabilities. Design workforce identity systems. Support workforce identity lifecycle", "createdAt" : "2026-06-14T03:56:52.674", "lastUpdated" : "2026-06-15T09:06:56.113", "ingestTimestamp" : "2026-06-14T03:56:52.674", "mongoId" : "6a2c745374d8ee00a093488d", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 180000, "salaryAnnualMax" : 230000, "salaryBand" : "150k-200k", "hasSalary" : true, "allSkills" : [ "Enterprise identity solutions", "Cloud IAM", "Workload identity federation", "Policy-as-code", "Enterprise identity stack", "Customer-facing authentication", "Authorization capabilities", "Identity automation", "Access management", "Least-privilege enforcement", "Conditional access", "Directory synchronization", "Privileged access management", "Data security risks", "Regulated finance", "Mortgage servicing", "AI-powered systems", "AI pipelines", "SOC 2", "CCPA", "NYDFS", "FTC", "CISSP", "CISM", "CCSK", "CCSP", "Okta", "Azure AD", "Entra ID", "Google Workspace" ], "skillCount" : 30, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Senior", "dataQualityScore" : 0.8888889, "_score" : 1244.8466, "hasLocation" : true, "hasGeo" : false, "llmIndustry" : "FinTech", "llmIndustryConfidence" : 0.97 }, { "id" : "6a2d9f6d74d8ee00a0c5afbc", "title" : "Identity & Access Management Analyst", "company" : "Avera", "salary" : { "min" : 63960.0, "max" : 96200.0, "currency" : "USD", "frequency" : "yearly" }, "location" : "Sioux Falls, SD", "locations" : [ "Sioux Falls, SD", "United States of America" ], "timestamp" : "2026-06-16T02:21:13.659", "fingerprint" : "8fd4d81f784b3c039806fd0ddc1350755a483265a0d164de4b2fce9fbb6fd28f", "source" : "workday", "language" : "en", "applyUrl" : "https://avera.wd5.myworkdayjobs.com/avera-careers/job/Sioux-Falls-SD/Identity---Access-Management-Analyst_R-260024363", "externalId" : "R-260024363", "industryFunction" : { }, "locationPoint" : "43.54369,-96.72796", "structuredLocations" : [ { "city" : "Sioux Falls", "state" : "South Dakota", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "43.5476008,-96.7293629" } ], "locationText" : "Sioux Falls, South Dakota, United States", "employmentType" : "FULL_TIME", "remoteFriendly" : false, "rawDescription" : "**Location:** Avera Downtown Building-Sioux Falls **Worker Type:** Regular **Work Shift:** Day Shift (United States of America) **Pay Range:** _The pay range for this position is listed below. Actual pay rate dependent upon experience._ $63,960.00 - $96,200.00 **Position Highlights** **You Belong at Avera** **Be part of a multidisciplinary team built with compassion and the goal of Moving Health Forward for you and our patients. Work where you matter.** **A Brief Overview** Apply expertise in Identity and Access Management (IAM) to analyze and support IAM solutions. Verify and validate appropriate user privileges, assigned credentials, trustworthiness, and appropriately granted resource access rights to users. Responsible for the support and administration of IAM, and manual provisioning tools and processes. This position will maintain and build processes to improve the user lifecycle experience for Avera owned and leased locations, managed locations, and third party users. It will also provide support for regulatory audits through access certification and identity data mining. Partnering with business units and support areas to identify process improvements and provisioning gaps are key functions in this job. This role may focus on technical or administrative aspects of IAM and PAM or encompass a mixture of both. **What you will do ** * Maintain and support the following IAM technologies: Identity Lifecycle Management and user provisioning/de-provisioning. User provisioning/de-provisioning. Identity Governance and Administration (IGA) for aggregating application and system data for access certification. * Leverage knowledge and expertise of ticketing system software for manual provisioning requests and processes. * Drive root cause analysis, troubleshooting and support of IAM and PAM incidents. * Work with a dynamic IAM team to support multiple competing priorities at the same time including: project work, production support, and daily incident and problem resolution activity. * Conduct periodic user access reviews for critical applications to ensure regulatory compliance. * Assist with user acceptance testing and rollout solutions that meet end-user needs and objectives. * Build relationships across the organization to identify and solve access issues. Collaborate with IAM stakeholders and business lines to meet project and program delivery milestones. * Seek opportunities for efficiencies, automation, and overall improvements in the IAM and PAM programs. * Analyze data using IAM tools to provide recommendations to improve the IAM program. Create reference documentation for IAM processes. * Monitor user activity in the IAM systems. Report on IAM system activity. **Essential Qualifications** The individual must be able to work the hours specified. To perform this job successfully, an individual must be able to perform each essential job function satisfactorily including having visual acuity adequate to perform position duties and the ability to communicate effectively with others, hear, understand and distinguish speech and other sounds. These requirements and those listed above are representative of the knowledge, skills, and abilities required to perform the essential job functions. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential job functions, as long as the accommodations do not cause undue hardship to the employer. **Required Education, License/Certification, or Work Experience: ** * At least 2 years experience in Identify and Access Management or a related field * Experience using Microsoft Active Directory and IT Service Management software * 4-6 years progressive experience in managing healthcare business functions * Experience in project management, operational efficiency improvements, process standardization improvements, and/or improved outcome activities **Preferred Education, License/Certification, or Work Experience: ** * Bachelor's in related technical discipline * Certified Information Systems Auditor (CISA) - ISACA * Certified Information Systems Security Professional (CISSP) - International Information System Security Certification Consortium (ISC2) * Security+ - Computing Technology Industry Association (CompTIA) * Experience integrating IAM products in an enterprise environment * Experience in making and implementing decisions in a complex, consensus-oriented environment **Expectations and Standards ** * Commitment to the daily application of Avera’s mission, vision, core values, and social principles to serve patients, their families, and our community. * Promote Avera’s values of compassion, hospitality, and stewardship. * Uphold Avera’s standards of Communication, Attitude, Responsiveness, and Engagement (CARE) with enthusiasm and sincerity. * Maintain confidentiality. * Work effectively in a team environment, coordinating work flow with other team members and ensuring a productive and efficient environment. * Comply with safety principles, laws, regulations, and standards associated with, but not limited to, CMS, The Joint Commission, DHHS, and OSHA if applicable. **Benefits You Need & Then Some** Avera is proud to offer a wide range of benefits to qualifying part-time and full-time employees. We support you with opportunities to help live balanced, healthy lives. Benefits are designed to meet needs of today and into the future. * PTO available day 1 for eligible hires. * Up to 5% employer matching contribution for retirement * Career development guided by hands-on training and mentorship _Avera is an Equal Opportunity Employer - Qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability, Veteran Status, or other categories protected by law. If you are an individual with a disability and would like to request an accommodation for help with your online application, please call 1-605-504-4444 or send an email to_[ _talent @avera.org_](mailto:talent@avera.org) _._", "summaryDescription" : "Identity & Access Management Analyst at Avera", "postedDate" : "2026-06-11T20:01:54.850", "createdAt" : "2026-06-14T20:01:54.821", "lastUpdated" : "2026-06-16T02:21:13.659", "ingestTimestamp" : "2026-06-14T20:01:54.821", "mongoId" : "6a2d9f6d74d8ee00a0c5afbc", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://avera.wd5.myworkdayjobs.com/avera-careers/job/Sioux-Falls-SD/Identity---Access-Management-Analyst_R-260024363", "salaryAnnualMin" : 63960, "salaryAnnualMax" : 96200, "salaryBand" : "50k-75k", "hasSalary" : true, "allSkills" : [ ], "skillCount" : 0, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "mid", "dataQualityScore" : 0.7777778, "_score" : 1238.654, "daysOld" : 4, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Healthcare", "llmIndustryConfidence" : 0.95 }, { "id" : "6a2c62f974d8ee00a08f7cf4", "title" : "Product Owner (w/m/d) System Engineering / Privileged Access Management", "company" : "R+V Allgemeine Versicherung AG", "industry" : "Insurance", "salary" : { "min" : 68000.0, "max" : 88000.0, "currency" : "EUR", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Mid-level Product Owner in Wiesbaden, Germany, adjusted for the insurance industry and company size." }, "location" : "Wiesbaden, HE, Germany", "locations" : [ "Wiesbaden", "HE", "Germany" ], "certifications" : [ "CyberArk Defender Level", "CyberArk Sentry Level" ], "timestamp" : "2026-06-15T05:29:30.202", "fingerprint" : "e039298e519710a13e7d89ecf71d1386ed78f2326933853edf4d55c496caef07", "source" : "smartrecruiters", "language" : "de", "applyUrl" : "https://jobs.smartrecruiters.com/RVAllgemeineVersicherungenAG/744000131883258-product-owner-w-m-d-system-engineering-privileged-access-management", "externalId" : "744000131883258", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Wiesbaden", "state" : "Hesse", "country" : "Germany", "continent" : "eu", "source" : "llm", "workMode" : "hybrid", "geo" : "50.0820384,8.2416556" } ], "locationText" : "Wiesbaden, Hesse, Germany", "employmentType" : "FULL_TIME", "minimumEducation" : "Bachelor's", "experienceMinYears" : 2, "experienceMaxYears" : 5, "experienceLevel" : "mid", "technicalSkills" : "MS Windows, Linux, Active Directory, PKI, CyberArk, Selenium, AutoIT, PowerShell, Java-Script", "professionalSkills" : [ "System Engineering", "Privileged Access Management", "Product Management", "Agile Methoden" ], "hardSkillsList" : [ "CyberArk Architektur", "Hardening-Mechanismen", "CPM Plugins", "PSM Connection Components" ], "softSkillsList" : [ "Eigeninitiative", "Eigenverantwortung" ], "hardSkills" : [ { "name" : "CyberArk Architektur", "level" : "intermediate" }, { "name" : "Hardening-Mechanismen", "level" : "intermediate" }, { "name" : "CPM Plugins", "level" : "intermediate" }, { "name" : "PSM Connection Components", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Eigeninitiative" }, { "name" : "Eigenverantwortung" } ], "majorSkills" : "Privileged Access Management, CyberArk, System Engineering", "majorSkillsList" : [ "Privileged Access Management", "CyberArk", "System Engineering" ], "coreResponsibilities" : "Verantworten technische Lösungen, Strategische Weiterentwicklung CyberArk, Sicherstellen sicheren Betrieb, Sicherstellen wirtschaftlichen Betrieb, Sicherstellen stabilen Betrieb, Hands-on Aufgaben, Aufbau CPM-Komponenten, Pflege CPM-Komponenten, Erweiterung CPM-Komponenten, Aufbau PSM-Komponenten, Pflege PSM-Komponenten, Erweiterung PSM-Komponenten, Ableiten Vision für Lösungen, Erarbeiten Roadmap, Vermitteln Zielbild, Steuern Mitarbeitenden, Steuern externer Dienstleister, Fördern Zusammenarbeit, Priorisieren Themen, Einholen Kundenbedürfnisse, Vertreten Kundenbedürfnisse, Verantworten Aufgabenplanung, Verantworten Ressourcenplanung, Verantworten Budgetplanung, Prüfen umgesetzte Lösungen, Messen umgesetzte Lösungen, Optimieren Lösungen", "teamCollaboration" : "Bindeglied im Team; Austausch Kollegen; ART; Scrum-Master", "projectManagementSkills" : [ "Roadmap", "Agile", "Scrum" ], "domainKnowledge" : "Privileged Access Management; System Engineering; MS Windows; Linux; Active Directory; PKI; Zertifikaten; on-prem Umgebungen", "domainList" : [ "privileged-access-management", "system-engineering", "ms-windows", "linux", "active-directory", "pki", "zertifikaten", "on-prem-umgebungen" ], "domainSpecificKnowledge" : [ "Privileged Access Management", "System Engineering", "MS Windows", "Linux", "Active Directory", "PKI", "Zertifikaten", "on-prem Umgebungen" ], "toolProficiency" : [ "CyberArk", "Selenium", "AutoIT", "PowerShell" ], "communicationSkills" : "Zielbilder vermitteln", "continuousLearning" : "Förderung Weiterentwicklung; R+V Akademie; Externe Qualifizierungsmaßnahmen", "qualificationsBasic" : "Studienabschluss Informatik/Wirtschaftsinformatik, vergleichbare Berufserfahrung, Erfahrung Infrastrukturumfeld, Erfahrung Privileged Access Management System, Kenntnisse MS Windows, Kenntnisse Linux, gute Deutschkenntnisse (mindestens B2/C1), gute Englischkenntnisse", "qualificationsPreferred" : "Erfahrung als Product Owner, Knowhow Active Directory, Knowhow GPOs, Knowhow PKI, Knowhow Zertifikaten, Zertifizierung CyberArk Defender/Sentry Level, Erfahrung Entwicklung CyberArk CPM Plugins, Erfahrung Entwicklung PSM Connection Components, Erfahrung Selenium, Erfahrung CyberArk Plugin Frameworks, Erfahrung AutoIT, Erfahrung PowerShell, Erfahrung HTML, Erfahrung Java-Script", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "Lass uns gemeinsam neue Wege gehen! Denn genau das tun wir bei der R+V, einem der größten Versicherer Deutschlands. Willkommen im Ressort Operations und IT, in dem die R+V alle kundennahen Operations-Einheiten und die IT bündelt. Ziel ist es, Prozesse und technische Voraussetzungen so zu verbessern, dass die R+V Kundenanliegen schneller, effizienter und digitaler bearbeiten kann. Innovative Technologien und unsere vielfältige Systemlandschaft bieten Möglichkeiten für fachliche und persönliche Entwicklung. * Als Product Owner verantwortest Du die technischen Lösungen und arbeitest an der strategischen Weiterentwicklung des Privileged Access Management System CyberArk gemeinsam mit dem Productmanager gegenüber dem zuständigen Business Owner sowie den anfordernden Kunden aus Regulatorik und Prozessverantwortung innerhalb der IT der R+V. * Du meisterst den Spagat zwischen Implementierung und Betrieb und nimmst die Verantwortung mit einem hohen Maß an Eigeninitiative wahr. Dabei verfolgst Du das Ziel für das Privileged Access Management System CyberArk einen sicheren, wirtschaftlichen und stabilen Betrieb heute und in der Zukunft zu gewährleisten. * Ein weiterer Schwerpunkt Deiner Tätigkeit sind hands-on Aufgaben wie Aufbau, Pflege und Erweiterung von CPM- und PSM-Komponenten zur Integration von Umsystemen und kritisch-wichtigen Anwendungen. * Aus unserer IT-Strategie leitest Du eine Vision für die verantworteten Lösungen ab, erarbeitest eine Roadmap und vermittelst im ART und bei unseren IT-Kunden das Verständnis für das definierte Zielbild. Dazu gehören auch der effektive Einsatz und Steuerung der Mitarbeitenden gemeinsam mit dem People Lead, sowie die Steuerung externer Dienstleister. * Du fungierst als Bindeglied im Team, förderst die Zusammenarbeit und priorisierst Themen gemeinsam mit dem Team und Scrum-Master. * Du holst regelmäßig konkrete Kundenbedürfnisse ein, priorisierst und vertrittst diese routiniert im ART. Du verantwortest die Durchführung der Aufgaben-, Ressourcen- und Budgetplanung für das Privileged Access Management Systems CyberArk. Gemeinsam mit dem Team prüfst und misst Du die umgesetzten Lösungen und optimierst diese kontinuierlich. ## Qualifications * Du verfügst über einen Studienabschluss in Informatik/Wirtschaftsinformatik oder einem ähnlichen Fachgebiet oder bringst relevante, vergleichbare Berufserfahrung mit. * Du hast nachweisliche Erfahrung – idealerweise als Product Owner – in einem Infrastrukturumfeld, bestenfalls für ein Privileged Access Management System. * Fundierte Kenntnisse in den Betriebssystemen MS Windows und Linux zeichnen Dich aus. Idealerweise bringst Du darüber hinaus Knowhow bzgl.Active Directory, GPOs, PKI und Zertifikaten mit. * Deine Kenntnisse und Betriebserfahrungen mit der Software CyberArk (Vault-, PSM- und CPM-Architektur, Hardening-Mechanismen, Plattformen) konntest du ggf. sogar auf „Defender“ oder „Sentry“ Level“ für on-prem Umgebungen zertifizieren. * Bestenfalls konntest du in der Vergangenheit bereits Erfahrungen in der Entwicklung von CyberArk CPM Plugins und PSM Connection Components und den dafür benötigten Technologien (Selenium, CyberArk Plugin Frameworks, AutoIT, PowerShell, Webbrowser-Technologien wie HTML und Java-Script) sammeln. * Im Austausch den Kollegen zeigst Du gute Kommunikationsfähigkeiten. Du inspirierst Dein Team und kannst Zielbilder verständlich vermitteln. * Du agierst mit einem hohen Maß an Eigenverantwortung und Initiative und fühlst Dich wohl in einem agilen Umfeld. In vorherigen Positionen konntest du agile Methoden bereits anwenden und anpassen. * Du verfügst über sehr gute Deutschkenntnisse in Wort und Schrift mit (mindestens B2/C1) sowie gute Englischkenntnisse. ## Additional Information Homeoffice: Flexible Arbeitszeiten im Homeoffice und Büro. Mehr Infos zu unserem hybriden Arbeiten findest Du [hier](https://www.ruv.de/karriere/blog/HomeOffice-bei-ruv). Arbeitszeiten: Standardmäßig 38h-Woche, Zeiterfassungssystem, Gleitzeit & Lebensarbeitszeitkonto. Urlaub: 30 Tage Urlaub & zusätzliche arbeitsfreie Tage (24.12. und 31.12.). Vergütung: 14 Monatsgehälter (inkl. Weihnachts- & Urlaubsgeld) oder Teilnahme am variablen Vergütungssystem, Sonderzahlungen, Mitarbeitertarife & Rabattaktionen. Gesundheit: Betriebliche Altersvorsorge & Gesundheitsmanagement mit vielfältigen Angeboten. Unser hauseigenes Fitnessstudio und ein breites Netzwerk von Sportangeboten (Wellpass) stehen Dir zudem online und bundesweit zur Verfügung. Mobilität: Jobticket, Jobrad/Fahrradleasing, verkehrsgünstige Lage mit überdachten Fahrradparkplätzen. Familie & Beruf: Eltern-Kind-Büros, Kindernotfallbetreuung, eigene Kindertagespflege „Raiffeisenzwerge“ sowie Pflegenetzwerk & Unterstützung durch die R+V-Sozialberatung. Kulinarik: Gesunde & ausgewogene Speisen in unserem Betriebsrestaurant. Weiterentwicklung: Förderung & Weiterentwicklung durch die R+V Akademie. Die Übernahme externer Qualifizierungsmaßnahmen komplettiert Deine persönliche sowie fachliche Entwicklung. Kultur: Wir leben Gemeinschaft. Unser Motto „Was einer nicht schafft, schaffen viele“ spiegelt sich auch in unseren Teams und dem täglichen Miteinander wider.", "summaryDescription" : "Product Owner (w/m/d) System Engineering / Privileged Access Management at R+V Allgemeine Versicherung AG. Skills: Privileged Access Management, CyberArk, System Engineering. Verantworten technische Lösungen. Strategische Weiterentwicklung CyberArk", "postedDate" : "2026-06-12T11:53:48.000", "createdAt" : "2026-06-13T16:28:54.257", "lastUpdated" : "2026-06-15T05:29:30.202", "ingestTimestamp" : "2026-06-13T16:28:54.257", "mongoId" : "6a2c62f974d8ee00a08f7cf4", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "50k-75k", "hasSalary" : false, "allSkills" : [ "CyberArk Architektur", "Hardening-Mechanismen", "CPM Plugins", "PSM Connection Components", "Eigeninitiative", "Eigenverantwortung", "Privileged Access Management", "CyberArk", "System Engineering", "Product Management", "Agile Methoden", "Roadmap", "Agile", "Scrum", "MS Windows", "Linux", "Active Directory", "PKI", "Zertifikaten", "on-prem Umgebungen", "CyberArk Defender Level", "CyberArk Sentry Level", "Selenium", "AutoIT", "PowerShell" ], "skillCount" : 25, "jobCategory" : "engineering", "jobSubcategory" : "information-technology", "dataQualityScore" : 1.0, "_score" : 1222.7396, "daysOld" : 2, "hasLocation" : true, "hasGeo" : true }, { "id" : "6a2aa66d74d8ee00a06b90dc", "title" : "Identity Access Management (IAM) Engineer", "company" : "Barbaricum", "salary" : { "min" : 8500000.0, "max" : 1.3E7, "currency" : "USD", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Mid-level Identity Access Management (IAM) Engineer in the Government industry, adjusted for a remote work mode." }, "location" : "Remote", "locations" : [ "Remote" ], "certifications" : [ "Certified Information Systems Security Professional (CISSP)", "AWS Certified Security – Specialty", "Microsoft Certified: Identity and Access Administrator Associate" ], "timestamp" : "2026-06-14T20:50:55.595", "fingerprint" : "d2f24b371b1639a8ee24d169a51ae40a4151678bbfba9ea7f7e2d084be659391", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://job-boards.greenhouse.io/barbaricum/jobs/5252234008", "externalId" : "5252234008", "structuredLocations" : [ { "workMode" : "remote" } ], "locationText" : "", "minimumEducation" : "Bachelor's", "technicalSkills" : "SAML, OAuth, OpenID Connect, RBAC, MFA, AWS IAM, Microsoft Entra ID, Okta, Ping Identity", "professionalSkills" : [ "Identity governance", "Identity federation", "Zero-trust security" ], "hardSkillsList" : [ "IAM principles", "Security controls" ], "hardSkills" : [ { "name" : "IAM principles", "level" : "intermediate" }, { "name" : "Security controls", "level" : "intermediate" } ], "majorSkills" : "Identity Access Management, Cloud security, Cybersecurity", "majorSkillsList" : [ "Identity Access Management", "Cloud security", "Cybersecurity" ], "coreResponsibilities" : "Designing IAM solutions, Implementing IAM solutions, Managing IAM solutions, Ensuring secure authentication, Ensuring authorization, Ensuring identity governance, Supporting secure enterprise environments, Integrating IAM solutions", "teamCollaboration" : "Cybersecurity teams; Infrastructure teams; Application development teams", "domainKnowledge" : "DoD frameworks; DoD IL2; DoD IL4; DoD IL5; Regulated environments", "domainList" : [ "dod-frameworks", "dod-il2", "dod-il4", "dod-il5", "regulated-environments" ], "domainSpecificKnowledge" : [ "DoD frameworks", "DoD IL2", "DoD IL4", "DoD IL5", "Regulated environments" ], "specialRequirements" : "Secret DoD government clearance, Off-site position", "qualificationsBasic" : "minimum of five (5) years of equivalent experience in IAM engineering, SECRET Security Clearance", "qualificationsPreferred" : "Certified Information Systems Security Professional (CISSP), AWS Certified Security – Specialty, Microsoft Certified: Identity and Access Administrator Associate", "remoteFriendly" : true, "workSiteFlexibility" : "Remote", "rawDescription" : "Barbaricum is a rapidly growing government contractor providing leading-edge support to federal customers, with a particular focus on Defense and National Security mission sets. We leverage more than 17 years of support to stakeholders across the federal government, with established and growing capabilities across Intelligence, Analytics, Engineering, Mission Support, and Communications disciplines. Founded in 2008, our mission is to transform the way our customers approach constantly changing and complex problem sets by bringing to bear the latest in technology and the highest caliber of talent. Headquartered in Washington, DC's historic Dupont Circle neighborhood, Barbaricum also has a corporate presence in Tampa, FL, Bedford, IN, and Dayton, OH, with team members across the United States and around the world. As a leader in our space, we partner with firms in the private sector, academic institutions, and industry associations with a goal of continually building our expertise and capabilities for the benefit of our employees and the customers we support. Through all of this, we have built a vibrant corporate culture diverse in expertise and perspectives with a focus on collaboration and innovation. Our teams are at the frontier of the Nation's most complex and rewarding challenges. Join our team. This position is in support of US Southern Command under the Enhanced Domain Awareness contract. Our team shall refine the processes, technology, infrastructure, and personnel necessary to transition EDA into a scalable, distributed intelligence ecosystem. Leveraging the existing EDA infrastructure, this effort enhances cyber security, structured governance, metadata lineage, and data transformation capabilities of the command. NOTE: This position is contingent upon award of contract, expected in the next 30-60 days. Job Title: IAM Engineer Position Overview The Identity and Access Management (IAM) Engineer is responsible for designing, implementing, and managing secure IAM solutions across cloud and on-premises environments. This role plays a critical part in protecting organizational assets by ensuring secure authentication, authorization, and identity governance aligned with compliance and security standards, including Department of Defense (DoD) frameworks. Supporting secure enterprise environments that span cloud and on-premises systems, the position requires close coordination across cybersecurity, infrastructure, and application development teams. This position is an off-site position and requires a Secret DoD government clearance. Knowledge, Skills, and Abilities Strong knowledge of IAM principles, frameworks, and best practices Proficiency in authentication and authorization protocols (SAML, OAuth, OpenID Connect) Experience implementing RBAC, MFA, and identity federation in hybrid environments Strong knowledge of DoD IL2, IL4, and IL5 compliance frameworks and security controls Required Experience Demonstrated experience designing and managing IAM frameworks in cloud environments (AWS and/or Azure) Experience configuring and managing identity governance and administration tools Proven experience implementing zero-trust security models Hands-on experience integrating IAM solutions across enterprise systems such as Microsoft Entra ID, Okta, Ping Identity, and AWS IAM Experience supporting compliance and security requirements within regulated environments Required Qualifications Bachelor’s degree in Cybersecurity, Information Assurance, Computer Science, or a related field or minimum of five (5) years of equivalent experience in IAM engineering. SECRET Security Clearance Preferred Certifications (Not Required) Certified Information Systems Security Professional (CISSP) AWS Certified Security – Specialty Microsoft Certified: Identity and Access Administrator Associate EEO Commitment All qualified applicants will receive consideration for employment without regard to sex, race, ethnicity, age, national origin, citizenship, religion, physical or mental disability, medical condition, genetic information, pregnancy, family structure, marital status, ancestry, domestic partner status, sexual orientation, gender identity or expression, veteran or military status, or any other basis prohibited by law.", "summaryDescription" : "Identity Access Management (IAM) Engineer at Barbaricum. Skills: Identity Access Management, Cloud security, Cybersecurity. Designing IAM solutions. Implementing IAM solutions", "postedDate" : "2026-06-11T18:38:31.891", "createdAt" : "2026-06-11T18:38:31.891", "lastUpdated" : "2026-06-14T20:50:55.595", "ingestTimestamp" : "2026-06-11T18:38:31.891", "mongoId" : "6a2aa66d74d8ee00a06b90dc", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 8500000, "salaryAnnualMax" : 13000000, "salaryBand" : "200k+", "hasSalary" : true, "allSkills" : [ "IAM principles", "Security controls", "Identity Access Management", "Cloud security", "Cybersecurity", "Identity governance", "Identity federation", "Zero-trust security", "DoD frameworks", "DoD IL2", "DoD IL4", "DoD IL5", "Regulated environments", "Certified Information Systems Security Professional (CISSP)", "AWS Certified Security – Specialty", "Microsoft Certified: Identity and Access Administrator Associate" ], "skillCount" : 16, "jobCategory" : "other", "jobSubcategory" : "cyber-intel", "dataQualityScore" : 0.7777778, "_score" : 1221.8789, "daysOld" : 3, "hasLocation" : true, "hasGeo" : false }, { "id" : "6a2176d374d8ee00a0c1af98", "title" : "Software Development Engineer - AWS Identity & Access Management, AWS Identity", "company" : "Amazon Development Center U.S., Inc.", "industry" : "Software Development, Cloud Computing", "salary" : { "min" : 70000.0, "max" : 194400.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "Seattle, Washington, USA", "locations" : [ "Seattle, Washington, USA" ], "timestamp" : "2026-06-15T03:11:17.062", "fingerprint" : "db4fb68d309bc05a796e6f71318ace1cbc12d50df122b3988091cc6fdd988389", "source" : "amazon", "language" : "en", "applyUrl" : "https://account.amazon.jobs/jobs/10438698/apply", "externalId" : "d1490d81-7ef2-4f50-b0c6-e568e560a9d1", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Seattle", "state" : "Washington", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "47.6038321,-122.3300620" } ], "locationText" : "Seattle, Washington, United States", "employmentType" : "FULL_TIME", "minimumEducation" : "Bachelor's", "technicalSkills" : "AWS, Machine learning, Artificial intelligence", "professionalSkills" : [ "System interdependencies", "System limitations" ], "hardSkillsList" : [ "Identity management", "Authentication", "Authorization" ], "softSkillsList" : [ "Customer obsession", "Mentoring" ], "hardSkills" : [ { "name" : "Identity management", "level" : "intermediate" }, { "name" : "Authentication", "level" : "intermediate" }, { "name" : "Authorization", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Customer obsession" }, { "name" : "Mentoring" } ], "majorSkills" : "AWS Identity, Access Management, Cloud platform", "majorSkillsList" : [ "AWS Identity", "Access Management", "Cloud platform" ], "coreResponsibilities" : "Create systems and services, Collaborate on systems and services, Implement systems and services, Deploy systems and services, Functionally decompose problems, Understand system interdependencies, Understand system limitations, Share knowledge of patterns, Share knowledge of methods", "teamCollaboration" : "Work with senior engineers; Work with principal engineers; Mentor junior team members", "domainKnowledge" : "AWS cloud; Identity features; Access management; Cryptography; Cloud computing", "domainList" : [ "aws-cloud", "identity-features", "access-management", "cryptography", "cloud-computing" ], "domainSpecificKnowledge" : [ "AWS cloud", "Identity features", "Access management", "Cryptography", "Cloud computing" ], "continuousLearning" : "Formal mentor search; Work and train together; Career progression support", "problemSolvingSkills" : "Decompose complex problems", "qualificationsBasic" : "3+ years software development experience, 2+ years system design or architecture experience, Experience programming at least one language", "qualificationsPreferred" : "3+ years full SDLC experience, Bachelor's degree in computer science", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "The Amazon Web Services (AWS) Identity team builds, operates, and innovates the identity, authentication, and authorization stack for the AWS cloud. Our mission is to push the technical boundaries to enable AWS customers to run their business workloads confidently and securely. As part of this mission, we leverage customer obsession and technologies to help customers set appropriate access controls across all their AWS environments. We are seeking a software developer engineer to be part of our team to build solutions on a global scale, own their systems end to end, and influence the direction of technology used by all AWS services around the world. In this role, you will have the opportunity to drive mission critical projects, work with senior and principal engineers, and help mentor more junior team members. As an SDE on our team you will: · Create and collaborate in the design, implementation, and deployment of systems and services · Work and grow with talented teams delivering impactful projects · Functionally decompose complex problems into simple, straight-forward solutions while understanding system interdependencies and limitations · Share your knowledge of the most effective performance, scalability, architecture, and engineering patterns and methods AWS has the most services and more features within those services, than any other cloud provider–from infrastructure technologies like compute, storage, and databases–to emerging technologies, such as machine learning and artificial intelligence, data lakes and analytics, and Internet of Things. Whether its Identity features such as access management and sign on, cryptography, console, builder & developer tools, and even projects like automating all of our contractual billing systems, AWS Platform is always innovating with the customer in mind. The AWS Platform team sustains over 750 million transactions per second. Our team also puts a high value on work-life balance. Striking a healthy balance between your personal and professional life is crucial to your happiness and success here, which is why we aren’t focused on how many hours you spend at work or online. Instead, we’re happy to offer a flexible schedule so you can have a more productive and well-balanced life—both in and outside of work. We have a formal mentor search application that lets you find a mentor that works best for you based on location, job family, job level etc. Your manager can also help you find a mentor or two, because two is better than one. In addition to formal mentors, we work and train together so that we are always learning from one another, and we celebrate and support the career progression of our team members. Here at AWS, we embrace our differences. We are committed to furthering our culture of inclusion. We have ten employee-led affinity groups, reaching 40,000 employees in over 190 chapters globally. We have innovative benefit offerings, and we host annual and ongoing learning experiences, including our Conversations on Race and Ethnicity (CORE) and AmazeCon (gender diversity) conferences. Amazon’s culture of inclusion is reinforced within our 14 Leadership Principles, which remind team members to seek diverse perspectives, learn and be curious, and earn trust. About the team Why AWS Amazon Web Services (AWS) is the world’s most comprehensive and broadly adopted cloud platform. We pioneered cloud computing and never stopped innovating — that’s why customers from the most successful startups to Global 500 companies trust our robust suite of products and services to power their businesses. Utility Computing (UC) AWS Utility Computing (UC) provides product innovations — from foundational services such as Amazon’s Simple Storage Service (S3) and Amazon Elastic Compute Cloud (EC2), to consistently released new product innovations that continue to set AWS’s services and features apart in the industry. As a member of the UC organization, you’ll support the development and management of Compute, Database, Storage, Internet of Things (IoT), Platform, and Productivity Apps services in AWS, including support for customers who require specialized security solutions for their cloud services. Inclusive Team Culture Here at AWS, it’s in our nature to learn and be curious. Our employee-led affinity groups foster a culture of inclusion that empower us to be proud of our differences. Ongoing events and learning experiences, including our Conversations on Race and Ethnicity (CORE) and AmazeCon (gender diversity) conferences, inspire us to never stop embracing our uniqueness. Work/Life Balance We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why we strive for flexibility as part of our working culture. When we feel supported in the workplace and at home, there’s nothing we can’t achieve in the cloud. Mentorship and Career Growth We’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge-sharing, mentorship and other career-advancing resources here to help you develop into a better-rounded professional. Diverse Experiences Amazon values diverse experiences. Even if you do not meet all of the preferred qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences, don’t let it stop you from applying. Basic Qualifications: - 3+ years of non-internship professional software development experience - 2+ years of non-internship design or architecture (design patterns, reliability and scaling) of new and existing systems experience - Experience programming with at least one software programming language Preferred Qualifications: - 3+ years of full software development life cycle, including coding standards, code reviews, source control management, build processes, testing, and operations experience - Bachelor's degree in computer science or equivalent Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status. Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner. The base salary range for this position is listed below. Your Amazon package will include sign-on payments and restricted stock units (RSUs). Final compensation will be determined based on factors including experience, qualifications, and location. Amazon also offers comprehensive benefits including health insurance (medical, dental, vision, prescription, Basic Life & AD&D insurance and option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage), 401(k) matching, paid time off, and parental leave. Learn more about our benefits at https://amazon.jobs/en/benefits . USA, WA, Seattle - 143,700.00 - 194,400.00 USD annually", "summaryDescription" : "Software Development Engineer - AWS Identity & Access Management, AWS Identity at Amazon Development Center U.S., Inc.. Skills: AWS Identity, Access Management, Cloud platform. Create systems and services. Collaborate on systems and services", "postedDate" : "2026-06-13T07:10:56.049", "createdAt" : "2026-06-13T07:10:56.049", "lastUpdated" : "2026-06-15T03:11:17.062", "ingestTimestamp" : "2026-06-13T07:10:56.049", "mongoId" : "6a2176d374d8ee00a0c1af98", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://account.amazon.jobs/jobs/10438698/apply", "salaryAnnualMin" : 70000, "salaryAnnualMax" : 194400, "salaryBand" : "50k-75k", "hasSalary" : true, "allSkills" : [ "Identity management", "Authentication", "Authorization", "Customer obsession", "Mentoring", "AWS Identity", "Access Management", "Cloud platform", "System interdependencies", "System limitations", "AWS cloud", "Identity features", "Access management", "Cryptography", "Cloud computing" ], "skillCount" : 15, "jobCategory" : "engineering", "dataQualityScore" : 0.8888889, "_score" : 1201.4783, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology" }, { "id" : "6a25146374d8ee00a00bb7d9", "title" : "Systems Development Engineer - Identity, Cryptography and Identity Management", "company" : "Amazon Development Center U.S., Inc.", "industry" : "Operations, IT, Support Engineering, System Development Engineering, Cloud Computing", "salary" : { "min" : 129000.0, "max" : 174800.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "Seattle, Washington, USA", "locations" : [ "Seattle, Washington, USA" ], "timestamp" : "2026-06-15T02:11:16.133", "fingerprint" : "28ea027bccf2785a3364f1e95e7565a0e1ee59567ac6cb69f48cf5bf462444d7", "source" : "amazon", "language" : "en", "applyUrl" : "https://account.amazon.jobs/jobs/10440082/apply", "externalId" : "c2a6f0f1-7582-4a9c-8c16-4042180d75b2", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Seattle", "state" : "Washington", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "47.6038321,-122.3300620" } ], "locationText" : "Seattle, Washington, United States", "employmentType" : "FULL_TIME", "technicalSkills" : "Java, Python, C++, Go, Identity management, Access management, Cryptography, Security protocols, Distributed systems, Cloud security, API design, Microservices", "professionalSkills" : [ "System design", "Problem solving", "Technical leadership" ], "hardSkillsList" : [ "IAM implementation", "Cryptography implementation", "Security architecture", "Software development lifecycle" ], "hardSkills" : [ { "name" : "IAM implementation", "level" : "intermediate" }, { "name" : "Cryptography implementation", "level" : "intermediate" }, { "name" : "Security architecture", "level" : "intermediate" }, { "name" : "Software development lifecycle", "level" : "intermediate" } ], "majorSkills" : "Identity management, Cryptography, Security engineering", "majorSkillsList" : [ "Identity management", "Cryptography", "Security engineering" ], "coreResponsibilities" : "Design and implement identity and access management solutions, Develop and maintain cryptographic services, Ensure security of identity and access systems, Collaborate with engineering teams to integrate security features, Troubleshoot and resolve security-related issues, Stay up-to-date with security trends and best practices, Contribute to security architecture design, Write secure code", "teamCollaboration" : "Cross-functional teams; Engineering teams", "projectManagementSkills" : [ "Agile methodologies" ], "domainKnowledge" : "Identity management; Access management; Cryptography; Security protocols; Distributed systems; Cloud security", "domainList" : [ "identity-management", "access-management", "cryptography", "security-protocols", "distributed-systems", "cloud-security" ], "domainSpecificKnowledge" : [ "Identity management", "Access management", "Cryptography", "Security protocols", "Distributed systems", "Cloud security" ], "toolProficiency" : [ "Git", "JIRA", "Docker", "Kubernetes" ], "communicationSkills" : "Technical documentation; Presentations", "documentationSkills" : "Technical documentation; Design documents", "continuousLearning" : "Professional development", "innovationCreativity" : "Develop new security solutions", "problemSolvingSkills" : "Troubleshooting; Root cause analysis", "outcomesObjectives" : "Enhance security posture; Improve identity management efficiency", "qualificationsBasic" : "Bachelor's degree in Computer Science or related field, 5+ years of experience in software development, Experience with identity and access management (IAM), Experience with cryptography principles and applications, Experience with security protocols and standards", "qualificationsPreferred" : "Master's degree or PhD in Computer Science or related field, Experience with cloud security best practices, Experience with distributed systems, Experience with large-scale production systems", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "We are currently looking for a Systems Development Engineer to join our systems organization. You love to work with internal and external customers to execute projects and resolve issues. You are a believer in the dev-ops model of service engineering, and you are excited to run operations in an environment where developers don’t toss problems over the wall. You are happiest when you are working with empowered, world-class engineers to meet world-class challenges. Finally, with your strong ownership bias, you have an infectious desire to continually improve how things are done. AWS Cryptography and Identity are building and delivering the next generation of cloud computing security. We are innovating new ways of building massively scalable distributed security systems involving identity management, federation, web services security, and much more. We enable our customers to control some of the most sensitive secrets on the Internet. In this role, you will join a team of highly talented engineers operating Cryptography and Identity systems. This is a great opportunity to have direct impact to some of the largest-scaled systems in the world and work with some of the smartest people in the industry, while having a huge impact. A successful systems development engineer joining the team will do much more than write code and triage problems. You will work with Amazon's largest and most demanding customers to address specific needs across a full suite of services. You will dive deep into technical issues and work diligently to improve the customer experience. This is an excellent opportunity to join Amazon's world class technical team in Seattle. You will work with some of the best and brightest engineers and technical managers while also developing your skills and furthering your career within one of the most innovative and progressive technology companies anywhere. Working together on behalf of our customers, we are building the future one innovative product, service, and idea at a time. Are you ready to embrace the challenge? Come build the future with us. This position requires that the candidate selected must currently possess and maintain an active TS/SCI security clearance. The position further requires that, after start, the selected candidate obtain and maintain an active TS/SCI security clearance with polygraph or commensurate clearance for each government agency for which they perform AWS work. About the team Why AWS Amazon Web Services (AWS) is the world’s most comprehensive and broadly adopted cloud platform. We pioneered cloud computing and never stopped innovating — that’s why customers from the most successful startups to Global 500 companies trust our robust suite of products and services to power their businesses. AWS Infrastructure Services (AIS) AWS Infrastructure Services owns the design, planning, delivery, and operation of all AWS global infrastructure. In other words, we’re the people who keep the cloud running. We support all AWS data centers and all of the servers, storage, networking, power, and cooling equipment that ensure our customers have continual access to the innovation they rely on. We work on the most challenging problems, with thousands of variables impacting the supply chain — and we’re looking for talented people who want to help. Inclusive Team Culture Here at AWS, it’s in our nature to learn and be curious. Our employee-led affinity groups foster a culture of inclusion that empower us to be proud of our differences. Ongoing events and learning experiences, including our Conversations on Race and Ethnicity (CORE) and AmazeCon conferences, inspire us to never stop embracing our uniqueness. Work/Life Balance We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why we strive for flexibility as part of our working culture. When we feel supported in the workplace and at home, there’s nothing we can’t achieve in the cloud. Mentorship and Career Growth We’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge-sharing, mentorship and other career-advancing resources here to help you develop into a better-rounded professional. Diverse Experiences Amazon values diverse experiences. Even if you do not meet all of the preferred qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences, don’t let it stop you from applying. Basic Qualifications: - Bachelor's degree, or CSSLP (Certified Secure Software Lifecycle Professional) - 2+ years of non-internship professional software development experience - 1+ years of designing or architecting (design patterns, reliability and scaling) of new and existing systems experience - Knowledge of systems engineering fundamentals (networking, storage, operating systems) - Current, active US Government Security Clearance of Top Secret with SCI eligibility or above Preferred Qualifications: - Experience with PowerShell (preferred), Python, Ruby, or Java - Experience working in an Agile environment using the Scrum methodology - Experience with PowerShell (preferred), Python, Ruby, or Java - Experience working in an Agile environment using the Scrum methodology - Experience programming with at least one modern language such as C++, C#, Java, Python, Golang, PowerShell, Ruby - 7+ years of administrative experience in networking, storage systems, operating systems and hands-on systems engineering experience Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status. Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner. The base salary range for this position is listed below. Your Amazon package will include sign-on payments and restricted stock units (RSUs). Final compensation will be determined based on factors including experience, qualifications, and location. Amazon also offers comprehensive benefits including health insurance (medical, dental, vision, prescription, Basic Life & AD&D insurance and option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage), 401(k) matching, paid time off, and parental leave. Learn more about our benefits at https://amazon.jobs/en/benefits . USA, WA, Seattle - 129,200.00 - 174,800.00 USD annually", "summaryDescription" : "Systems Development Engineer - Identity, Cryptography and Identity Management at Amazon Development Center U.S., Inc.. Skills: Identity management, Cryptography, Security engineering. Design and implement identity and access management solutions. Develop and maintain cryptographic services", "postedDate" : "2026-06-13T18:56:56.285", "createdAt" : "2026-06-13T18:56:56.285", "lastUpdated" : "2026-06-15T02:11:16.133", "ingestTimestamp" : "2026-06-13T18:56:56.285", "mongoId" : "6a25146374d8ee00a00bb7d9", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://account.amazon.jobs/jobs/10440082/apply", "salaryAnnualMin" : 129000, "salaryAnnualMax" : 174800, "salaryBand" : "100k-150k", "hasSalary" : true, "allSkills" : [ "IAM implementation", "Cryptography implementation", "Security architecture", "Software development lifecycle", "Identity management", "Cryptography", "Security engineering", "System design", "Problem solving", "Technical leadership", "Agile methodologies", "Access management", "Security protocols", "Distributed systems", "Cloud security", "Git", "JIRA", "Docker", "Kubernetes" ], "skillCount" : 19, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Mid", "dataQualityScore" : 0.8888889, "_score" : 1195.8606, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.95 }, { "id" : "6a3083c8f292fd229c071d92", "title" : "Cybersecurity Consultant (Access & Identity)", "company" : "Ensign", "industry" : "Consulting", "salary" : { "min" : 95000.0, "max" : 140000.0, "currency" : "SGD", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Mid-level Cybersecurity Consultant in Singapore, adjusted for industry and company size." }, "location" : "Singapore", "locations" : [ "Singapore" ], "timestamp" : "2026-06-16T12:39:40.303", "fingerprint" : "8d4eef66fba7598ab4792d2e02c8d2e56a9e859a519806acba41af30899cc40a", "source" : "workday", "language" : "en", "applyUrl" : "https://ensigninfosecurity.wd3.myworkdayjobs.com/Ensign_Careers/job/Singapore/Cybersecurity-Consultant--Access---Identity-_JOBREQ-0003511", "externalId" : "JOBREQ-0003511", "industryFunction" : { }, "locationPoint" : "1.3521,103.8198", "structuredLocations" : [ { "city" : "Singapore", "country" : "Singapore", "continent" : "as", "source" : "llm", "workMode" : "onsite", "geo" : "1.2899175,103.8519072" } ], "locationText" : "Singapore, Singapore", "employmentType" : "FULL_TIME", "minimumEducation" : "Bachelor's", "experienceMinYears" : 3, "experienceMaxYears" : 5, "experienceLevel" : "Mid", "majorSkills" : "Access & Identity, PAM, PKI", "majorSkillsList" : [ "Access & Identity", "PAM", "PKI" ], "coreResponsibilities" : "Carry out pre-sales engagement, Deploy AI related projects, Provide consultation as SME, Create technical documentation, Provide post-sales support, Carry out technical enablement", "domainKnowledge" : "Access & Identity; Privileged Access Management; Public Key Infrastructure", "domainList" : [ "access-identity", "privileged-access-management", "public-key-infrastructure" ], "domainSpecificKnowledge" : [ "Access & Identity", "Privileged Access Management", "Public Key Infrastructure" ], "communicationSkills" : "Written skills", "documentationSkills" : "Technical documentation", "qualificationsBasic" : "3+ years IT security experience", "qualificationsPreferred" : "Knowledge in PAM and PKI, Information security technologies knowledge", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "Ensign is hiring ! **Job Description** The incumbent is responsible for delivering information security projects that are related to Access & Identity (AI), specifically Privileged Access Management (PAM) & Public Key Infrastructure (PKI) related technologies, including the execution of all project implementation activities. **Responsibilities** * Carry out pre-sales engagement for projects relating to AI * Deploy AI related projects and provide consultation with regard to the deployment as a Subject Matter Expert (SME) * Create technical documentation for the AI deployment * Provide post-sales support services for corrective and preventive maintenance * Carry out technical enablement **Requirements** * Good Diploma or Bachelor’s Degree in Information Technology * Knowledge in information security technologies such as PAM and PKI is preferred * At least 3years of IT security experience * Good communication and written skills * Positive working attitude * Passionate in information security", "summaryDescription" : "Cybersecurity Consultant (Access & Identity) at Ensign. Skills: Access & Identity, PAM, PKI. Carry out pre-sales engagement. Deploy AI related projects", "postedDate" : "2026-06-13T03:54:46.117", "createdAt" : "2026-06-16T03:54:46.113", "lastUpdated" : "2026-06-16T12:39:40.303", "ingestTimestamp" : "2026-06-16T03:54:46.113", "mongoId" : "6a3083c8f292fd229c071d92", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://ensigninfosecurity.wd3.myworkdayjobs.com/Ensign_Careers/job/Singapore/Cybersecurity-Consultant--Access---Identity-_JOBREQ-0003511", "salaryBand" : "75k-100k", "hasSalary" : false, "allSkills" : [ "Access & Identity", "PAM", "PKI", "Privileged Access Management", "Public Key Infrastructure" ], "skillCount" : 5, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "mid", "dataQualityScore" : 1.0, "_score" : 1164.5409, "daysOld" : 3, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Cybersecurity", "llmIndustryConfidence" : 0.95 }, { "id" : "6a2cb20c74d8ee00a09df4fe", "title" : "Identity & PAM Security Engineer", "industry" : "IT", "salary" : { "min" : 45000.0, "max" : 65000.0, "currency" : "EUR", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market data for a Mid-level Identity & PAM Security Engineer in Spain, adjusted for seniority and industry." }, "location" : "Spain", "locations" : [ "Spain" ], "certifications" : [ "SC-300", "AZ-500", "CISSP", "CCSP" ], "timestamp" : "2026-06-16T02:46:34.381", "fingerprint" : "b3bc2c83f46f8027cb73381a84231f966428c291f718249b37397cd2a32bf363", "source" : "lever", "language" : "en", "applyUrl" : "https://jobs.lever.co/jobgether/4cf3044d-09c1-4eec-98ff-166f30dccfab/apply", "externalId" : "4cf3044d-09c1-4eec-98ff-166f30dccfab", "industryFunction" : { }, "structuredLocations" : [ { "country" : "Spain", "continent" : "eu", "workMode" : "onsite" } ], "locationText" : "Spain", "employmentType" : "FULL_TIME", "experienceMinYears" : 4, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "technicalSkills" : "Microsoft Entra ID, Google Cloud IAM, PowerShell, Python, APIs", "professionalSkills" : [ "Analytical skills", "Problem-solving skills", "Stakeholder management" ], "hardSkillsList" : [ "Privileged access controls", "Privileged Identity Management", "Just-in-time access", "Approval workflows", "Role assignments", "Administrative access processes", "Access review processes", "Certification processes", "Service accounts management", "Machine identities management", "Secrets management", "API keys management", "Credentials management", "Conditional access policies", "MFA enforcement", "Identity risk-based controls", "Identity workflows automation", "Access provisioning automation", "Reporting automation", "Remediation processes automation", "Least privilege principles", "Identity governance", "PAM strategies", "Security operations", "Identity security tooling", "Operational processes" ], "hardSkills" : [ { "name" : "Privileged access controls", "level" : "intermediate" }, { "name" : "Privileged Identity Management", "level" : "intermediate" }, { "name" : "Just-in-time access", "level" : "intermediate" }, { "name" : "Approval workflows", "level" : "intermediate" }, { "name" : "Role assignments", "level" : "intermediate" }, { "name" : "Administrative access processes", "level" : "intermediate" }, { "name" : "Access review processes", "level" : "intermediate" }, { "name" : "Certification processes", "level" : "intermediate" }, { "name" : "Service accounts management", "level" : "intermediate" }, { "name" : "Machine identities management", "level" : "intermediate" }, { "name" : "Secrets management", "level" : "intermediate" }, { "name" : "API keys management", "level" : "intermediate" }, { "name" : "Credentials management", "level" : "intermediate" }, { "name" : "Conditional access policies", "level" : "intermediate" }, { "name" : "MFA enforcement", "level" : "intermediate" }, { "name" : "Identity risk-based controls", "level" : "intermediate" }, { "name" : "Identity workflows automation", "level" : "intermediate" }, { "name" : "Access provisioning automation", "level" : "intermediate" }, { "name" : "Reporting automation", "level" : "intermediate" }, { "name" : "Remediation processes automation", "level" : "intermediate" }, { "name" : "Least privilege principles", "level" : "intermediate" }, { "name" : "Identity governance", "level" : "intermediate" }, { "name" : "PAM strategies", "level" : "intermediate" }, { "name" : "Security operations", "level" : "intermediate" }, { "name" : "Identity security tooling", "level" : "intermediate" }, { "name" : "Operational processes", "level" : "intermediate" } ], "majorSkills" : "Cloud Security, Privileged Access Management, Identity Governance", "majorSkillsList" : [ "Cloud Security", "Privileged Access Management", "Identity Governance" ], "coreResponsibilities" : "Design privileged access controls, Implement privileged access controls, Manage privileged access controls, Define secure administrative access processes, Maintain secure administrative access processes, Lead access review processes, Lead certification processes, Ensure remediation actions completed, Manage service accounts lifecycle, Manage machine identities lifecycle, Manage secrets lifecycle, Manage API keys lifecycle, Manage credentials lifecycle, Configure conditional access policies, Configure MFA enforcement, Configure identity risk-based security controls, Design automation for identity workflows, Implement automation for identity workflows, Collaborate with Security teams, Collaborate with Infrastructure teams, Collaborate with Engineering teams, Support security audits, Support compliance requirements, Support incident response, Support identity-related investigations, Contribute to identity governance evolution, Contribute to PAM strategies evolution, Contribute to security operations best practices evolution, Improve identity security tooling, Improve documentation, Improve operational processes", "teamCollaboration" : "Security teams; Infrastructure teams; Engineering teams; Globally distributed team", "domainKnowledge" : "Identity security principles; Least privilege; RBAC; MFA; Conditional access; Privileged access management; Service accounts; Machine identities; Secrets management; Credential rotation; PAM; Identity governance; Cloud identity; Enterprise security architectures", "domainList" : [ "identity-security-principles", "least-privilege", "rbac", "mfa", "conditional-access", "privileged-access-management", "service-accounts", "machine-identities", "secrets-management", "credential-rotation", "pam", "identity-governance", "cloud-identity", "enterprise-security-architectures" ], "domainSpecificKnowledge" : [ "Identity security principles", "Least privilege", "RBAC", "MFA", "Conditional access", "Privileged access management", "Service accounts", "Machine identities", "Secrets management", "Credential rotation", "PAM", "Identity governance", "Cloud identity", "Enterprise security architectures" ], "toolProficiency" : [ "Microsoft Entra ID", "Google Cloud IAM", "HashiCorp Vault", "Azure Key Vault", "Google Secret Manager", "SIEM tools", "Log analysis platforms", "Security monitoring systems" ], "communicationSkills" : "Documentation; Stakeholder management", "documentationSkills" : "Documentation", "continuousLearning" : "Continuous improvement", "problemSolvingSkills" : "Analytical; Problem-solving; Security-first mindset", "qualificationsBasic" : "4+ years IAM experience, 4+ years Cloud Security experience, 4+ years Infrastructure Security experience, 4+ years Security Engineering experience, Hands-on identity platforms experience, Understand identity security principles, Manage service accounts experience, Manage machine identities experience, Manage secrets management experience, Manage credential rotation experience, Design PAM processes experience, Operate PAM processes experience, Design identity governance processes experience, Operate identity governance processes experience, Build automation experience", "qualificationsPreferred" : "Experience with SIEM tools a plus, Experience with log analysis platforms a plus, Experience with security monitoring systems a plus, Familiarity with HashiCorp Vault advantageous, Familiarity with Azure Key Vault advantageous, Familiarity with Google Secret Manager advantageous, SC-300 certification a plus, AZ-500 certification a plus, CISSP certification a plus, CCSP certification a plus", "remoteFriendly" : true, "workSiteFlexibility" : "Remote", "rawDescription" : "## Accountabilities Design, implement, and manage privileged access controls including Privileged Identity Management (PIM), just-in-time (JIT) access, approval workflows, and role assignments. Define and maintain secure administrative access processes for high-risk roles, privileged sessions, and emergency break-glass accounts. Lead access review and certification processes, ensuring remediation actions are completed and access remains aligned with least-privilege principles. Manage the lifecycle of service accounts, machine identities, secrets, API keys, and credentials, including rotation, monitoring, and decommissioning. Configure and maintain conditional access policies, MFA enforcement, and identity risk-based security controls. Design and implement automation for identity workflows, including approvals, access provisioning, reporting, and remediation processes. Collaborate with Security, Infrastructure, and Engineering teams to enhance identity security across cloud and enterprise environments. Support security audits, compliance requirements, incident response, and identity-related investigations. Contribute to the evolution of identity governance, PAM strategies, and security operations best practices. Improve identity security tooling, documentation, and operational processes to increase scalability and resilience. Requirements 4+ years of experience in Identity & Access Management (IAM), Cloud Security, Infrastructure Security, or Security Engineering roles. Hands-on experience with identity platforms such as Microsoft Entra ID and Google Cloud IAM. Strong understanding of identity security principles including least privilege, RBAC, MFA, conditional access, and privileged access management. Experience managing service accounts, machine identities, secrets management, and credential rotation at scale. Proven ability to design or operate PAM or identity governance processes in complex environments. Experience building automation using tools such as PowerShell, Python, APIs, or workflow orchestration platforms. Strong analytical and problem-solving skills with a security-first mindset. Experience working with SIEM tools, log analysis platforms, or security monitoring systems is a plus. Familiarity with tools such as HashiCorp Vault, Azure Key Vault, or Google Secret Manager is advantageous. Relevant certifications such as SC-300, AZ-500, CISSP, or CCSP are considered a strong plus. Excellent communication, documentation, and stakeholder management skills. Ability to work effectively in distributed, fast-paced, and collaborative engineering environments. Benefits Competitive salary with performance-based quarterly bonuses. Remote-first working model with flexibility across working hours. 28 days of paid annual leave. Core working hours with flexibility outside of defined collaboration windows. Top-tier equipment provided to support your work. Referral bonuses and performance-based flash bonuses. Annual company retreats with international team collaboration opportunities. Opportunity to work in a highly technical, security-focused environment. Exposure to modern cloud identity, PAM, and enterprise security architectures. Strong emphasis on autonomy, ownership, and continuous improvement. Collaborative and globally distributed team culture. ## Additional Information How Jobgether works: We use an AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team. We appreciate your interest and wish you the best! Why Apply Through Jobgether? Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time. #LI-CL1", "summaryDescription" : "Identity & PAM Security Engineer. Skills: Cloud Security, Privileged Access Management, Identity Governance. Design privileged access controls. Implement privileged access controls", "postedDate" : "2026-06-11T04:41:30.186", "createdAt" : "2026-06-11T04:41:30.186", "lastUpdated" : "2026-06-16T02:46:34.381", "ingestTimestamp" : "2026-06-14T21:39:26.140", "mongoId" : "6a2cb20c74d8ee00a09df4fe", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "30k-50k", "hasSalary" : false, "allSkills" : [ "Privileged access controls", "Privileged Identity Management", "Just-in-time access", "Approval workflows", "Role assignments", "Administrative access processes", "Access review processes", "Certification processes", "Service accounts management", "Machine identities management", "Secrets management", "API keys management", "Credentials management", "Conditional access policies", "MFA enforcement", "Identity risk-based controls", "Identity workflows automation", "Access provisioning automation", "Reporting automation", "Remediation processes automation", "Least privilege principles", "Identity governance", "PAM strategies", "Security operations", "Identity security tooling", "Operational processes", "Cloud Security", "Privileged Access Management", "Identity Governance", "Analytical skills", "Problem-solving skills", "Stakeholder management", "Identity security principles", "Least privilege", "RBAC", "MFA", "Conditional access", "Privileged access management", "Service accounts", "Machine identities", "Credential rotation", "PAM", "Cloud identity", "Enterprise security architectures", "SC-300", "AZ-500", "CISSP", "CCSP", "Microsoft Entra ID", "Google Cloud IAM", "HashiCorp Vault", "Azure Key Vault", "Google Secret Manager", "SIEM tools", "Log analysis platforms", "Security monitoring systems" ], "skillCount" : 56, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Mid", "dataQualityScore" : 0.8888889, "_score" : 1159.2642, "daysOld" : 4, "hasLocation" : true, "hasGeo" : false, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.95 }, { "id" : "6a2caf5874d8ee00a09d6ae3", "title" : "Identity and Access Management Engineer", "company" : "Signode", "industry" : "Packaging And Containers", "salary" : { "min" : 70000.0, "max" : 85000.0, "currency" : "USD", "frequency" : "yearly" }, "location" : "Tampa, FL, United States", "locations" : [ "Tampa", "FL", "United States" ], "timestamp" : "2026-06-15T06:54:54.704", "fingerprint" : "2a6d2039eed6a64ed79665ff1a54e032e897ceb2f3debaecc507e118083bfcee", "source" : "smartrecruiters", "language" : "en", "applyUrl" : "https://jobs.smartrecruiters.com/Signode/3743990013555396-identity-and-access-management-engineer", "externalId" : "3743990013555396", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Tampa", "state" : "Florida", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "27.9449854,-82.4583107" } ], "locationText" : "Tampa, Florida, United States", "employmentType" : "FULL_TIME", "experienceLevel" : "not-applicable", "technicalSkills" : "PowerShell, Python, LotusScript, JavaScript, Active Directory, Entra ID, Azure AD, Cloud services, SaaS platforms, APIs, SSO, MFA", "professionalSkills" : [ "Systems integration", "Automation workflows" ], "hardSkillsList" : [ "Identity management", "Access management", "User onboarding", "User offboarding", "Access changes", "Authentication methods", "Role-based access" ], "softSkillsList" : [ "Analytical Skills", "Creative", "Communicator" ], "hardSkills" : [ { "name" : "Identity management", "level" : "intermediate" }, { "name" : "Access management", "level" : "intermediate" }, { "name" : "User onboarding", "level" : "intermediate" }, { "name" : "User offboarding", "level" : "intermediate" }, { "name" : "Access changes", "level" : "intermediate" }, { "name" : "Authentication methods", "level" : "intermediate" }, { "name" : "Role-based access", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Analytical Skills" }, { "name" : "Creative" }, { "name" : "Communicator" } ], "majorSkills" : "Cloud Services, Software Development, Identity Security", "majorSkillsList" : [ "Cloud Services", "Software Development", "Identity Security" ], "coreResponsibilities" : "Build automate improve systems, Manage digital identities, Write code, Build integrations, Automate workflows, Support user onboarding, Support access management, Support security, Support Active Directory, Support Entra ID, Manage authentication methods, Maintain secure configurations, Maintain standardized configurations, Contribute to technical documentation, Contribute to standard operating procedures, Participate in design discussions, Participate in continuous improvement", "teamCollaboration" : "Global IT Cloud Services team; Global operations team; Global Identity & Access Management team; Management team; Global team design discussions", "domainKnowledge" : "Identity and Access Management; Cloud; Identity security; Enterprise identity systems; ITIL; ISO best practices", "domainList" : [ "identity-and-access-management", "cloud", "identity-security", "enterprise-identity-systems", "itil", "iso-best-practices" ], "domainSpecificKnowledge" : [ "Identity and Access Management", "Cloud", "Identity security", "Enterprise identity systems", "ITIL", "ISO best practices" ], "toolProficiency" : [ "Postman" ], "communicationSkills" : "Verbal; Written", "documentationSkills" : "Technical documentation; Standard operating procedures", "continuousLearning" : "Learn best industry practices; Gain exposure to compliance; Gain exposure to security; Gain exposure to change-management", "innovationCreativity" : "Highly Creative", "problemSolvingSkills" : "Problem-solving skills; Analytical Skills", "qualificationsBasic" : "Bachelor’s degree in computer science, Equivalent experience in the field, Programming fundamentals, Problem-solving skills, Experience with scripting or development, Basic software development concepts", "qualificationsPreferred" : "Exposure to Active Directory, Exposure to Azure, Exposure to cloud platforms, Familiarity with REST APIs, Familiarity with JSON, Familiarity with Postman, Familiarity with XML, Familiarity with HTML, Familiar with authentication concepts, Familiar with ITIL, Familiar with ISO best practices, Internship, Lab projects, GitHub work, Personal automation projects", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "Signode, the Transit Packaging division of Crown Holdings, Inc. (NYSE: CCK), has its global headquarters in Tampa, Florida. Signode is a global leader in transit packaging, with over 80 manufacturing facilities across six continents and more than 7,000 workers worldwide. With over $2B in revenue, 80+ manufacturing facilities across 6 continents, Signode is a leading manufacturer of a broad spectrum of transit packaging consumables, tools, software, and equipment that optimize end-of-line packaging operations and protect products in transit. Signode brings this extensive product portfolio together under hundreds of trusted brands to offer complete transit packaging solutions to its customers. We produce strap, stretch and protective packaging. We also manufacture packaging tools and equipment used to apply the bulk packaging materials. These commercial packaging products are used to pack, bundle, unitize, protect and secure goods during warehousing and transit. Our company is a materials, processes and automation technology that have revolutionized the sector. Benefits: Signode offers a comprehensive benefits package to full-time employees, which includes health, dental, vision, 401k, paid time off, life insurance, wellness perks, and more. Benefits begin the month following the hire date. Salary: The annual salary for this position ranges from $70,000 - $85,000 and varies based on specific responsibilities and geographic location. Starting annual salary within this range will be determined based on the candidate's experience, qualifications, and/or skillset. Summary: We are seeking an entry-level to intermediate Identity and Access Management Engineer to join our global IT Cloud Services team. This role is ideal for a soon-to-be or recent college graduate who enjoys development, scripting, and automation, and who wants to grow their career at the intersection of software development, cloud, and identity security. The position pairs up with two members of our global operations team to make the global Identity & Access Management (IAM) team. This key IAM role will report directly to our Global IT Director of Cloud Services. Essential Functions: As an entry-Level to intermediate Identity Management Engineer, you will join the Identity & Access Management (IAM) team and help build, automate, and improve systems that manage digital identities across the organization. This role is hands-on and development‑focused, where you will write code, build integrations, and automate workflows that support user onboarding, access management, and security. You will work closely with the management team and Operations Specialists while gaining exposure to real-world enterprise systems such as Active Directory, Entra ID (Azure AD), cloud services, and SaaS platforms. Development & Automation Focus * Write scripts and tools (PowerShell, Python, LotusScript, JavaScript, or similar) to automate identity-related processes * Build and improve workflows for onboarding, offboarding, and access changes * Integrate identity platforms with HR systems and business applications * Assist in developing APIs, connectors, and automation jobs that reduce manual work Identity & Cloud Foundations * Support Active Directory and Entra ID environments * Help manage authentication methods such as SSO, MFA, and role-based access * Learn how enterprise identity systems connect to cloud and SaaS platforms * Assist with maintaining secure, standardized identity configurations Learning & Growth * Learn best industry practices for Identity & Access Management (IAM) * Contribute to technical documentation and standard operating procedures * Participate in Global team design discussions and continuous improvement efforts * Gain exposure to compliance, security, and change‑management processes ## Qualifications Education: * Bachelor’s degree in computer science, Information Systems, Software Engineering, Cybersecurity, or equivalent experience in the field. * Students graduating soon or recent graduates are encouraged to apply Experience: * Strong programming fundamentals and problem‑solving skills * Experience with scripting or development (PowerShell, Python, JavaScript, or similar) * Understanding of basic software development concepts (functions, APIs, version control) * Interest in automation, systems integration, and cloud technologies Bonus Skils (Nice to Have, Not Required) * Exposure to Active Directory, Azure, or cloud platforms * Familiarity with REST APIs, JSON, Postman, XML, HTML * Familiar with authentication concepts * Familiar with ITIL and ISO best practices and the implementation of such practices in the Identity space * Internship, lab projects, GitHub work, or personal automation projects Functional Success Drivers: These competencies are what we require for an individual to be successful in this role. * Good Analytical Skills * Highly Creative * Detail Oriented * Acts with Integrity * Good Team Player * Good Communicator (Verbal & Written) ## Additional Information All your information will be kept confidential according to EEO guidelines. The Company does not sponsor for employment-based visas for this position now or in the future. Reasonable Accommodation Statement To perform this job successfully, the individual must be able to perform each essential duty satisfactorily. Reasonable Accommodations may be made to enable qualified individuals with disabilities. Signode is committed to providing equal opportunities to all qualified applicants, including providing reasonable accommodations during our recruiting process. If you need any assistance or accommodation in applying for this position, please contact us at HRRecruiting@Signode.com. The Company has reviewed this job description to ensure that essential functions and basic duties have been included. It is intended to provide guidelines for job expectations and the employee's ability to perform the position described. It is not intended to be construed as an exhaustive list of all functions, responsibilities, skills and abilities. Additional functions and requirements may be assigned by supervisors as deemed appropriate. This document does not represent a contract of employment, and the Company reserves the right to change this job description and/or assign tasks for the employee to perform, as the Company may deem appropriate. Signode participates in E-Verify and will provide the Department of Homeland Security your Form I-9 information to confirm your authorization to work in the United States. Signode Industrial Group, LLC is an Equal Opportunity / Affirmative Action employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability or protected veteran status.", "summaryDescription" : "Identity and Access Management Engineer at Signode. Skills: Cloud Services, Software Development, Identity Security. Build automate improve systems. Manage digital identities", "postedDate" : "2026-06-10T13:15:37.000", "createdAt" : "2026-06-13T23:19:49.314", "lastUpdated" : "2026-06-15T06:54:54.704", "ingestTimestamp" : "2026-06-13T23:19:49.314", "mongoId" : "6a2caf5874d8ee00a09d6ae3", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 70000, "salaryAnnualMax" : 85000, "salaryBand" : "50k-75k", "hasSalary" : true, "allSkills" : [ "Identity management", "Access management", "User onboarding", "User offboarding", "Access changes", "Authentication methods", "Role-based access", "Analytical Skills", "Creative", "Communicator", "Cloud Services", "Software Development", "Identity Security", "Systems integration", "Automation workflows", "Identity and Access Management", "Cloud", "Identity security", "Enterprise identity systems", "ITIL", "ISO best practices", "Postman" ], "skillCount" : 22, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Entry", "dataQualityScore" : 1.0, "_score" : 1158.6344, "daysOld" : 4, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Manufacturing", "llmIndustryConfidence" : 0.95 }, { "id" : "6a2c810274d8ee00a095921b", "title" : "Identity and Access Management Engineer", "company" : "Signode", "industry" : "Packaging And Containers", "salary" : { "min" : 70000.0, "max" : 85000.0, "currency" : "USD", "frequency" : "yearly" }, "location" : "Tampa, FL, United States", "locations" : [ "Tampa", "FL", "United States" ], "timestamp" : "2026-06-15T06:38:40.414", "fingerprint" : "2facc926e378064a7790be12eba5ae07afb2bf784bfad61181950f4a8e7b618f", "source" : "smartrecruiters", "language" : "en", "applyUrl" : "https://jobs.smartrecruiters.com/Signode/3743990013555396-identity-and-access-management-engineer", "externalId" : "3743990013555396", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Tampa", "state" : "Florida", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "27.9449854,-82.4583107" } ], "locationText" : "Tampa, Florida, United States", "employmentType" : "FULL_TIME", "experienceLevel" : "not-applicable", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "Signode, the Transit Packaging division of Crown Holdings, Inc. (NYSE: CCK), has its global headquarters in Tampa, Florida. Signode is a global leader in transit packaging, with over 80 manufacturing facilities across six continents and more than 7,000 workers worldwide. With over $2B in revenue, 80+ manufacturing facilities across 6 continents, Signode is a leading manufacturer of a broad spectrum of transit packaging consumables, tools, software, and equipment that optimize end-of-line packaging operations and protect products in transit. Signode brings this extensive product portfolio together under hundreds of trusted brands to offer complete transit packaging solutions to its customers. We produce strap, stretch and protective packaging. We also manufacture packaging tools and equipment used to apply the bulk packaging materials. These commercial packaging products are used to pack, bundle, unitize, protect and secure goods during warehousing and transit. Our company is a materials, processes and automation technology that have revolutionized the sector. Benefits: Signode offers a comprehensive benefits package to full-time employees, which includes health, dental, vision, 401k, paid time off, life insurance, wellness perks, and more. Benefits begin the month following the hire date. Salary: The annual salary for this position ranges from $70,000 - $85,000 and varies based on specific responsibilities and geographic location. Starting annual salary within this range will be determined based on the candidate's experience, qualifications, and/or skillset. Summary: We are seeking an entry-level to intermediate Identity and Access Management Engineer to join our global IT Cloud Services team. This role is ideal for a soon-to-be or recent college graduate who enjoys development, scripting, and automation, and who wants to grow their career at the intersection of software development, cloud, and identity security. The position pairs up with two members of our global operations team to make the global Identity & Access Management (IAM) team. This key IAM role will report directly to our Global IT Director of Cloud Services. Essential Functions: As an entry-Level to intermediate Identity Management Engineer, you will join the Identity & Access Management (IAM) team and help build, automate, and improve systems that manage digital identities across the organization. This role is hands-on and development‑focused, where you will write code, build integrations, and automate workflows that support user onboarding, access management, and security. You will work closely with the management team and Operations Specialists while gaining exposure to real-world enterprise systems such as Active Directory, Entra ID (Azure AD), cloud services, and SaaS platforms. Development & Automation Focus * Write scripts and tools (PowerShell, Python, LotusScript, JavaScript, or similar) to automate identity-related processes * Build and improve workflows for onboarding, offboarding, and access changes * Integrate identity platforms with HR systems and business applications * Assist in developing APIs, connectors, and automation jobs that reduce manual work Identity & Cloud Foundations * Support Active Directory and Entra ID environments * Help manage authentication methods such as SSO, MFA, and role-based access * Learn how enterprise identity systems connect to cloud and SaaS platforms * Assist with maintaining secure, standardized identity configurations Learning & Growth * Learn best industry practices for Identity & Access Management (IAM) * Contribute to technical documentation and standard operating procedures * Participate in Global team design discussions and continuous improvement efforts * Gain exposure to compliance, security, and change‑management processes ## Qualifications Education: * Bachelor’s degree in computer science, Information Systems, Software Engineering, Cybersecurity, or equivalent experience in the field. * Students graduating soon or recent graduates are encouraged to apply Experience: * Strong programming fundamentals and problem‑solving skills * Experience with scripting or development (PowerShell, Python, JavaScript, or similar) * Understanding of basic software development concepts (functions, APIs, version control) * Interest in automation, systems integration, and cloud technologies Bonus Skils (Nice to Have, Not Required) * Exposure to Active Directory, Azure, or cloud platforms * Familiarity with REST APIs, JSON, Postman, XML, HTML * Familiar with authentication concepts * Familiar with ITIL and ISO best practices and the implementation of such practices in the Identity space * Internship, lab projects, GitHub work, or personal automation projects Functional Success Drivers: These competencies are what we require for an individual to be successful in this role. * Good Analytical Skills * Highly Creative * Detail Oriented * Acts with Integrity * Good Team Player * Good Communicator (Verbal & Written) ## Additional Information All your information will be kept confidential according to EEO guidelines. The Company does not sponsor for employment-based visas for this position now or in the future. Reasonable Accommodation Statement To perform this job successfully, the individual must be able to perform each essential duty satisfactorily. Reasonable Accommodations may be made to enable qualified individuals with disabilities. Signode is committed to providing equal opportunities to all qualified applicants, including providing reasonable accommodations during our recruiting process. If you need any assistance or accommodation in applying for this position, please contact us at HRRecruiting@Signode.com. The Company has reviewed this job description to ensure that essential functions and basic duties have been included. It is intended to provide guidelines for job expectations and the employee's ability to perform the position described. It is not intended to be construed as an exhaustive list of all functions, responsibilities, skills and abilities. Additional functions and requirements may be assigned by supervisors as deemed appropriate. This document does not represent a contract of employment, and the Company reserves the right to change this job description and/or assign tasks for the employee to perform, as the Company may deem appropriate. Signode participates in E-Verify and will provide the Department of Homeland Security your Form I-9 information to confirm your authorization to work in the United States. Signode Industrial Group, LLC is an Equal Opportunity / Affirmative Action employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability or protected veteran status.", "summaryDescription" : "Identity and Access Management Engineer at Signode", "postedDate" : "2026-06-10T13:15:37.000", "createdAt" : "2026-06-13T18:37:51.350", "lastUpdated" : "2026-06-15T06:38:40.414", "ingestTimestamp" : "2026-06-13T18:37:51.350", "mongoId" : "6a2c810274d8ee00a095921b", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 70000, "salaryAnnualMax" : 85000, "salaryBand" : "50k-75k", "hasSalary" : true, "allSkills" : [ ], "skillCount" : 0, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Entry", "dataQualityScore" : 0.8888889, "_score" : 1149.697, "daysOld" : 4, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Manufacturing", "llmIndustryConfidence" : 0.95 }, { "id" : "6a2c690f74d8ee00a0905d44", "title" : "Identity & Access Management Specialist - AI Trainer - Freelance", "company" : "10x Team", "industry" : "Technology & Product", "salary" : { "min" : 90.0, "max" : 158.0, "currency" : "EUR", "frequency" : "Yearly" }, "location" : "Belgium", "locations" : [ "Belgium" ], "timestamp" : "2026-06-16T01:43:36.688", "fingerprint" : "abd637019c092bdae997799ce89ef0f2597407a8f0abd2023058d07f4abfe090", "source" : "ashby", "language" : "en", "applyUrl" : "https://jobs.ashbyhq.com/10xteam/d83366b0-09ea-451a-8bfa-a7baf930a7cd/application", "externalId" : "d83366b0-09ea-451a-8bfa-a7baf930a7cd", "industryFunction" : { }, "structuredLocations" : [ { "country" : "European Union", "continent" : "eu", "workMode" : "remote" }, { "country" : "United Kingdom", "continent" : "eu", "workMode" : "remote" } ], "locationText" : "European Union; United Kingdom", "employmentType" : "CONTRACT", "professionalSkills" : [ "Identity management", "Access control", "Regulatory compliance", "Risk mitigation" ], "hardSkillsList" : [ "Identity governance", "Access provisioning", "Authentication frameworks", "Access management", "Role-based access control", "Identity lifecycle management" ], "hardSkills" : [ { "name" : "Identity governance", "level" : "intermediate" }, { "name" : "Access provisioning", "level" : "intermediate" }, { "name" : "Authentication frameworks", "level" : "intermediate" }, { "name" : "Access management", "level" : "intermediate" }, { "name" : "Role-based access control", "level" : "intermediate" }, { "name" : "Identity lifecycle management", "level" : "intermediate" } ], "majorSkills" : "AI Training", "majorSkillsList" : [ "AI Training" ], "coreResponsibilities" : "Review AI-generated outputs, Refine AI-generated outputs, Assess AI-driven recommendations, Develop real-world case studies, Create scenario variations, Identify gaps in AI recommendations, Articulate risks in AI recommendations, Provide structured feedback, Influence AI system interpretation", "domainKnowledge" : "Identity management; Access control models; Authentication; Identity governance; Regulatory frameworks; GDPR; SOX; Digital identity", "domainList" : [ "identity-management", "access-control-models", "authentication", "identity-governance", "regulatory-frameworks", "gdpr", "sox", "digital-identity" ], "domainSpecificKnowledge" : [ "Identity management", "Access control models", "Authentication", "Identity governance", "Regulatory frameworks", "GDPR", "SOX", "Digital identity" ], "continuousLearning" : "AI Academy", "problemSolvingSkills" : "Analytical", "qualificationsBasic" : "Experienced IAM consultant, Based in the EU or UK, Available 8–20 hours per week", "remoteFriendly" : true, "workSiteFlexibility" : "Remote", "rawDescription" : "Updated: 11 June 2026 Freelance | 8–20 hrs/week | Remote (EU/UK) Are you an experienced Identity & Access Management (IAM) professional passionate about shaping the next generation of artificial intelligence? Join 10x Team as a Freelance IAM Consultant – AI Trainer and leverage your IAM expertise to improve leading-edge AI models, all while benefiting from the flexibility of remote, project-based work. About Us: 10x Team connects top independent professionals with leading AI labs to advance artificial intelligence. We are seeking skilled IAM specialists based in the EU or UK to help train AI systems in identity management, access control, regulatory compliance, and IAM best practices. Key Responsibilities: - Review and refine AI-generated outputs related to identity governance, access provisioning, and authentication frameworks - Assess the accuracy and practicality of AI-driven recommendations on access management, role-based access control, and compliance - Develop real-world case studies and scenarios from your professional experience in IAM - Create scenario variations covering identity lifecycle management, regulatory requirements, and risk mitigation - Identify and articulate gaps or risks in AI recommendations, providing clear, structured feedback - Influence how AI systems interpret IAM best practices and security standards About You: - Experienced IAM consultant with a proven track record in identity and access management - Based in the EU or UK - Deep understanding of access control models, authentication, identity governance, and regulatory frameworks (e.g., GDPR, SOX) - Analytical and detail-oriented, able to deliver actionable, structured feedback - Available 8–20 hours per week and comfortable working remotely and asynchronously Why Join 10x Team? - Flexible, project-based freelance assignments – 100% remote - Help shape how AI systems interpret and support the future of digital identity and access management - Access to ongoing professional development through the 10x Team AI Academy - Supportive community of independent experts, clear assignment briefs, and streamlined onboarding How to Apply: After applying, you’ll receive an email detailing the steps to: - ⁠Complete a short written assessment - Participate in an AI-powered interview Important: Your application is only complete once you finish all steps via the email link. Please note: these AI Lab missions are not traditional job openings with fixed start dates. Project demand is highly dynamic and matching depends on your expertise, availability, and current AI Lab needs. Some experts are matched within days, while others may wait longer for a suitable project. Step into the future of AI-powered identity and access management – apply today! #LI-TT1 ----------------------------------------- NOTE At 10x, there are two types of opportunities: 1. Traditional freelance missions These are regular project-based opportunities where the listed mission is the actual project you may work on. 2. AI Lab roles For AI Lab roles, we scout, review, and approve profiles for access to future project opportunities. The missions listed for AI Lab roles are not traditional job openings. AI Lab work is often highly confidential as this exposes information of what an AI Lab is working on, and project requests are unpredictable. When an AI Lab request comes in, we often need to respond within 24 hours with suitable talent. Matching depends on the specific needs of each AI Lab project and your niche expertise. Once your profile is reviewed and approved, you may be matched to relevant AI Lab projects when suitable opportunities arise. This can happen within hours, but it may also take months, depending on the researchers at the AI labs and their project needs.", "summaryDescription" : "Identity & Access Management Specialist - AI Trainer - Freelance at 10x Team. Skills: AI Training. Review AI-generated outputs. Refine AI-generated outputs", "createdAt" : "2026-06-14T19:28:26.513", "lastUpdated" : "2026-06-16T01:43:36.688", "ingestTimestamp" : "2026-06-14T19:28:26.513", "mongoId" : "6a2c690f74d8ee00a0905d44", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "<30k", "hasSalary" : false, "allSkills" : [ "Identity governance", "Access provisioning", "Authentication frameworks", "Access management", "Role-based access control", "Identity lifecycle management", "AI Training", "Identity management", "Access control", "Regulatory compliance", "Risk mitigation", "Access control models", "Authentication", "Regulatory frameworks", "GDPR", "SOX", "Digital identity" ], "skillCount" : 17, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Mid", "dataQualityScore" : 0.7777778, "_score" : 1146.5399, "hasLocation" : true, "hasGeo" : false, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.95 }, { "id" : "6a2cb20c74d8ee00a09df4fb", "title" : "Identity & PAM Security Engineer", "industry" : "IT", "location" : "Switzerland", "locations" : [ "Switzerland" ], "certifications" : [ "SC-300", "AZ-500", "CISSP", "CCSP" ], "timestamp" : "2026-06-15T13:42:28.830", "fingerprint" : "610c24a093264ee8574b3245697361cf5ccc63acdf402351bbdc8d5345c31b35", "source" : "lever", "applyUrl" : "https://jobs.lever.co/jobgether/17c6cf65-34e2-471f-8aa7-79cb0c5ce2a4/apply", "externalId" : "17c6cf65-34e2-471f-8aa7-79cb0c5ce2a4", "industryFunction" : { }, "structuredLocations" : [ { "country" : "Switzerland", "continent" : "eu", "workMode" : "onsite" } ], "locationText" : "Switzerland", "employmentType" : "FULL_TIME", "experienceMinYears" : 4, "experienceMaxYears" : 5, "experienceLevel" : "Mid", "technicalSkills" : "Microsoft Entra ID, Google Cloud IAM, PowerShell, Python, APIs", "professionalSkills" : [ "Identity & Access Management (IAM), Cloud Security, Infrastructure Security, Security Engineering, identity security principles, PAM strategies, security operations best practices, modern cloud identity, enterprise security architectures." ], "hardSkillsList" : [ "Privileged Identity Management", "just-in-time access", "least-privilege principles", "service accounts", "machine identities", "secrets management", "credential rotation", "conditional access policies", "MFA enforcement", "identity risk-based security controls", "RBAC", "PAM" ], "softSkillsList" : [ "analytical, problem-solving, security-first mindset, stakeholder management, autonomy, ownership" ], "hardSkills" : [ { "name" : "Privileged Identity Management", "level" : "intermediate" }, { "name" : "just-in-time access", "level" : "intermediate" }, { "name" : "least-privilege principles", "level" : "intermediate" }, { "name" : "service accounts", "level" : "intermediate" }, { "name" : "machine identities", "level" : "intermediate" }, { "name" : "secrets management", "level" : "intermediate" }, { "name" : "credential rotation", "level" : "intermediate" }, { "name" : "conditional access policies", "level" : "intermediate" }, { "name" : "MFA enforcement", "level" : "intermediate" }, { "name" : "identity risk-based security controls", "level" : "intermediate" }, { "name" : "RBAC", "level" : "intermediate" }, { "name" : "PAM", "level" : "intermediate" } ], "softSkills" : [ { "name" : "analytical, problem-solving, security-first mindset, stakeholder management, autonomy, ownership" } ], "majorSkills" : "Privileged Access Management, Identity and Access Management, Cloud Security, Automation, Secrets Management", "majorSkillsList" : [ "Privileged Access Management, Identity and Access Management, Cloud Security, Automation, Secrets Management" ], "coreResponsibilities" : "Design, implement, and manage privileged access controls including Privileged Identity Management (PIM), just-in-time (JIT) access, approval workflows, and role assignments. Define and maintain secure administrative access processes for high-risk roles, privileged sessions, and emergency break-glass accounts. Lead access review and certification processes, ensuring remediation actions are completed and access remains aligned with least-privilege principles. Manage the lifecycle of service accounts, machine identities, secrets, API keys, and credentials, including rotation, monitoring, and decommissioning. Configure and maintain conditional access policies, MFA enforcement, and identity risk-based security controls. Design and implement automation for identity workflows, including approvals, access provisioning, reporting, and remediation processes. Collaborate with Security, Infrastructure, and Engineering teams to enhance identity security across cloud and enterprise environments. Support security audits, compliance requirements, incident response, and identity-related investigations. Contribute to the evolution of identity governance, PAM strategies, and security operations best practices. Improve identity security tooling, documentation, and operational processes to increase scalability and resilience.", "teamCollaboration" : "Collaborate with Security, Infrastructure, and Engineering teams. Ability to work effectively in distributed, fast-paced, and collaborative engineering environments. Collaborative and globally distributed team culture.", "toolProficiency" : [ "HashiCorp Vault, Azure Key Vault, Google Secret Manager, SIEM tools" ], "communicationSkills" : "communication; documentation", "documentationSkills" : "documentation", "continuousLearning" : "emphasis on autonomy, ownership, and continuous improvement.", "problemSolvingSkills" : "analytical; problem-solving", "specialRequirements" : "Jobgether uses an AI-powered matching process. By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. You may exercise your rights (access, rectification, erasure, objection) at any time.", "qualificationsBasic" : "4+ years of experience in Identity & Access Management (IAM), Cloud Security, Infrastructure Security, or Security Engineering roles. Hands-on experience with identity platforms such as Microsoft Entra ID and Google Cloud IAM. understanding of identity security principles including least privilege, RBAC, MFA, conditional access, and privileged access management. Experience managing service accounts, machine identities, secrets management, and credential rotation at scale. Proven ability to design or operate PAM or identity governance processes in complex environments. Experience building automation using tools such as PowerShell, Python, APIs, or workflow orchestration platforms. analytical and problem-solving skills with a security-first mindset. Excellent communication, documentation, and stakeholder management skills. Ability to work effectively in distributed, fast-paced, and collaborative engineering environments.", "qualificationsPreferred" : "Experience with SIEM tools, log analysis platforms, or security monitoring systems is a plus. Familiarity with tools such as HashiCorp Vault, Azure Key Vault, or Google Secret Manager is advantageous. Relevant certifications such as SC-300, AZ-500, CISSP, or CCSP are considered a plus.", "remoteFriendly" : true, "workSiteFlexibility" : "Remote", "rawDescription" : "## Accountabilities Design, implement, and manage privileged access controls including Privileged Identity Management (PIM), just-in-time (JIT) access, approval workflows, and role assignments. Define and maintain secure administrative access processes for high-risk roles, privileged sessions, and emergency break-glass accounts. Lead access review and certification processes, ensuring remediation actions are completed and access remains aligned with least-privilege principles. Manage the lifecycle of service accounts, machine identities, secrets, API keys, and credentials, including rotation, monitoring, and decommissioning. Configure and maintain conditional access policies, MFA enforcement, and identity risk-based security controls. Design and implement automation for identity workflows, including approvals, access provisioning, reporting, and remediation processes. Collaborate with Security, Infrastructure, and Engineering teams to enhance identity security across cloud and enterprise environments. Support security audits, compliance requirements, incident response, and identity-related investigations. Contribute to the evolution of identity governance, PAM strategies, and security operations best practices. Improve identity security tooling, documentation, and operational processes to increase scalability and resilience. Requirements 4+ years of experience in Identity & Access Management (IAM), Cloud Security, Infrastructure Security, or Security Engineering roles. Hands-on experience with identity platforms such as Microsoft Entra ID and Google Cloud IAM. Strong understanding of identity security principles including least privilege, RBAC, MFA, conditional access, and privileged access management. Experience managing service accounts, machine identities, secrets management, and credential rotation at scale. Proven ability to design or operate PAM or identity governance processes in complex environments. Experience building automation using tools such as PowerShell, Python, APIs, or workflow orchestration platforms. Strong analytical and problem-solving skills with a security-first mindset. Experience working with SIEM tools, log analysis platforms, or security monitoring systems is a plus. Familiarity with tools such as HashiCorp Vault, Azure Key Vault, or Google Secret Manager is advantageous. Relevant certifications such as SC-300, AZ-500, CISSP, or CCSP are considered a strong plus. Excellent communication, documentation, and stakeholder management skills. Ability to work effectively in distributed, fast-paced, and collaborative engineering environments. Benefits Competitive salary with performance-based quarterly bonuses. Remote-first working model with flexibility across working hours. 28 days of paid annual leave. Core working hours with flexibility outside of defined collaboration windows. Top-tier equipment provided to support your work. Referral bonuses and performance-based flash bonuses. Annual company retreats with international team collaboration opportunities. Opportunity to work in a highly technical, security-focused environment. Exposure to modern cloud identity, PAM, and enterprise security architectures. Strong emphasis on autonomy, ownership, and continuous improvement. Collaborative and globally distributed team culture. ## Additional Information How Jobgether works: We use an AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team. We appreciate your interest and wish you the best! Why Apply Through Jobgether? Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time. #LI-CL1", "summaryDescription" : "Identity & PAM Security Engineer. Skills: Privileged Access Management, Identity and Access Management, Cloud Security, Automation, Secrets Management. Design, implement, and manage privileged access controls including Privileged Identity Management (PIM), just-in-time (JIT) access, approval workflows, and role assignments. Define and maintain secure administrative access processes for high-risk roles, privileged sessions, and emergency break-glass accounts. Lead access review and certification ", "postedDate" : "2026-06-11T04:42:05.138", "createdAt" : "2026-06-11T04:42:05.138", "lastUpdated" : "2026-06-15T13:42:28.830", "ingestTimestamp" : "2026-06-14T21:21:38.423", "mongoId" : "6a2cb20c74d8ee00a09df4fb", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "hasSalary" : false, "allSkills" : [ "Privileged Identity Management", "just-in-time access", "least-privilege principles", "service accounts", "machine identities", "secrets management", "credential rotation", "conditional access policies", "MFA enforcement", "identity risk-based security controls", "RBAC", "PAM", "analytical, problem-solving, security-first mindset, stakeholder management, autonomy, ownership", "Privileged Access Management, Identity and Access Management, Cloud Security, Automation, Secrets Management", "Identity & Access Management (IAM), Cloud Security, Infrastructure Security, Security Engineering, identity security principles, PAM strategies, security operations best practices, modern cloud identity, enterprise security architectures.", "SC-300", "AZ-500", "CISSP", "CCSP", "HashiCorp Vault, Azure Key Vault, Google Secret Manager, SIEM tools" ], "skillCount" : 20, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Mid", "dataQualityScore" : 0.7777778, "_score" : 1140.6865, "daysOld" : 4, "hasLocation" : true, "hasGeo" : false, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.95 }, { "id" : "6a2aa22674d8ee00a06ac2cf", "title" : "Senior Engineer - Privileged Access Management", "company" : "AHEAD", "industry" : "MS Engineering Support Services", "salary" : { "min" : 150000.0, "max" : 170000.0, "currency" : "USD", "frequency" : "yearly" }, "location" : "United States", "locations" : [ "United States" ], "certifications" : [ "PAM certifications", "BeyondTrust-specific certifications" ], "timestamp" : "2026-06-15T02:43:06.725", "fingerprint" : "ba4de78473e40b5120726dbfb4ce21d00c5eb5e00376e69aa0ba0bedc6315838", "source" : "lever", "language" : "en", "applyUrl" : "https://jobs.lever.co/thinkahead/d03a5b7c-325c-4142-981a-4626e800df91/apply", "externalId" : "d03a5b7c-325c-4142-981a-4626e800df91", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Chicago", "state" : "Illinois", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "41.8755616,-87.6244212" }, { "city" : "Tel Aviv", "country" : "Israel", "continent" : "as", "source" : "llm", "workMode" : "onsite", "geo" : "32.0852997,34.7818064" }, { "country" : "United States", "continent" : "na", "workMode" : "onsite" } ], "locationText" : "Chicago, Illinois, United States; Tel Aviv, Israel; United States", "employmentType" : "FULL_TIME", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "technicalSkills" : "PowerShell, Python, REST APIs, Active Directory, Entra ID, LDAP, SAML, OIDC, OAuth2, Windows, Linux, Unix, Bash", "professionalSkills" : [ "Privileged access controls", "Risk assessment", "Customer onboarding", "Service offerings", "ITSM tools", "Compliance", "Audit support" ], "hardSkillsList" : [ "Privileged access workflows", "Password rotation policies", "Session brokering", "Just-in-time access", "Policy design", "Disaster recovery", "Automation tooling", "Lifecycle management", "Configuration standards", "Risk management", "Troubleshooting" ], "softSkillsList" : [ "Leadership", "Mentoring" ], "hardSkills" : [ { "name" : "Privileged access workflows", "level" : "intermediate" }, { "name" : "Password rotation policies", "level" : "intermediate" }, { "name" : "Session brokering", "level" : "intermediate" }, { "name" : "Just-in-time access", "level" : "intermediate" }, { "name" : "Policy design", "level" : "intermediate" }, { "name" : "Disaster recovery", "level" : "intermediate" }, { "name" : "Automation tooling", "level" : "intermediate" }, { "name" : "Lifecycle management", "level" : "intermediate" }, { "name" : "Configuration standards", "level" : "intermediate" }, { "name" : "Risk management", "level" : "intermediate" }, { "name" : "Troubleshooting", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Leadership" }, { "name" : "Mentoring" } ], "majorSkills" : "Privileged Access Management, BeyondTrust PAM, Cloud infrastructure, Automation", "majorSkillsList" : [ "Privileged Access Management", "BeyondTrust PAM", "Cloud infrastructure", "Automation" ], "coreResponsibilities" : "Lead architecture and design, Architect secure privileged access workflows, Implement and maintain BeyondTrust Password Safe, Implement and maintain BeyondTrust Privilege Management, Design and maintain BeyondTrust infrastructure, Integrate PAM with identity platforms, Develop and maintain automation and tooling, Accelerate onboarding and lifecycle management, Enforce configuration standards and policies, Generate reports and dashboards, Lead end-to-end customer onboarding, Define and maintain standardized PAM policies, Conduct security and risk assessments, Recommend remediation plans, Serve as subject matter expert, Troubleshoot BeyondTrust platform issues, Collaborate with security teams, Develop and maintain documentation, Provide mentoring and guidance, Communicate with customers and stakeholders, Complete training and certification", "teamCollaboration" : "Cross-functional projects; Internal and customer teams; Security, infrastructure, network teams; Application teams", "projectManagementSkills" : [ "Scrum/Agile environments", "Backlog grooming", "Sprint planning" ], "domainKnowledge" : "Privileged Access Management; Least privilege principles; Regulatory requirements; Cloud platforms; Network devices; Identity and access management; SOX; PCI DSS; HIPAA; ISO 27001", "domainList" : [ "privileged-access-management", "least-privilege-principles", "regulatory-requirements", "cloud-platforms", "network-devices", "identity-and-access-management", "sox", "pci-dss", "hipaa", "iso-27001" ], "domainSpecificKnowledge" : [ "Privileged Access Management", "Least privilege principles", "Regulatory requirements", "Cloud platforms", "Network devices", "Identity and access management", "SOX", "PCI DSS", "HIPAA", "ISO 27001" ], "toolProficiency" : [ "BeyondTrust PAM", "BeyondTrust Password Safe", "BeyondTrust Privilege Management", "ServiceNow", "Elastic", "LogicMonitor" ], "communicationSkills" : "Written communication; Verbal communication; Technical recommendations; Status updates", "documentationSkills" : "Platform architectures; Configuration standards; Customer-specific runbooks; Operational procedures; Onboarding playbooks; Migration playbooks; Knowledge base articles; FAQs", "continuousLearning" : "Cross department training; Sponsoring certifications; Credentials for continued learning", "problemSolvingSkills" : "Analytical skills; Problem-solving skills; Troubleshoot complex issues", "outcomesObjectives" : "Drive culture at AHEAD; Contribute to diversification and enrichment", "qualificationsBasic" : "7 years of related experience, 3+ years PAM solutions experience, Experience delivering managed services, Experience leading technical initiatives, Experience mentoring junior team members, Experience with regulated environments", "qualificationsPreferred" : "BeyondTrust experience strongly preferred, CyberArk or Delinea experience a plus", "remoteFriendly" : true, "workSiteFlexibility" : "Remote", "rawDescription" : "## Description AHEAD builds platforms for digital business. By weaving together advances in cloud infrastructure, automation and analytics, and software delivery, we help enterprises deliver on the promise of digital transformation. At AHEAD, we prioritize creating a culture of belonging, where all perspectives and voices are represented, valued, respected, and heard. We create spaces to empower everyone to speak up, make change, and drive the culture at AHEAD. We are an equal opportunity employer, and do not discriminate based on an individual's race, national origin, color, gender, gender identity, gender expression, sexual orientation, religion, age, disability, marital status, or any other protected characteristic under applicable law, whether actual or perceived. We embrace all candidates that will contribute to the diversification and enrichment of ideas and perspectives at AHEAD. ## Duties & Responsibilities Lead architecture and design of multi-tenant BeyondTrust PAM services for MSP customers, including onboarding of new tenants and standardization of service offerings. Architect secure privileged access workflows for infrastructure, applications, databases, cloud platforms, and network devices, aligned to least-privilege principles and regulatory requirements. Implement and maintain BeyondTrust Password Safe and related components, including: Discovery and onboarding of privileged accounts and systems Password rotation policies and check-in/check-out workflows Session brokering, recording, and real-time monitoring Approval workflows and just-in-time (JIT) access Implement and maintain BeyondTrust Privilege Management for endpoints and servers (Windows and Linux/Unix), including policy design, deployment, and tuning to minimize user/admin friction while enforcing least privilege. Design and maintain highly available and secure BeyondTrust infrastructure, including clustering, scaling, upgrades, patching, and disaster recovery strategies across customer environments. Integrate PAM with identity and security platforms, including: Active Directory / Entra ID / LDAP and other directories for authentication and group-based access MFA/SSO platforms using SAML/OIDC/OAuth2 SIEM and logging platforms for monitoring and alerting on privileged activity ServiceNow and other ITSM tools for request, approval, and ticket correlation workflows Develop and maintain automation and tooling (e.g., PowerShell, Python, REST APIs) to: Accelerate onboarding and lifecycle management of privileged accounts and systems Enforce configuration standards and policies at scale Generate reports and dashboards for compliance and operational KPIs Lead end-to-end customer onboarding to the PAM service, including: Requirements gathering, use case definition, and risk assessment Designing onboarding playbooks and standard reference architectures Coordinating with internal and customer teams to implement and validate PAM controls Define and maintain standardized PAM policies and baselines across customer environments, including credential management, access approval patterns, session monitoring, and privileged elevation rules. Conduct security and risk assessments of existing privileged access practices, recommend remediation plans, and track execution to closure. Serve as subject matter expert and escalation point for PAM-related incidents and service requests, including troubleshooting BeyondTrust platform issues and complex access problems. Collaborate with security, infrastructure, network, and application teams (internal and customer) to ensure PAM controls are aligned with broader security architecture and operational requirements. Develop and maintain comprehensive documentation, including: Platform architectures and configuration standards Customer-specific runbooks and operational procedures Onboarding and migration playbooks Knowledge base articles and FAQs for internal and customer use Provide mentoring and guidance to team members on PAM concepts, BeyondTrust best practices, and secure operations in a managed services context. Communicate with customers and internal stakeholders with transparency, providing regular status updates, risk/issue visibility, and technical recommendations. Complete training and certification as assigned to further skills and knowledge, including PAM and BeyondTrust-specific certifications where applicable. *Other job duties as assigned ## Education & Experience Minimum Required – A college degree or equivalent in Information Systems, Computer Science, Cybersecurity, or a related field. Unique education, specialized experience, skills, knowledge, training, or certification may be substituted for formal education. Minimum of 7 years of related experience in IT operations, infrastructure engineering, or cybersecurity, with significant hands-on responsibility for privileged access controls in enterprise environments. 3+ years of direct experience designing, implementing, and operating PAM solutions (BeyondTrust strongly preferred; experience with platforms such as CyberArk or Delinea is a plus). Experience delivering services in a managed services or consulting capacity, including direct customer engagement and multi-tenant or multi-customer environments. Demonstrated experience leading technical initiatives, driving cross-functional projects, and mentoring junior team members. Experience working with regulated or compliance-driven environments (e.g., SOX, PCI DSS, HIPAA, ISO 27001) and supporting audit and evidence collection for privileged access controls. ## Knowledge, Skills & Abilities Excellent written and verbal communication skills and ability to build and maintain collaborative, positive working relationships at all levels (technical and business stakeholders). Strong understanding of information security principles, including least privilege, separation of duties, identity and access management, and secure system design. Deep knowledge of PAM concepts and practices, including privileged account discovery, credential vaulting, session management, just-in-time access, and privileged elevation. Hands-on experience with BeyondTrust products in production environments, ideally including: BeyondTrust Password Safe (or BeyondInsight platform) BeyondTrust Privilege Management for Windows and Unix BeyondTrust Remote Support or similar tools Strong understanding of authentication and authorization protocols (e.g., Kerberos, NTLM, LDAP, RADIUS, SAML, OAuth2/OIDC, API key management) and their application in PAM architectures. Experience integrating PAM platforms with: Active Directory / Entra ID / LDAP and group-based access models MFA/SSO solutions SIEM and logging tools for monitoring privileged activity ServiceNow or similar ITSM systems for request and approval workflows Strong scripting and automation skills (e.g., PowerShell, Python, Bash) and experience using REST APIs to integrate and automate PAM workflows. Experience with Windows and Linux operating systems, including server and workstation platforms, and common administrative tools used by privileged users. Knowledge of enterprise IT systems including Active Directory, networking, firewalls, storage, compute, virtualization, and cloud services, and how privileged access is managed across these domains. Familiarity with monitoring and observability platforms (e.g., Elastic, LogicMonitor or similar) to track PAM infrastructure health and performance. Experience working in Scrum/Agile environments and contributing to structured delivery processes, including backlog grooming, sprint planning, and tracking work against clear acceptance criteria. Strong analytical and problem-solving skills, with the ability to troubleshoot complex issues across application, infrastructure, and security layers. Demonstrated ability to prioritize and manage multiple concurrent efforts in a fast-paced managed services environment. ## Additional Information The compensation range indicated in this posting reflects the On-Target Earnings (“OTE”) for this role, which includes a base salary and any applicable target bonus amount. This OTE range may vary based on the candidate’s relevant experience, qualifications, and geographic location. Why AHEAD: Through our daily work and internal groups like Moving Women AHEAD and RISE AHEAD, we value and benefit from diversity of people, ideas, experience, and everything in between. We fuel growth by stacking our office with top-notch technologies in a multi-million-dollar lab, by encouraging cross department training and development, sponsoring certifications and credentials for continued learning. USA Employment Benefits include: - Medical, Dental, and Vision Insurance - 401(k) - Paid company holidays - Paid time off - Paid parental and caregiver leave - Plus more! See benefits https://www.aheadbenefits.com/ for additional details. Use of AI: We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, assessing responses, or to capture recordings and create transcriptions or summaries during interviews. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please refer to the Candidate Privacy Notice or contact us at privacy@ahead.com. You may opt-out of the review or analysis of your application and resume by AI tools by using the General Application. Please include the role you wish to apply for in the Additional Information field. You may also choose to opt-out of recording and transcription at any time, including after joining an interview. Candidates will not be penalized for choosing to opt-out.", "summaryDescription" : "Senior Engineer - Privileged Access Management at AHEAD. Skills: Privileged Access Management, BeyondTrust PAM, Cloud infrastructure, Automation. Lead architecture and design. Architect secure privileged access workflows", "postedDate" : "2026-06-09T22:17:42.705", "createdAt" : "2026-06-09T22:17:42.705", "lastUpdated" : "2026-06-15T02:43:06.725", "ingestTimestamp" : "2026-06-12T07:44:31.530", "mongoId" : "6a2aa22674d8ee00a06ac2cf", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 150000, "salaryAnnualMax" : 170000, "salaryBand" : "150k-200k", "hasSalary" : true, "allSkills" : [ "Privileged access workflows", "Password rotation policies", "Session brokering", "Just-in-time access", "Policy design", "Disaster recovery", "Automation tooling", "Lifecycle management", "Configuration standards", "Risk management", "Troubleshooting", "Leadership", "Mentoring", "Privileged Access Management", "BeyondTrust PAM", "Cloud infrastructure", "Automation", "Privileged access controls", "Risk assessment", "Customer onboarding", "Service offerings", "ITSM tools", "Compliance", "Audit support", "Scrum/Agile environments", "Backlog grooming", "Sprint planning", "Least privilege principles", "Regulatory requirements", "Cloud platforms", "Network devices", "Identity and access management", "SOX", "PCI DSS", "HIPAA", "ISO 27001", "PAM certifications", "BeyondTrust-specific certifications", "BeyondTrust Password Safe", "BeyondTrust Privilege Management", "ServiceNow", "Elastic", "LogicMonitor" ], "skillCount" : 43, "jobCategory" : "engineering", "dataQualityScore" : 1.0, "_score" : 1128.3479, "daysOld" : 5, "hasLocation" : true, "hasGeo" : true }, { "id" : "6a2a46b974d8ee00a05d6a7d", "title" : "Senior Identity and Access Management Engineer", "salary" : { "min" : 4500.0, "max" : 6000.0, "currency" : "EUR", "frequency" : "yearly", "is_estimated" : false }, "location" : "Latvia", "locations" : [ "Latvia" ], "timestamp" : "2026-06-12T09:41:29.161", "fingerprint" : "c97b013f103e881c5d8058769d1429b902a4fe4ec56206c5901312657e88331f", "source" : "workday", "language" : "en", "applyUrl" : "https://if.wd3.myworkdayjobs.com/Careers/job/Rga-Central/Senior-Identity-and-Access-Management-Engineer_JobReqID10965", "externalId" : "JobReqID10965", "locationPoint" : "56.8796,24.6032", "structuredLocations" : [ { "city" : "Riga", "country" : "Latvia", "continent" : "eu", "source" : "llm", "workMode" : "hybrid", "geo" : "56.9493977,24.1051846" } ], "locationText" : "Riga, Latvia", "employmentType" : "FULL_TIME", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "technicalSkills" : "C#, HTML, CSS, OpenID Connect, OAuth 2.1, SCIM, Azure Entra ID, OKTA, Curity, Virtual machines, Containers, Serverless services, IaC, Gateways, Azure Cloud, Azure DevOps, PostgreSQL, Terraform, React", "professionalSkills" : [ "Identity architecture", "Best practices", "Technical leadership", "Agile planning", "QA process", "IAM integration patterns" ], "hardSkillsList" : [ "Authentication", "Authorization", "Governance workflows", "User provisioning", "Access control" ], "softSkillsList" : [ "Leadership", "Proactive mindset" ], "hardSkills" : [ { "name" : "Authentication", "level" : "intermediate" }, { "name" : "Authorization", "level" : "intermediate" }, { "name" : "Governance workflows", "level" : "intermediate" }, { "name" : "User provisioning", "level" : "intermediate" }, { "name" : "Access control", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Leadership" }, { "name" : "Proactive mindset" } ], "majorSkills" : "IAM protocols, Cloud resources", "majorSkillsList" : [ "IAM protocols", "Cloud resources" ], "coreResponsibilities" : "Improve IAM solutions, Build new IAM solutions, Improve developer documentation, Build code examples, Build demo apps, Achieve high availability, Maintain high availability, Implement security practices, Implement security processes, Choose IAM integration patterns, Choose IAM integration practices, Provide technical leadership, Provide guidance to engineers, Participate in Agile planning, Participate in QA process, Develop IAM knowledge, Develop IAM expertise", "teamCollaboration" : "Internal teams; International environment", "projectManagementSkills" : [ "Agile" ], "domainKnowledge" : "Identity and Access Management; Role based access control; Attribute-based access control; Cloud-native architecture", "domainList" : [ "identity-and-access-management", "role-based-access-control", "attribute-based-access-control", "cloud-native-architecture" ], "domainSpecificKnowledge" : [ "Identity and Access Management", "Role based access control", "Attribute-based access control", "Cloud-native architecture" ], "toolProficiency" : [ "Azure DevOps", "Terraform" ], "communicationSkills" : "Presentation skills; Issue tracking; Documentation", "documentationSkills" : "Developer documentation", "continuousLearning" : "Proactively develop knowledge", "outcomesObjectives" : "Improve developer experience; Strengthen security", "qualificationsBasic" : "5+ years of experience with C#, 5+ years of experience with HTML/CSS, Background in IAM protocols, Experience with IAM services, Understanding of role based access control, Understanding of attribute-based access control, Experience working with cloud resources, Motivation to learn IAM practices, Excellent English communication skills, Excellent Latvian communication skills, Excellent English presentation skills, Excellent Latvian presentation skills, Issue tracking skills, Documentation skills for collaboration", "qualificationsPreferred" : "Agile development experience, Azure Cloud hands-on knowledge, Azure DevOps hands-on knowledge, Experience with PostgreSQL, Experience with Terraform, Experience with IaC, React knowledge for frontend", "remoteFriendly" : true, "workSiteFlexibility" : "Hybrid", "rawDescription" : "**About the role** As an IAM Engineer, you’ll design and build identity and access management systems that support our internal services. You’ll work hands‑on with modern IAM technologies to implement secure authentication, authorization, and governance workflows. You’ll collaborate closely with internal teams to translate business and technical requirements into scalable IAM solutions. You’ll be the expert we’ll rely on for identity related architecture and best practices. Your work will directly shape our IAM infrastructure, improve developer experience, and strengthen security across the organization. **What are you going to do?** * Improve existing and build new IAM solutions * Improve developer documentation, build code examples and demo apps * Ensure we have the right processes and tooling to achieve and maintain high availability * Ensure we have the best security practices and processes in place for IAM service operation * Help new business initiatives choosing correct IAM integration patterns and practices * Provide technical leadership and guidance for less experienced engineers * Participate in team Agile planning process * Participate in team QA process * Proactively develop knowledge and expertise in IAM field **What do we expect from you?** **Must have** * 5+ years of experience with C# and HTML/CSS * Background in IAM protocols (OpenID Connect, OAuth 2.1, and SCIM) supporting authentication and user provisioning * Experience with IAM services (Azure Entra ID, OKTA, Curity etc.) * Understanding of role based and/or attribute-based access control * Experience working with cloud resources – virtual machines, containers, serverless services, IaC, gateways etc. * Motivation to learn all technical aspects of best IAM practices and standards * Excellent English and Latvian communication and presentation skills, including issue tracking and documentation for collaboration locally and in international environment * Proactive mindset with focus on high quality over quantity **Nice to have** * Agile development experience * Azure Cloud and Azure DevOps hands-on knowledge * Experience with PostgreSQL (Or any similar database) * Experience with Terraform, IaC * React knowledge for frontend work **Our promise to you** * Monthly salary: €4500 - €6000 gross depending on your qualifications * Strong company culture: knowledge sharing, company events, interesting speakers, and other inspiring initiatives * Career and development opportunities * Challenging and exciting projects with autonomy to plan own tasks * Extra vacation days, annual bonus, great insurance benefits, discounts on our products for you and your family, gifts, etc. * A flexible hybrid work model, with our office as the main workplace * A recently renovated office in Riga center with a 24/7 gym on the premises Read more about [benefits for our employees.](https://ifpc.teamtailor.com/pages/our-promise-to-you) **Application deadline** : **June 30****, 2026** Your application will be processed according to our [**privacy notice**](https://www.if.lv/globalassets/lv/files/hr/recruitment-privacy-notice.pdf)**.**", "summaryDescription" : "Senior Identity and Access Management Engineer. Skills: IAM protocols, Cloud resources. Improve IAM solutions. Build new IAM solutions", "postedDate" : "2026-06-10T13:44:03.181", "createdAt" : "2026-06-11T13:44:03.123", "lastUpdated" : "2026-06-12T09:41:29.161", "ingestTimestamp" : "2026-06-11T13:44:03.123", "mongoId" : "6a2a46b974d8ee00a05d6a7d", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://if.wd3.myworkdayjobs.com/Careers/job/Rga-Central/Senior-Identity-and-Access-Management-Engineer_JobReqID10965", "salaryBand" : "<30k", "hasSalary" : false, "allSkills" : [ "Authentication", "Authorization", "Governance workflows", "User provisioning", "Access control", "Leadership", "Proactive mindset", "IAM protocols", "Cloud resources", "Identity architecture", "Best practices", "Technical leadership", "Agile planning", "QA process", "IAM integration patterns", "Agile", "Identity and Access Management", "Role based access control", "Attribute-based access control", "Cloud-native architecture", "Azure DevOps", "Terraform" ], "skillCount" : 22, "jobCategory" : "engineering", "seniorityLevel" : "senior", "dataQualityScore" : 0.8888889, "_score" : 1125.5862, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true }, { "id" : "6a2c6aaa74d8ee00a090d2a2", "title" : "Identity Senior Solution Specialist -On-Premises & Hybrid Access", "company" : "Okta", "industry" : "SaaS", "salary" : { "min" : 2250000.0, "max" : 3500000.0, "currency" : "INR", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Senior Identity Solution Specialist in Bengaluru, India, adjusted for the technology industry and Okta's company size." }, "location" : "Bengaluru ", "locations" : [ "Bengaluru" ], "certifications" : [ "Certified Identity Professional", "CISSP", "CCSP", "CISM" ], "timestamp" : "2026-06-15T13:38:31.978", "fingerprint" : "bf68c0c2495405b4fb770037f263350341ad9e0c3c87102dc1159834357067de", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://www.okta.com/company/careers/opportunity/7821050?gh_jid=7821050", "externalId" : "7821050", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Bengaluru", "country" : "India", "continent" : "as", "source" : "llm", "workMode" : "onsite", "geo" : "12.9767936,77.5900820" } ], "locationText" : "Bengaluru, India", "employmentType" : "FULL_TIME", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "technicalSkills" : "Identity, Access Gateway, SAP, Oracle EBS, Active Directory, LDAP, Kerberos, AWS, Azure, GCP, SIEM, SOAR, Python, PowerShell, Terraform, Pulumi", "professionalSkills" : [ "Strategic engagement", "Solution architecture", "Technical leadership", "Field enablement", "Market influence", "Customer-driven innovation" ], "hardSkillsList" : [ "Web Access Management", "Hybrid Identity", "Protocol expertise", "Cloud infrastructure", "Security integration" ], "hardSkills" : [ { "name" : "Web Access Management", "level" : "intermediate" }, { "name" : "Hybrid Identity", "level" : "intermediate" }, { "name" : "Protocol expertise", "level" : "intermediate" }, { "name" : "Cloud infrastructure", "level" : "intermediate" }, { "name" : "Security integration", "level" : "intermediate" } ], "majorSkills" : "On-Premises Access, Hybrid Identity, WAM, Okta Access Gateway", "majorSkillsList" : [ "On-Premises Access", "Hybrid Identity", "WAM", "Okta Access Gateway" ], "coreResponsibilities" : "Lead technical sessions, Uncover challenges, Deliver customized demonstrations, Deliver architectural sessions, Design outcome-focused POCs, Execute outcome-focused POCs, Prove Okta’s value, Maintain technical understanding, Craft engaging solution content, Position Okta’s value, Create demonstration systems, Maintain demonstration systems, Create diagrams, Maintain diagrams, Support patterns and strategies, Build templates for POCs, Create AI-based functionality, Provide technical guidance, Collaborate with OFCTO team, Deliver actionable insights, Validate customer needs, Identify recurring trends, Deliver keynote presentations, Deliver webinars, Deliver technical sessions, Contribute to frameworks, Contribute to tools, Contribute to content, Support Solutions Engineering teams, Partner with sales leadership, Identify business opportunities, Address business challenges, Drive cross-functional collaboration, Ensure seamless execution, Innovate in tools, Innovate in techniques, Drive excellence, Drive momentum, Partner with Enablement teams, Partner with Field CTO teams, Drive regional events, Align product messaging, Represent Okta, Influence industry standards, Participate in advisory boards, Partner with OFCTO teams, Advocate for customer innovation, Advocate for market trends, Advocate for GTM insights, Provide input to influence product teams, Support strategic initiatives, Derive strategic initiatives, Champion strategic initiatives, Enhance Okta’s differentiation, Enhance Okta’s business impact", "teamCollaboration" : "Global Presales team; Solutions Engineers; Office of the Field CTO; Alliances; Architects; Cross-functional collaboration; Solutions Engineering teams; Global initiatives", "domainKnowledge" : "Identity Platform; On-premises environments; Legacy WAM stacks; Hybrid Identity; Header-based applications; ERP systems; Identity synchronization; Access between on-premises; Cloud; Protocols; Cloud Infrastructure; NHI attack surface; Security Ecosystem Integration; Automated threat response; Identity and security space", "domainList" : [ "identity-platform", "on-premises-environments", "legacy-wam-stacks", "hybrid-identity", "header-based-applications", "erp-systems", "identity-synchronization", "access-between-on-premises", "cloud", "protocols", "cloud-infrastructure", "nhi-attack-surface", "security-ecosystem-integration", "automated-threat-response", "identity-and-security-space" ], "domainSpecificKnowledge" : [ "Identity Platform", "On-premises environments", "Legacy WAM stacks", "Hybrid Identity", "Header-based applications", "ERP systems", "Identity synchronization", "Access between on-premises", "Cloud", "Protocols", "Cloud Infrastructure", "NHI attack surface", "Security Ecosystem Integration", "Automated threat response", "Identity and security space" ], "toolProficiency" : [ "Okta", "CA Siteminder", "PingAccess", "OAM", "Splunk", "Sentinel", "Terraform", "Pulumi" ], "communicationSkills" : "Sales presentations; Product demonstrations; Keynote presentations; Webinars; Technical sessions; Thought leader", "documentationSkills" : "Diagrams; Documentation", "innovationCreativity" : "Customer-driven innovation; Innovate in tools; Innovate in techniques", "problemSolvingSkills" : "Solve complex challenges", "specialRequirements" : "Up to 40% travel", "qualificationsBasic" : "Expert-level understanding of legacy access tools, Proficiency in managing identity synchronization, Mastery of Kerberos, Mastery of header-based authentication, Understanding of IAM roles within AWS, Understanding of IAM roles within Azure, Understanding of IAM roles within GCP, Proficiency in designing solutions, Communication and presentation skills, Experience contributing to technical events", "qualificationsPreferred" : "Experience with scripting or automation, Experience with Python, Experience with PowerShell, Hands-on experience with Terraform, Hands-on experience with Pulumi, Certified Identity Professional, CISSP, CCSP, CISM, Scripting or automation skills", "workSiteFlexibility" : "Remote", "rawDescription" : "Secure Every Identity, from AI to Human Identity is the key to unlocking the potential of AI. Okta secures AI by building the trusted, neutral infrastructure that enables organizations to safely embrace this new era. This work requires a relentless drive to solve complex challenges with real-world stakes. We are looking for builders and owners who operate with speed and urgency and execute with excellence. This is an opportunity to do career-defining work. We're all in on this mission. If you are too, let's talk. The Global Presales team The Global Presales organization at Okta brings together a diverse group of experts, including Solutions Engineers, the Office of the Field CTO, Alliances, Architects, and more, who combine deep technical expertise with strategic business insight. This team serves as trusted advisors to a wide range of customers and partners, helping them unlock the full potential of Okta’s Identity Platform. By asking insightful questions, understanding complex challenges, and delivering tailored solutions, we empower organizations to address their unique identity needs. Empathy, collaboration, and a relentless focus on customer success drive our work and set us apart. Identity Senior Solution Specialist -On-Premises & Hybrid Access As a Senior Solution Specialist, you will be part of the presales team that delivers sales presentations and product demonstrations to educate customers on how Okta can secure complex on-premises environments like SAP, Oracle EBS, and custom web apps. You will report to the Manager in the OFCTO organization. What you’ll be doing Strategic Customer Engagement: Modernization Discovery: Lead technical sessions with infrastructure and security leaders to uncover challenges related to aging WAM stacks (e.g., CA Siteminder, PingAccess, OAM). Tailored Hybrid Architecture: Deliver customized demonstrations and architectural sessions focused on Okta Access Gateway (OAG) and its ability to bridge legacy applications to modern identity. Proof of Concepts (POCs): Design and execute outcome-focused POCs that prove Okta’s value in securing header-based applications and complex on-premises ERP systems like SAP and Oracle EBS. Maintain a broad and deep technical understanding of the Okta identity product lines and the underlying technologies and protocols Craft engaging solution content to position Okta’s value across multiple business units, including software engineering, operations, product management, and business stakeholders Asset Delivery: Create and maintain reusable and purpose built demonstration system to be leveraged by all of presales Create and maintain diagrams and documentation to support patterns and strategies Build templates for proofs of concept and other unique customer engagement demands Create and maintain A. I. based delivery and enablement functionality Technical Leadership: Provide strategic and technical guidance to Solutions Engineering teams across the Okta identity platforms. Collaborate with the Global Office of Field CTO office team to deliver actionable insights from the field, validate customer needs, and identify recurring trends for the Okta Product & Engineering teams. Deliver impactful keynote presentations, webinars, and technical sessions at industry and customer events. Field Enablement and Collaboration: Contribute to frameworks, tools, and content to support Solutions Engineering teams in executing effectively. Partner with sales leadership to identify and address critical business opportunities and challenges. Drive cross-functional collaboration to ensure seamless execution of global initiatives. Innovate in tools and techniques to drive excellence and momentum Partner with Enablement and Field CTO teams to drive regional events and align product messaging for regional GTM and SE teams. Market Influence: Represent Okta as a thought leader in the identity and security space. Influence industry standards and participate in relevant technical advisory boards. Innovation and Strategy: Partner closely with OFCTO teams as an advocate for customer-driven innovation, market trends, and GTM insights to provide input to influence product teams. Support, derive, and champion strategic initiatives that enhance Okta’s differentiation and business impact. Position Requirements: Legacy WAM & Hybrid Identity Mastery Legacy WAM & Hybrid Identity Master Web Access Management (WAM) Expert: Deep, expert-level understanding of legacy access tools such as CA Siteminder, Oracle Access Manager (OAM), and PingAccess. Hybrid Ecosystems: Proficiency in managing identity synchronization and access between on-premises environments (Active Directory, LDAP) and the cloud. Protocol Expertise: Mastery of Kerberos, header-based authentication, and bridging these to modern protocols like OIDC/SAML. Complex on-premises application integration Enterprise Apps: Hands-on experience securing and integrating heavy enterprise suites such as SAP, Oracle EBS, and PeopleSoft.Proxy & Gateway Tech: Strong understanding of reverse proxies, load balancers, and Okta Access Gateway (OAG) deployment models.Network Infrastructure: Solid grasp of SSL/TLS termination, certificate management, and on-premises network security. Identity Threat Detection & Response (ITDR) Threat Landscape Knowledge: A thorough understanding of modern identity attack vectors, including phishing, token theft, MFA bypass techniques, and lateral movement. Cloud Infrastructure: Strong understanding of IAM roles within AWS, Azure, and GCP, and how they contribute to the NHI attack surface. Security Ecosystem Integration: Proficiency in designing solutions that integrate identity platforms with SIEM (e.g., Splunk, Sentinel) and SOAR tools for automated threat response. Strong communication and presentation skills, with experience contributing to technical events. Travel expectation: up to 40% for customer meetings, industry events, and internal off-sites. This is a remote position. And extra credit if you have experience in any of the following! Modern Automation: Experience with scripting or automation (e.g., Python, PowerShell) for managing gateway configurations or security integrations. Infrastructure as Code (IaC): Hands-on experience with Terraform or Pulumi for managing identity infrastructure. Certified Identity Professional (CIDPRO), CISSP, CCSP, or CISM. Scripting or automation skills (e.g., Python, PowerShell) for security integrations. #LI-Hybrid #P25005_3414285 The Okta Experience Supporting Your Well-Being Driving Social Impact Developing Talent and Fostering Connection + Community We are intentional about connection. Our global community, spanning over 20 offices worldwide, is united by a drive to innovate. Your journey begins with an immersive, in-person onboarding experience designed to accelerate your impact and connect you to our mission and team from day one. Okta is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, ancestry, marital status, age, physical or mental disability, or status as a protected veteran. We also consider for employment qualified applicants with arrest and convictions records, consistent with applicable laws. If reasonable accommodation is needed to complete any part of the job application, interview process, or onboarding please use this Form to request an accommodation. Notice for New York City Applicants & Employees: Okta may use Automated Employment Decision Tools (AEDT), as defined by New York City Local Law 144, that use artificial intelligence, machine learning, or other automated processes to assist in our recruitment and hiring process. In accordance with NYC Local Law 144, if you are an applicant or employee residing in New York City, please click here to view our full NYC AEDT Notice. Okta is committed to complying with applicable data privacy and security laws and regulations. For more information, please see our Personnel and Job Candidate Privacy Notice at https://www.okta.com/legal/personnel-policy/.", "summaryDescription" : "Identity Senior Solution Specialist -On-Premises & Hybrid Access at Okta. Skills: On-Premises Access, Hybrid Identity, WAM, Okta Access Gateway. Lead technical sessions. Uncover challenges", "postedDate" : "2026-06-14T09:30:08.341", "createdAt" : "2026-06-14T09:30:08.341", "lastUpdated" : "2026-06-15T13:38:31.978", "ingestTimestamp" : "2026-06-14T09:30:08.341", "mongoId" : "6a2c6aaa74d8ee00a090d2a2", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "200k+", "hasSalary" : false, "allSkills" : [ "Web Access Management", "Hybrid Identity", "Protocol expertise", "Cloud infrastructure", "Security integration", "On-Premises Access", "WAM", "Okta Access Gateway", "Strategic engagement", "Solution architecture", "Technical leadership", "Field enablement", "Market influence", "Customer-driven innovation", "Identity Platform", "On-premises environments", "Legacy WAM stacks", "Header-based applications", "ERP systems", "Identity synchronization", "Access between on-premises", "Cloud", "Protocols", "Cloud Infrastructure", "NHI attack surface", "Security Ecosystem Integration", "Automated threat response", "Identity and security space", "Certified Identity Professional", "CISSP", "CCSP", "CISM", "Okta", "CA Siteminder", "PingAccess", "OAM", "Splunk", "Sentinel", "Terraform", "Pulumi" ], "skillCount" : 40, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Senior", "dataQualityScore" : 1.0, "_score" : 1107.6227, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.95 }, { "id" : "6a25145474d8ee00a00bb3c0", "title" : "Senior Software Development Engineer, AWS Identity and Access Management", "company" : "Amazon Development Center U.S., Inc.", "industry" : "Software Development, Cloud Computing", "salary" : { "min" : 100000.0, "max" : 227400.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "Seattle, Washington, USA", "locations" : [ "Seattle, Washington, USA" ], "timestamp" : "2026-06-15T03:27:18.090", "fingerprint" : "d3199c5c89e227ff89652d24d293078263d07b3abd5ffe307aac51b20809caf5", "source" : "amazon", "language" : "en", "applyUrl" : "https://account.amazon.jobs/jobs/10441337/apply", "externalId" : "458aa8f1-7898-4616-be34-1520b307c035", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Seattle", "state" : "Washington", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "47.6038321,-122.3300620" } ], "locationText" : "Seattle, Washington, United States", "employmentType" : "FULL_TIME", "minimumEducation" : "Bachelor's", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "technicalSkills" : "AWS, IAM", "professionalSkills" : [ "Project management", "System design", "Architecture", "Software development", "Operations" ], "hardSkillsList" : [ "Distributed systems", "Scalability", "Reliability", "High-availability" ], "softSkillsList" : [ "Leadership", "Mentoring" ], "hardSkills" : [ { "name" : "Distributed systems", "level" : "intermediate" }, { "name" : "Scalability", "level" : "intermediate" }, { "name" : "Reliability", "level" : "intermediate" }, { "name" : "High-availability", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Leadership" }, { "name" : "Mentoring" } ], "majorSkills" : "Distributed systems, Cloud security", "majorSkillsList" : [ "Distributed systems", "Cloud security" ], "coreResponsibilities" : "Lead software development, Deliver working software systems, Design software systems, Implement software systems, Test software systems, Deploy software systems, Maintain software systems, Design components, Review others' work, Write code, Review code, Solve problems, Improve processes, Change culture, Staff teams, Train teams, Recruit team members, Assess team members, Provide career guidance, Communicate with team, Communicate with peers, Communicate with management, Prepare design docs, Review design docs, Prepare project plans, Review project plans, Prepare features one pagers, Review features one pagers, Prepare incident retrospectives, Review incident retrospectives, Prepare change requests, Review change requests, Prepare progress reports, Review progress reports, Build next generation functionality, Design storage fleet components, Build storage fleet components, Remediate storage failures, Manage data replication, Provide disaster recovery", "teamCollaboration" : "Peers on related teams; Cross-functional teams", "projectManagementSkills" : [ "Project management" ], "domainKnowledge" : "Identity and Access Management; AWS Identity; Authentication; Authorization; Distributed systems; Multi-tenancy; Cloud security; Scalability; Availability; Storage fleet management", "domainList" : [ "identity-and-access-management", "aws-identity", "authentication", "authorization", "distributed-systems", "multi-tenancy", "cloud-security", "scalability", "availability", "storage-fleet-management" ], "domainSpecificKnowledge" : [ "Identity and Access Management", "AWS Identity", "Authentication", "Authorization", "Distributed systems", "Multi-tenancy", "Cloud security", "Scalability", "Availability", "Storage fleet management" ], "toolProficiency" : [ "CI/CD tools" ], "communicationSkills" : "Great communication; Technical communication", "documentationSkills" : "Design docs; Project plans; Features one pagers; Incident retrospectives; Change requests; Progress reports", "problemSolvingSkills" : "Problem solving", "qualificationsBasic" : "5+ years software development experience, 5+ years programming experience, 5+ years design/architecture experience, Experience as mentor, Experience as tech lead, Experience leading engineering team", "qualificationsPreferred" : "5+ years full SDLC experience, Bachelor's degree in computer science", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "The Amazon Web Services (AWS) Identity team builds, operates, and innovates the identity, authentication, and authorization stack for the AWS cloud. Our mission is to push the technical boundaries to enable AWS customers to run their business workloads confidently and securely. As part of this mission, we leverage customer obsession and technologies to help customers set appropriate access controls across all their AWS environments. AWS Identity and Access Management (IAM) enables customers to secure their workloads in the cloud by providing authentication and authorization mechanisms. With the growth of AWS, the workloads and access patterns keep evolving, demanding the next order of magnitude scalability. We are looking for strong software engineers to build the next generation functionality in this area. Individuals interested in this position should have experience building high-performing, reliable systems in a complex, multi-tenancy, and distributed environment in a highly contingent environment. We desire you to have an established background in design, development and operations of highly scalable and available distributed systems. You must have strong technical skills, excellent project management skills, great communication skills, and a motivation to achieve results in a fast-paced environment. It is a highly technical space. You are a strong technical contributor who understands the big picture, drives prioritization, builds consensus, and rallies the team behind it. Responsibilities include driving architecture, design, and implementation of complex components while maintaining an uncompromising bar on quality and mentoring junior developers for software within the team. Key job responsibilities You lead the team’s software development, and work with peers on related teams. You ensure to achieve the goal of delivering working software systems spanning the full software lifecycle including design, implementation, testing, deployment, and maintenance strategy. You design and review others’ work to ensure it fits into the bigger picture and is well designed, extensible, performant, and secure. You also have code contributions that demonstrate best practices, which others emulate, and continue to be high-quality. You also solve problems through the use of non-technical solutions such as process improvement, culture changes, or staffing and training. You ensure the team has good operational practices with the correct alarms, telemetry, runbooks, and retrospective. And finally you ensure team growth by training, recruiting, assessing, and providing career guidance to members of their team. A day in the life You will communicate a lot, with the team, peers and management. Communication happens over different channel; Slack, email, and Chime. You will prepare and review design docs, project plans, features one pagers, incident retrospectives, change requests and progress reports. And for sure, you will write and review code, and work with CI/CD tools. About the team AWS Identity and Access Management (IAM) enables customers to secure their workloads in the cloud by providing authentication and authorization mechanisms to all of AWS. We enable our customers to manage their credentials and access policies in the AWS cloud. We operate some of the largest distributed systems in the world, processing billions of transactions per second world-wide. The IAM Control Plane teams are working on the next generation architecture for IAM aiming to improve the scaling, and availability of the system. This team will be responsible for designing, building and delivering on core storage fleet management components, including workloads for building fleets, remediating failures, managing data replication, providing disaster recovery capabilities and similar. Basic Qualifications: - 5+ years of non-internship professional software development experience - 5+ years of programming with at least one software programming language experience - 5+ years of leading design or architecture (design patterns, reliability and scaling) of new and existing systems experience - Experience as a mentor, tech lead or leading an engineering team Preferred Qualifications: - 5+ years of full software development life cycle, including coding standards, code reviews, source control management, build processes, testing, and operations experience - Bachelor's degree in computer science or equivalent Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status. Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner. The base salary range for this position is listed below. Your Amazon package will include sign-on payments and restricted stock units (RSUs). Final compensation will be determined based on factors including experience, qualifications, and location. Amazon also offers comprehensive benefits including health insurance (medical, dental, vision, prescription, Basic Life & AD&D insurance and option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage), 401(k) matching, paid time off, and parental leave. Learn more about our benefits at https://amazon.jobs/en/benefits . USA, WA, Seattle - 168,100.00 - 227,400.00 USD annually", "summaryDescription" : "Senior Software Development Engineer, AWS Identity and Access Management at Amazon Development Center U.S., Inc.. Skills: Distributed systems, Cloud security. Lead software development. Deliver working software systems", "postedDate" : "2026-06-13T06:06:21.417", "createdAt" : "2026-06-13T06:06:21.417", "lastUpdated" : "2026-06-15T03:27:18.090", "ingestTimestamp" : "2026-06-13T06:06:21.417", "mongoId" : "6a25145474d8ee00a00bb3c0", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://account.amazon.jobs/jobs/10441337/apply", "salaryAnnualMin" : 100000, "salaryAnnualMax" : 227400, "salaryBand" : "100k-150k", "hasSalary" : true, "allSkills" : [ "Distributed systems", "Scalability", "Reliability", "High-availability", "Leadership", "Mentoring", "Cloud security", "Project management", "System design", "Architecture", "Software development", "Operations", "Identity and Access Management", "AWS Identity", "Authentication", "Authorization", "Multi-tenancy", "Availability", "Storage fleet management", "CI/CD tools" ], "skillCount" : 20, "jobCategory" : "engineering", "dataQualityScore" : 1.0, "_score" : 1083.8123, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology" }, { "id" : "6a26203374d8ee00a01fbeed", "title" : "Cybersecurity Analyst - Privileged Access Management", "company" : "Roche", "industry" : "Healthcare", "salary" : { "min" : 105000.0, "max" : 165000.0, "currency" : "MYR", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Mid-level Cybersecurity Analyst in Healthcare in Malaysia, adjusted for company size and industry." }, "location" : "Malaysia", "locations" : [ "Malaysia" ], "timestamp" : "2026-06-12T14:19:27.538", "fingerprint" : "a285eba562710d014e83c43d88a21c4a24dddc149cf172befc1820859fdbdc03", "source" : "workday", "language" : "en", "applyUrl" : "https://roche.wd3.myworkdayjobs.com/roche-ext/job/Petaling-Jaya/Cybersecurity-Analyst---Privileged-Access-Management_202604-110323", "externalId" : "202604-110323", "industryFunction" : { }, "locationPoint" : "4.2105,101.9758", "structuredLocations" : [ { "country" : "Malaysia", "continent" : "as", "workMode" : "onsite" } ], "locationText" : "Malaysia", "employmentType" : "FULL_TIME", "technicalSkills" : "HashiCorp Vault, PKI, PowerShell, Python, Ansible, AWS, Azure, GCP, Keyfactor, RedHat IDM, ACME, Docker, Kubernetes, SSL/TLS, Cryptography, CyberArk", "professionalSkills" : [ "Platform engineering", "Secrets management", "Certificate lifecycle management", "DevSecOps principles" ], "hardSkillsList" : [ "Vault configuration", "Vault administration", "Secrets engine configuration", "Auth method configuration", "Policy configuration", "Certificate issuance", "Certificate renewal", "CI/CD integration", "IaC toolchain integration", "Mutual TLS implementation", "Advanced troubleshooting", "Architectural direction" ], "softSkillsList" : [ "Clear communication", "Confident communication", "Continuous improvement mindset", "Comfort with ambiguity", "Comfort with change" ], "hardSkills" : [ { "name" : "Vault configuration", "level" : "intermediate" }, { "name" : "Vault administration", "level" : "intermediate" }, { "name" : "Secrets engine configuration", "level" : "intermediate" }, { "name" : "Auth method configuration", "level" : "intermediate" }, { "name" : "Policy configuration", "level" : "intermediate" }, { "name" : "Certificate issuance", "level" : "intermediate" }, { "name" : "Certificate renewal", "level" : "intermediate" }, { "name" : "CI/CD integration", "level" : "intermediate" }, { "name" : "IaC toolchain integration", "level" : "intermediate" }, { "name" : "Mutual TLS implementation", "level" : "intermediate" }, { "name" : "Advanced troubleshooting", "level" : "intermediate" }, { "name" : "Architectural direction", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Clear communication" }, { "name" : "Confident communication" }, { "name" : "Continuous improvement mindset" }, { "name" : "Comfort with ambiguity" }, { "name" : "Comfort with change" } ], "majorSkills" : "Privileged Access Management, HashiCorp Vault, PKI", "majorSkillsList" : [ "Privileged Access Management", "HashiCorp Vault", "PKI" ], "coreResponsibilities" : "Drive HashiCorp Vault platform delivery, Upgrade privileged access controls, Automate privileged access controls, Design automation scripts, Deploy automation scripts, Streamline Vault operations, Reduce manual effort, Build self-service portals, Build APIs, Embed DevSecOps principles, Integrate secrets management, Integrate IaC toolchains, Monitor PKI infrastructure, Maintain PKI infrastructure, Evolve PKI infrastructure, Manage certificate lifecycle, Implement certificate automation standards, Integrate PKI workflows, Secure containerised environments, Implement mutual TLS, Act as Tier 3 escalation point, Provide advanced troubleshooting, Provide guidance, Provide architectural direction", "teamCollaboration" : "Partner with product owners; Partner with application teams; Global security team", "projectManagementSkills" : [ "ITIL principles" ], "domainKnowledge" : "Enterprise security; Privileged Access Management; Secrets management; PKI infrastructure; Certificate lifecycle management; Cloud platforms; Containerised environments; Network fundamentals; Protocol fundamentals; SSL/TLS; Cryptography; Key exchanges; Cipher suites; Trust validation; Regulated environments", "domainList" : [ "enterprise-security", "privileged-access-management", "secrets-management", "pki-infrastructure", "certificate-lifecycle-management", "cloud-platforms", "containerised-environments", "network-fundamentals", "protocol-fundamentals", "ssl-tls", "cryptography", "key-exchanges", "cipher-suites", "trust-validation", "regulated-environments" ], "domainSpecificKnowledge" : [ "Enterprise security", "Privileged Access Management", "Secrets management", "PKI infrastructure", "Certificate lifecycle management", "Cloud platforms", "Containerised environments", "Network fundamentals", "Protocol fundamentals", "SSL/TLS", "Cryptography", "Key exchanges", "Cipher suites", "Trust validation", "Regulated environments" ], "toolProficiency" : [ "HashiCorp Vault", "Keyfactor", "RedHat IDM", "Terraform", "Jenkins", "GitLab CI/CD", "GitHub Actions", "CyberArk" ], "communicationSkills" : "Explain complex security concepts", "problemSolvingSkills" : "Advanced troubleshooting", "qualificationsBasic" : "3–5 years of hands-on experience in cybersecurity or identity and access management, Bachelor's Degree in Computer Science, Engineering, or related discipline or equivalent experience", "qualificationsPreferred" : "Vault Agent or Kubernetes sidecar injection experience is a plus, Familiarity with ACME-based automation for internal certificate issuance is advantageous, Working knowledge of CyberArk alongside HashiCorp Vault is an advantage, Familiarity with ITIL principles is a plus", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "At Roche you can show up as yourself, embraced for the unique qualities you bring. Our culture encourages personal expression, open dialogue, and genuine connections, where you are valued, accepted and respected for who you are, allowing you to thrive both personally and professionally. This is how we aim to prevent, stop and cure diseases and ensure everyone has access to healthcare today and for generations to come. Join Roche, where every voice matters. ### ### The Position In a world where every application, pipeline, and cloud workload depends on secure access, the people who build and manage that trust layer are critical. At Roche, our Enterprise Privileged Access Management team is responsible for exactly that — ensuring the right systems and people have the right access, at the right time, with the right controls in place. If you enjoy working on platforms that matter, thrive in a complex global environment, and want to deepen your expertise in one of the most in-demand areas of enterprise security — this is the role for you. # Your Opportunity As a Cybersecurity Analyst specialising in PAM, HashiCorp Vault, and PKI, you will be a core member of a global security team working at the intersection of platform engineering and cybersecurity. You will own meaningful workstreams, partner with product owners and application teams, and serve as the Tier 3 expert when complex PAM and Vault issues need to be resolved. This is not a monitoring-and-ticket role — you will be expected to design, build, and continuously improve. In this role, you will: * Drive HashiCorp Vault platform delivery in partnership with the product owner — leading initiatives to upgrade and automate privileged access controls across the enterprise * Design and deploy automation scripts and integrations (PowerShell, Python, Ansible) to streamline Vault operations and reduce manual effort * Build self-service portals and APIs that make secret usage effortless for application teams, embedding DevSecOps principles into access processes * Integrate secrets management into CI/CD pipelines and IaC toolchains across major cloud platforms (AWS, Azure, GCP) * Monitor, maintain, and evolve PKI infrastructure including certificate lifecycle management via platforms such as Keyfactor and RedHat IDM * Implement certificate automation standards such as ACME for internal issuance and integrate PKI workflows into deployment pipelines * Secure containerised environments (Docker, Kubernetes) through mutual TLS implementation * Act as the Tier 3 escalation point for complex PAM and HashiCorp Vault issues — providing advanced troubleshooting, guidance, and architectural direction # Who you are You hold a Bachelor's Degree in Computer Science, Engineering, or a related discipline — or bring equivalent experience that demonstrates the same depth of knowledge. You have 3–5 years of hands-on experience in cybersecurity or identity and access management, ideally within a large, global, or regulated organisation. You work well independently, take ownership of your deliverables, and have a track record of not just maintaining security systems — but actively improving them. Your technical background includes: * HashiCorp Vault — you have configured and administered Vault in a team environment, with practical experience across secrets engines (KV, PKI, Database, cloud), auth methods (AppRole, Kubernetes, LDAP, JWT/OIDC), and policy management; experience with Vault Agent or Kubernetes sidecar injection is a plus * PKI and certificate lifecycle management — you understand CA hierarchy, certificate issuance and renewal, and have worked with platforms such as Keyfactor, RedHat IDM, or Microsoft ADCS; familiarity with ACME-based automation for internal certificate issuance is advantageous * Secrets management automation — you have written scripts and integrations using Python, PowerShell, or Ansible to streamline security operations and reduce manual effort * CI/CD and Infrastructure-as-Code — you are comfortable working within DevOps toolchains (Terraform, Jenkins, GitLab CI/CD, or GitHub Actions) and have experience integrating secrets management or PKI workflows into deployment pipelines across AWS, Azure, or GCP * Network and protocol fundamentals — you have a solid working knowledge of SSL/TLS, cryptography, key exchanges, cipher suites, and trust validation, and can apply this when troubleshooting complex security workflows * CyberArk — working knowledge of CyberArk alongside HashiCorp Vault is an advantage, as the team operates across both platforms Beyond the technical skills, you bring: * A clear, confident communication style — you can explain a complex security concept to a developer, a cloud engineer, and a business stakeholder in three different ways without losing accuracy * A continuous improvement mindset — you proactively spot gaps, inefficiencies, and risks rather than waiting to be asked * Comfort with ambiguity and change in a large, matrixed organisation * Familiarity with ITIL principles (Incident, Problem, Change, Request Management) is a plus, particularly for those with experience in validated or regulated environments **** **** ### Who we are A healthier future drives us to innovate. Together, more than 100’000 employees across the globe are dedicated to advance science, ensuring everyone has access to healthcare today and for generations to come. Our efforts result in more than 26 million people treated with our medicines and over 30 billion tests conducted using our Diagnostics products. We empower each other to explore new possibilities, foster creativity, and keep our ambitions high, so we can deliver life-changing healthcare solutions that make a global impact. Let’s build a healthier future, together. **Roche is an Equal Opportunity Employer.**", "summaryDescription" : "Cybersecurity Analyst - Privileged Access Management at Roche. Skills: Privileged Access Management, HashiCorp Vault, PKI. Drive HashiCorp Vault platform delivery. Upgrade privileged access controls", "postedDate" : "2026-06-09T13:10:17.021", "createdAt" : "2026-06-11T13:10:16.530", "lastUpdated" : "2026-06-12T14:19:27.538", "ingestTimestamp" : "2026-06-11T13:10:16.530", "mongoId" : "6a26203374d8ee00a01fbeed", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://roche.wd3.myworkdayjobs.com/roche-ext/job/Petaling-Jaya/Cybersecurity-Analyst---Privileged-Access-Management_202604-110323", "salaryBand" : "100k-150k", "hasSalary" : false, "allSkills" : [ "Vault configuration", "Vault administration", "Secrets engine configuration", "Auth method configuration", "Policy configuration", "Certificate issuance", "Certificate renewal", "CI/CD integration", "IaC toolchain integration", "Mutual TLS implementation", "Advanced troubleshooting", "Architectural direction", "Clear communication", "Confident communication", "Continuous improvement mindset", "Comfort with ambiguity", "Comfort with change", "Privileged Access Management", "HashiCorp Vault", "PKI", "Platform engineering", "Secrets management", "Certificate lifecycle management", "DevSecOps principles", "ITIL principles", "Enterprise security", "PKI infrastructure", "Cloud platforms", "Containerised environments", "Network fundamentals", "Protocol fundamentals", "SSL/TLS", "Cryptography", "Key exchanges", "Cipher suites", "Trust validation", "Regulated environments", "Keyfactor", "RedHat IDM", "Terraform", "Jenkins", "GitLab CI/CD", "GitHub Actions", "CyberArk" ], "skillCount" : 44, "jobCategory" : "engineering", "seniorityLevel" : "mid", "dataQualityScore" : 0.8888889, "_score" : 1051.1063, "daysOld" : 3, "hasLocation" : true, "hasGeo" : false, "llmIndustry" : "Healthcare" }, { "id" : "6a2176c574d8ee00a0c1ad5f", "title" : "Senior Software Dev Engineer - AWS Identity Access Management, AWS IAM Propagation", "company" : "Amazon.com Services LLC", "industry" : "Software Development, Cloud Computing", "salary" : { "min" : 100000.0, "max" : 227400.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "Seattle, Washington, USA", "locations" : [ "Seattle, Washington, USA" ], "timestamp" : "2026-06-15T04:33:05.063", "fingerprint" : "7d004a76993e6b182f1436c98b588029bca6d63f5c7fb39a5645a0a2f972e07b", "source" : "amazon", "language" : "en", "applyUrl" : "https://account.amazon.jobs/jobs/10439001/apply", "externalId" : "af0d7d03-8f93-4d90-92f0-f4e03a4cbb05", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Seattle", "state" : "Washington", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "47.6038321,-122.3300620" } ], "locationText" : "Seattle, Washington, United States", "employmentType" : "FULL_TIME", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "technicalSkills" : "AWS, Cloud computing, Machine learning, Artificial intelligence, Data lakes, Data analytics, Internet of Things", "professionalSkills" : [ "System interdependencies", "System limitations" ], "hardSkillsList" : [ "Performance", "Scalability", "Architecture" ], "softSkillsList" : [ "Customer obsession", "Mentoring" ], "hardSkills" : [ { "name" : "Performance", "level" : "intermediate" }, { "name" : "Scalability", "level" : "intermediate" }, { "name" : "Architecture", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Customer obsession" }, { "name" : "Mentoring" } ], "majorSkills" : "Identity Access Management, AWS IAM Propagation, Distributed systems", "majorSkillsList" : [ "Identity Access Management", "AWS IAM Propagation", "Distributed systems" ], "coreResponsibilities" : "Build solutions on global scale, Own systems end to end, Influence technology direction, Drive mission critical projects, Mentor junior team members, Create systems and services, Implement systems and services, Deploy systems and services, Decompose complex problems, Understand system interdependencies, Understand system limitations, Share knowledge of patterns, Share knowledge of methods", "teamCollaboration" : "Work with senior engineers; Work with principal engineers; Work with talented teams", "domainKnowledge" : "Identity; Authentication; Authorization; Cloud platform; Utility computing; Compute services; Database services; Storage services; Internet of Things; Platform services; Productivity apps", "domainList" : [ "identity", "authentication", "authorization", "cloud-platform", "utility-computing", "compute-services", "database-services", "storage-services", "internet-of-things", "platform-services", "productivity-apps" ], "domainSpecificKnowledge" : [ "Identity", "Authentication", "Authorization", "Cloud platform", "Utility computing", "Compute services", "Database services", "Storage services", "Internet of Things", "Platform services", "Productivity apps" ], "continuousLearning" : "Formal mentor search; Work and train together; Career progression support", "innovationCreativity" : "Push technical boundaries; Innovate with customer", "problemSolvingSkills" : "Functionally decompose complex problems", "qualificationsBasic" : "5+ years software development experience, 5+ years programming experience, 5+ years system design/architecture experience, Experience as mentor or tech lead", "qualificationsPreferred" : "5+ years full SDLC experience, Bachelor's degree in computer science, Experience managing large-scale distributed systems", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "The Amazon Web Services (AWS) Identity team builds, operates, and innovates the identity, authentication, and authorization stack for the AWS cloud. Our mission is to push the technical boundaries to enable AWS customers to run their business workloads confidently and securely. As part of this mission, we leverage customer obsession and technologies to help customers set appropriate access controls across all their AWS environments. We are seeking a software developer engineer to be part of our team to build solutions on a global scale, own their systems end to end, and influence the direction of technology used by all AWS services around the world. In this role, you will have the opportunity to drive mission critical projects, work with senior and principal engineers, and help mentor more junior team members. As an SDE on our team you will: · Create and collaborate in the design, implementation, and deployment of systems and services · Work and grow with talented teams delivering impactful projects · Functionally decompose complex problems into simple, straight-forward solutions while understanding system interdependencies and limitations · Share your knowledge of the most effective performance, scalability, architecture, and engineering patterns and methods AWS has the most services and more features within those services, than any other cloud provider–from infrastructure technologies like compute, storage, and databases–to emerging technologies, such as machine learning and artificial intelligence, data lakes and analytics, and Internet of Things. Whether its Identity features such as access management and sign on, cryptography, console, builder & developer tools, and even projects like automating all of our contractual billing systems, AWS Platform is always innovating with the customer in mind. The AWS Platform team sustains over 750 million transactions per second. Our team also puts a high value on work-life balance. Striking a healthy balance between your personal and professional life is crucial to your happiness and success here, which is why we aren’t focused on how many hours you spend at work or online. Instead, we’re happy to offer a flexible schedule so you can have a more productive and well-balanced life—both in and outside of work. We have a formal mentor search application that lets you find a mentor that works best for you based on location, job family, job level etc. Your manager can also help you find a mentor or two, because two is better than one. In addition to formal mentors, we work and train together so that we are always learning from one another, and we celebrate and support the career progression of our team members. Here at AWS, we embrace our differences. We are committed to furthering our culture of inclusion. We have ten employee-led affinity groups, reaching 40,000 employees in over 190 chapters globally. We have innovative benefit offerings, and we host annual and ongoing learning experiences, including our Conversations on Race and Ethnicity (CORE) and AmazeCon (diversity) conferences. Amazon’s culture of inclusion is reinforced within our 14 Leadership Principles, which remind team members to seek diverse perspectives, learn and be curious, and earn trust. Utility Computing (UC) AWS Utility Computing (UC) provides product innovations — from foundational services such as Amazon’s Simple Storage Service (S3) and Amazon Elastic Compute Cloud (EC2), to consistently released new product innovations that continue to set AWS’s services and features apart in the industry. As a member of the UC organization, you’ll support the development and management of Compute, Database, Storage, Internet of Things (Iot), Platform, and Productivity Apps services in AWS, including support for customers who require specialized security solutions for their cloud services. Why AWS? Amazon Web Services (AWS) is the world’s most comprehensive and broadly adopted cloud platform. We pioneered cloud computing and never stopped innovating — that’s why customers from the most successful startups to Global 500 companies trust our robust suite of products and services to power their businesses. Diverse Experiences Amazon values diverse experiences. Even if you do not meet all of the preferred qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences, don’t let it stop you from applying. Work/Life Balance We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why we strive for flexibility as part of our working culture. When we feel supported in the workplace and at home, there’s nothing we can’t achieve in the cloud. Inclusive Team Culture Here at AWS, it’s in our nature to learn and be curious. Our employee-led affinity groups foster a culture of inclusion that empower us to be proud of our differences. Ongoing events and learning experiences, including our Conversations on Race and Ethnicity (CORE) and AmazeCon (diversity) conferences, inspire us to never stop embracing our uniqueness. Mentorship and Career Growth We’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge-sharing, mentorship and other career-advancing resources here to help you develop into a better-rounded professional. Basic Qualifications: - 5+ years of non-internship professional software development experience - 5+ years of programming with at least one software programming language experience - 5+ years of leading design or architecture (design patterns, reliability and scaling) of new and existing systems experience - Experience as a mentor, tech lead or leading an engineering team Preferred Qualifications: - 5+ years of full software development life cycle, including coding standards, code reviews, source control management, build processes, testing, and operations experience - Bachelor's degree in computer science or equivalent - Experience designing, building, operating, and managing large-scale distributed systems or web services Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status. Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner. The base salary range for this position is listed below. Your Amazon package will include sign-on payments and restricted stock units (RSUs). Final compensation will be determined based on factors including experience, qualifications, and location. Amazon also offers comprehensive benefits including health insurance (medical, dental, vision, prescription, Basic Life & AD&D insurance and option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage), 401(k) matching, paid time off, and parental leave. Learn more about our benefits at https://amazon.jobs/en/benefits . USA, WA, Seattle - 168,100.00 - 227,400.00 USD annually", "summaryDescription" : "Senior Software Dev Engineer - AWS Identity Access Management, AWS IAM Propagation at Amazon.com Services LLC. Skills: Identity Access Management, AWS IAM Propagation, Distributed systems. Build solutions on global scale. Own systems end to end", "postedDate" : "2026-06-13T12:54:43.951", "createdAt" : "2026-06-13T12:54:43.951", "lastUpdated" : "2026-06-15T04:33:05.063", "ingestTimestamp" : "2026-06-13T12:54:43.951", "mongoId" : "6a2176c574d8ee00a0c1ad5f", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://account.amazon.jobs/jobs/10439001/apply", "salaryAnnualMin" : 100000, "salaryAnnualMax" : 227400, "salaryBand" : "100k-150k", "hasSalary" : true, "allSkills" : [ "Performance", "Scalability", "Architecture", "Customer obsession", "Mentoring", "Identity Access Management", "AWS IAM Propagation", "Distributed systems", "System interdependencies", "System limitations", "Identity", "Authentication", "Authorization", "Cloud platform", "Utility computing", "Compute services", "Database services", "Storage services", "Internet of Things", "Platform services", "Productivity apps" ], "skillCount" : 21, "jobCategory" : "engineering", "dataQualityScore" : 1.0, "_score" : 1042.323, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology" }, { "id" : "69fda4e34c40e2acd1b99784", "title" : "Software Development Manager - AWS Identity & Access, AWS IAM Identity Center", "company" : "Amazon Development Centre Canada ULC", "industry" : "Software Development, Cloud Computing", "salary" : { "min" : 171400.0, "max" : 286200.0, "currency" : "CAD", "frequency" : "yearly", "is_estimated" : false }, "location" : "Vancouver, British Columbia, CAN", "locations" : [ "Vancouver, British Columbia, CAN" ], "timestamp" : "2026-06-15T06:19:28.594", "fingerprint" : "ee7a61be2cbacedd336459d8ef63147686f865daf88b303feba9bac8b5fde623", "source" : "amazon", "language" : "en", "applyUrl" : "https://account.amazon.jobs/jobs/10412352/apply", "externalId" : "4f68fe27-492c-41f6-95d4-9884795eebbe", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Vancouver", "state" : "British Columbia", "country" : "Canada", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "49.2608724,-123.1139520" } ], "locationText" : "Vancouver, British Columbia, Canada", "employmentType" : "FULL_TIME", "experienceLevel" : "Manager", "technicalSkills" : "AWS, Machine learning, Data analysis", "professionalSkills" : [ "System design", "Technical leadership" ], "hardSkillsList" : [ "Cloud computing", "Service operations", "Data collections" ], "softSkillsList" : [ "Leadership", "Mentoring", "Ownership", "Accountability" ], "hardSkills" : [ { "name" : "Cloud computing", "level" : "intermediate" }, { "name" : "Service operations", "level" : "intermediate" }, { "name" : "Data collections", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Leadership" }, { "name" : "Mentoring" }, { "name" : "Ownership" }, { "name" : "Accountability" } ], "majorSkills" : "Cloud Security, Team Management", "majorSkillsList" : [ "Cloud Security", "Team Management" ], "coreResponsibilities" : "Develop and execute project plans, Handle day-to-day activities of engineering team, Staffing, mentoring, and growing engineering team, Operations of the service, Architect and develop technical design, Report on development status, Report on quality status, Report on operations status, Report on system performance", "teamCollaboration" : "Customer-oriented environment; International and diverse team", "projectManagementSkills" : [ "Agile environment" ], "domainKnowledge" : "AWS Identity; Access management; Authentication; Authorization; Permission experience; Cloud computing; Service operations", "domainList" : [ "aws-identity", "access-management", "authentication", "authorization", "permission-experience", "cloud-computing", "service-operations" ], "domainSpecificKnowledge" : [ "AWS Identity", "Access management", "Authentication", "Authorization", "Permission experience", "Cloud computing", "Service operations" ], "communicationSkills" : "Collect requirements; Describe software product features; Describe technical designs; Describe product strategy", "continuousLearning" : "Learning experiences; Knowledge sharing; Mentorship", "innovationCreativity" : "Innovating with the customer; Definition for new features; Definition for new initiatives; Definition for new AWS services", "problemSolvingSkills" : "Automated reasoning", "qualificationsBasic" : "3+ years engineering team management, 7+ years working within engineering teams, 3+ years designing or architecting systems, 8+ years leading definition and development of multi tier web services, Knowledge of engineering practices and patterns, Experience partnering with product or program management", "qualificationsPreferred" : "Experience communicating with users, technical teams, and senior leadership, Experience recruiting, hiring, mentoring, and managing teams", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "The AWS Identity team builds the secure identity, access, and resource management foundation for customers to scale in the AWS Cloud. By joining the AWS Identity team, you will work on massively scalable, core technologies used for authentication and authorization to all AWS services (such as Amazon EC2, Amazon S3, and Amazon DynamoDB). Our mission is to make it easier, safer and convenient for AWS customers to run their business workloads confidently and securely. As part of this mission, we process large amounts of data and leverage large scale data analysis techniques such as machine learning and automated reasoning to help customers set appropriate access controls across all their AWS environments. AWS has the most services and more features within those services, than any other cloud provider–from infrastructure technologies like compute, storage, and databases–to emerging technologies, such as machine learning and artificial intelligence, data lakes and analytics, and Internet of Things. Whether its Identity features such as access management and sign on, cryptography, console, builder & developer tools, and even projects like automating all of our contractual billing systems, AWS Platform is always innovating with the customer in mind. The AWS Platform team sustains over 750 million transactions per second. A successful candidate for this position is a hands-on manager with established background in either IT operations, cloud computing, or software as a service. You are interested in delivering high-performing, reliable systems in a distributed environment, building and using large data collections and machine learning to deliver the next generation permission experience for all AWS customers. It is a highly technical space. A big part of your role will be to grow and develop your team members and make them successful. You should be able to coach, lead and guide on career, technical and growth topics. You like working in a customer-oriented environment, managing with positive honest feedback, and look forward to work in a high quality international and diverse team. A big part of your role will be to grow and develop each individual in your team and make them successful and happy in their career. Finally, you will help drive the definition for new features and initiatives or even new AWS services, so you should be comfortable with ambiguity, willing to roll up your sleeves to do the definitional and set-up work needed, quickly unblock your team and have a high level of ownership and accountability. Key Responsibilities: - Develop and execute project plans and delivery commitments; handle the day-to-day activities of the engineering team within an agile environment. - Staffing, mentoring, and growing a best-of-class engineering team. - Operations of the service as a critical system. - Work closely with the engineers to architect and develop the best technical design and approach. Be a hands-on technical leader and contributor. - Report on status of development, quality, operations, and system performance to management. About Us Inclusive Team Culture Here at AWS, we embrace our differences. We are committed to furthering our culture of inclusion. We have ten employee-led affinity groups, reaching 40,000 employees in over 190 chapters globally. We have innovative benefit offerings, and host annual and ongoing learning experiences, including our Conversations on Race and Ethnicity (CORE) and AmazeCon (gender diversity) conferences. Amazon’s culture of inclusion is reinforced within our 14 Leadership Principles, which remind team members to seek diverse perspectives, learn and be curious, and earn trust. Work/Life Balance Our team puts a high value on work-life balance. It isn’t about how many hours you spend at home or at work; it’s about the flow you establish that brings energy to both parts of your life. We believe striking the right balance between your personal and professional life is critical to life-long happiness and fulfillment. We offer flexibility in working hours and encourage you to find your own balance between your work and personal lives. Mentorship & Career Growth Our team is dedicated to supporting new members. We have a broad mix of experience levels and tenures, and we’re building an environment that celebrates knowledge sharing and mentorship. We care about your career growth and strive to assign projects based on what will help each team member develop into a better-rounded professional and enable them to take on more complex tasks in the future. Basic Qualifications: - 3+ years of engineering team management experience - 7+ years of working directly within engineering teams experience - 3+ years of designing or architecting (design patterns, reliability and scaling) of new and existing systems experience - 8+ years of leading the definition and development of multi tier web services experience - Knowledge of engineering practices and patterns for the full software/hardware/networks development life cycle, including coding standards, code reviews, source control management, build processes, testing, certification, and livesite operations - Experience partnering with product or program management teams Preferred Qualifications: - Experience in communicating with users, other technical teams, and senior leadership to collect requirements, describe software product features, technical designs, and product strategy - Experience in recruiting, hiring, mentoring/coaching and managing teams of Software Engineers to improve their skills, and make them more effective, product software engineers Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status. Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner. The base salary range for this position is listed below. As a total compensation company, Amazon's package may include other elements such as sign-on payments and restricted stock units (RSUs). Final compensation will be determined based on factors including experience, qualifications, and location. Amazon offers comprehensive benefits including health insurance (medical, dental, vision, prescription, basic life & AD&D insurance), Registered Retirement Savings Plan (RRSP), Deferred Profit Sharing Plan (DPSP), paid time off, and other resources to improve health and well-being. We thank all applicants for their interest, however only those interviewed will be advised as to hiring status. CAN, BC, Vancouver - 171,400.00 - 286,200.00 CAD annually", "summaryDescription" : "Software Development Manager - AWS Identity & Access, AWS IAM Identity Center at Amazon Development Centre Canada ULC. Skills: Cloud Security, Team Management. Develop and execute project plans. Handle day-to-day activities of engineering team", "postedDate" : "2026-06-13T07:24:35.504", "createdAt" : "2026-06-13T07:24:35.504", "lastUpdated" : "2026-06-15T06:19:28.594", "ingestTimestamp" : "2026-06-13T07:24:35.504", "mongoId" : "69fda4e34c40e2acd1b99784", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://account.amazon.jobs/jobs/10412352/apply", "salaryBand" : "150k-200k", "hasSalary" : false, "allSkills" : [ "Cloud computing", "Service operations", "Data collections", "Leadership", "Mentoring", "Ownership", "Accountability", "Cloud Security", "Team Management", "System design", "Technical leadership", "Agile environment", "AWS Identity", "Access management", "Authentication", "Authorization", "Permission experience" ], "skillCount" : 17, "jobCategory" : "engineering", "dataQualityScore" : 1.0, "_score" : 1020.3907, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology" }, { "id" : "6a2176d374d8ee00a0c1af9b", "title" : "Software Development Engineer - AWS Identity Access Management, AWS IAM Propagation Org Propagation & Integrity", "company" : "Amazon Development Center U.S., Inc.", "industry" : "Software Development, Cloud Computing", "salary" : { "min" : 70000.0, "max" : 194400.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "Seattle, Washington, USA", "locations" : [ "Seattle, Washington, USA" ], "timestamp" : "2026-06-15T01:10:04.797", "fingerprint" : "1cb530a43b7d0293574c8385ebb9513656108be8856f59d861ff91fb5c3a85a2", "source" : "amazon", "language" : "en", "applyUrl" : "https://account.amazon.jobs/jobs/10438696/apply", "externalId" : "e1ffb85f-283c-4291-b83a-8a51782f3369", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Seattle", "state" : "Washington", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "47.6038321,-122.3300620" } ], "locationText" : "Seattle, Washington, United States", "employmentType" : "FULL_TIME", "minimumEducation" : "Bachelor's", "technicalSkills" : "AWS, Machine learning, Artificial intelligence", "professionalSkills" : [ "System design", "Architecture patterns", "Engineering patterns" ], "hardSkillsList" : [ "Performance tuning", "Scalability design" ], "softSkillsList" : [ "Customer obsession", "Leadership", "Mentoring" ], "hardSkills" : [ { "name" : "Performance tuning", "level" : "intermediate" }, { "name" : "Scalability design", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Customer obsession" }, { "name" : "Leadership" }, { "name" : "Mentoring" } ], "majorSkills" : "Identity Access Management, Cloud Security, System Design", "majorSkillsList" : [ "Identity Access Management", "Cloud Security", "System Design" ], "coreResponsibilities" : "Create systems and services, Implement systems and services, Deploy systems and services, Decompose complex problems, Understand system interdependencies, Understand system limitations, Share knowledge of patterns", "teamCollaboration" : "Work with senior engineers; Work with principal engineers; Mentor junior team members", "domainKnowledge" : "Identity; Authentication; Authorization; Access control; Cloud-native architecture", "domainList" : [ "identity", "authentication", "authorization", "access-control", "cloud-native-architecture" ], "domainSpecificKnowledge" : [ "Identity", "Authentication", "Authorization", "Access control", "Cloud-native architecture" ], "continuousLearning" : "Formal mentor search; Work and train together; Learning experiences", "problemSolvingSkills" : "Functionally decompose problems", "qualificationsBasic" : "3+ years professional software development, 2+ years design or architecture, Programming with at least one language", "qualificationsPreferred" : "3+ years full SDLC experience", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "The Amazon Web Services (AWS) Identity team builds, operates, and innovates the identity, authentication, and authorization stack for the AWS cloud. Our mission is to push the technical boundaries to enable AWS customers to run their business workloads confidently and securely. As part of this mission, we leverage customer obsession and technologies to help customers set appropriate access controls across all their AWS environments. We are seeking a software developer engineer to be part of our team to build solutions on a global scale, own their systems end to end, and influence the direction of technology used by all AWS services around the world. In this role, you will have the opportunity to drive mission critical projects, work with senior and principal engineers, and help mentor more junior team members. As an SDE on our team you will: · Create and collaborate in the design, implementation, and deployment of systems and services · Work and grow with talented teams delivering impactful projects · Functionally decompose complex problems into simple, straight-forward solutions while understanding system interdependencies and limitations · Share your knowledge of the most effective performance, scalability, architecture, and engineering patterns and methods AWS has the most services and more features within those services, than any other cloud provider–from infrastructure technologies like compute, storage, and databases–to emerging technologies, such as machine learning and artificial intelligence, data lakes and analytics, and Internet of Things. Whether its Identity features such as access management and sign on, cryptography, console, builder & developer tools, and even projects like automating all of our contractual billing systems, AWS Platform is always innovating with the customer in mind. The AWS Platform team sustains over 750 million transactions per second. Our team also puts a high value on work-life balance. Striking a healthy balance between your personal and professional life is crucial to your happiness and success here, which is why we aren’t focused on how many hours you spend at work or online. Instead, we’re happy to offer a flexible schedule so you can have a more productive and well-balanced life—both in and outside of work. We have a formal mentor search application that lets you find a mentor that works best for you based on location, job family, job level etc. Your manager can also help you find a mentor or two, because two is better than one. In addition to formal mentors, we work and train together so that we are always learning from one another, and we celebrate and support the career progression of our team members. Here at AWS, we embrace our differences. We are committed to furthering our culture of inclusion. We have ten employee-led affinity groups, reaching 40,000 employees in over 190 chapters globally. We have innovative benefit offerings, and we host annual and ongoing learning experiences, including our Conversations on Race and Ethnicity (CORE) and AmazeCon (gender diversity) conferences. Amazon’s culture of inclusion is reinforced within our 14 Leadership Principles, which remind team members to seek diverse perspectives, learn and be curious, and earn trust. Basic Qualifications: - 3+ years of non-internship professional software development experience - 2+ years of non-internship design or architecture (design patterns, reliability and scaling) of new and existing systems experience - Experience programming with at least one software programming language Preferred Qualifications: - 3+ years of full software development life cycle, including coding standards, code reviews, source control management, build processes, testing, and operations experience - Bachelor's degree in computer science or equivalent Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status. Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner. The base salary range for this position is listed below. Your Amazon package will include sign-on payments and restricted stock units (RSUs). Final compensation will be determined based on factors including experience, qualifications, and location. Amazon also offers comprehensive benefits including health insurance (medical, dental, vision, prescription, Basic Life & AD&D insurance and option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage), 401(k) matching, paid time off, and parental leave. Learn more about our benefits at https://amazon.jobs/en/benefits . USA, WA, Seattle - 143,700.00 - 194,400.00 USD annually", "summaryDescription" : "Software Development Engineer - AWS Identity Access Management, AWS IAM Propagation Org Propagation & Integrity at Amazon Development Center U.S., Inc.. Skills: Identity Access Management, Cloud Security, System Design. Create systems and services. Implement systems and services", "postedDate" : "2026-06-13T09:38:49.851", "createdAt" : "2026-06-13T09:38:49.851", "lastUpdated" : "2026-06-15T01:10:04.797", "ingestTimestamp" : "2026-06-13T09:38:49.851", "mongoId" : "6a2176d374d8ee00a0c1af9b", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://account.amazon.jobs/jobs/10438696/apply", "salaryAnnualMin" : 70000, "salaryAnnualMax" : 194400, "salaryBand" : "50k-75k", "hasSalary" : true, "allSkills" : [ "Performance tuning", "Scalability design", "Customer obsession", "Leadership", "Mentoring", "Identity Access Management", "Cloud Security", "System Design", "System design", "Architecture patterns", "Engineering patterns", "Identity", "Authentication", "Authorization", "Access control", "Cloud-native architecture" ], "skillCount" : 16, "jobCategory" : "engineering", "dataQualityScore" : 0.8888889, "_score" : 988.1756, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology" }, { "id" : "6a2cb20c74d8ee00a09df4fc", "title" : "Identity & PAM Security Engineer", "industry" : "IT", "salary" : { "min" : 55000.0, "max" : 75000.0, "currency" : "EUR", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Mid-level Identity & PAM Security Engineer in France, adjusted for the technology industry and full-time onsite role." }, "location" : "France", "locations" : [ "France" ], "certifications" : [ "SC-300", "AZ-500", "CISSP", "CCSP" ], "timestamp" : "2026-06-16T05:40:41.003", "fingerprint" : "5e99a9cae2559cdaac9e3552183ba9ab9a07bdc875cd13fe1e3e5e369e32e950", "source" : "lever", "language" : "en", "applyUrl" : "https://jobs.lever.co/jobgether/2980a36c-496a-4ff9-9cc0-01399436385a/apply", "externalId" : "2980a36c-496a-4ff9-9cc0-01399436385a", "industryFunction" : { }, "structuredLocations" : [ { "country" : "France", "continent" : "eu", "workMode" : "onsite" } ], "locationText" : "France", "employmentType" : "FULL_TIME", "experienceMinYears" : 4, "experienceMaxYears" : 5, "experienceLevel" : "Mid", "technicalSkills" : "Microsoft Entra ID, Google Cloud IAM, PowerShell, Python, APIs, HashiCorp Vault, Azure Key Vault, Google Secret Manager, SIEM tools, Log analysis", "professionalSkills" : [ "Access controls", "Access processes", "Access review", "Access certification", "Service accounts", "Machine identities", "Secrets management", "Credential rotation", "Conditional access", "MFA enforcement", "Risk-based security", "Identity workflows", "Access provisioning", "Identity security", "PAM strategies", "Security operations", "Identity governance" ], "hardSkillsList" : [ "Privileged Identity Management", "Just-in-time access", "Approval workflows", "Role assignments", "Least-privilege principles", "Service account lifecycle", "Machine identity lifecycle", "Secrets lifecycle", "API key lifecycle", "Credential lifecycle", "Identity security controls", "Automation design", "Automation implementation", "Cloud environments", "Enterprise environments", "Security audits", "Compliance requirements", "Incident response", "Identity investigations", "Tool improvement", "Operational processes" ], "hardSkills" : [ { "name" : "Privileged Identity Management", "level" : "intermediate" }, { "name" : "Just-in-time access", "level" : "intermediate" }, { "name" : "Approval workflows", "level" : "intermediate" }, { "name" : "Role assignments", "level" : "intermediate" }, { "name" : "Least-privilege principles", "level" : "intermediate" }, { "name" : "Service account lifecycle", "level" : "intermediate" }, { "name" : "Machine identity lifecycle", "level" : "intermediate" }, { "name" : "Secrets lifecycle", "level" : "intermediate" }, { "name" : "API key lifecycle", "level" : "intermediate" }, { "name" : "Credential lifecycle", "level" : "intermediate" }, { "name" : "Identity security controls", "level" : "intermediate" }, { "name" : "Automation design", "level" : "intermediate" }, { "name" : "Automation implementation", "level" : "intermediate" }, { "name" : "Cloud environments", "level" : "intermediate" }, { "name" : "Enterprise environments", "level" : "intermediate" }, { "name" : "Security audits", "level" : "intermediate" }, { "name" : "Compliance requirements", "level" : "intermediate" }, { "name" : "Incident response", "level" : "intermediate" }, { "name" : "Identity investigations", "level" : "intermediate" }, { "name" : "Tool improvement", "level" : "intermediate" }, { "name" : "Operational processes", "level" : "intermediate" } ], "majorSkills" : "Privileged Access Management, Cloud Security, Security Engineering", "majorSkillsList" : [ "Privileged Access Management", "Cloud Security", "Security Engineering" ], "coreResponsibilities" : "Design privileged access controls, Implement privileged access controls, Manage privileged access controls, Define secure administrative access processes, Maintain secure administrative access processes, Lead access review processes, Lead access certification processes, Ensure remediation actions completed, Manage service account lifecycle, Manage machine identity lifecycle, Manage secrets lifecycle, Manage API key lifecycle, Manage credential lifecycle, Configure conditional access policies, Configure MFA enforcement, Configure identity risk-based security controls, Design automation for identity workflows, Implement automation for identity workflows, Collaborate with Security teams, Collaborate with Infrastructure teams, Collaborate with Engineering teams, Support security audits, Support compliance requirements, Support incident response, Support identity-related investigations, Contribute to identity governance evolution, Contribute to PAM strategies evolution, Contribute to security operations best practices, Improve identity security tooling, Improve identity security documentation, Improve operational processes", "teamCollaboration" : "Security teams; Infrastructure teams; Engineering teams; Globally distributed team", "domainKnowledge" : "Identity security principles; Least privilege; RBAC; MFA; Conditional access; Privileged access management; Service accounts; Machine identities; Secrets management; Credential rotation; Identity governance; PAM strategies; Security operations; Cloud identity; Enterprise security architectures", "domainList" : [ "identity-security-principles", "least-privilege", "rbac", "mfa", "conditional-access", "privileged-access-management", "service-accounts", "machine-identities", "secrets-management", "credential-rotation", "identity-governance", "pam-strategies", "security-operations", "cloud-identity", "enterprise-security-architectures" ], "domainSpecificKnowledge" : [ "Identity security principles", "Least privilege", "RBAC", "MFA", "Conditional access", "Privileged access management", "Service accounts", "Machine identities", "Secrets management", "Credential rotation", "Identity governance", "PAM strategies", "Security operations", "Cloud identity", "Enterprise security architectures" ], "toolProficiency" : [ "Microsoft Entra ID", "Google Cloud IAM", "HashiCorp Vault", "Azure Key Vault", "Google Secret Manager", "SIEM tools" ], "communicationSkills" : "Documentation; Stakeholder management", "documentationSkills" : "Documentation", "continuousLearning" : "Continuous improvement", "problemSolvingSkills" : "Analytical skills; Problem-solving skills", "outcomesObjectives" : "Increase scalability; Increase resilience", "qualificationsBasic" : "4+ years IAM experience, 4+ years Cloud Security experience, 4+ years Infrastructure Security experience, 4+ years Security Engineering experience, Hands-on Microsoft Entra ID experience, Hands-on Google Cloud IAM experience, Understand least privilege, Understand RBAC, Understand MFA, Understand conditional access, Understand privileged access management, Manage service accounts, Manage machine identities, Manage secrets management, Manage credential rotation at scale, Design PAM processes, Operate PAM processes, Design identity governance processes, Operate identity governance processes, Build automation using PowerShell, Build automation using Python, Build automation using APIs, Build automation using workflow platforms, Analytical skills, Problem-solving skills, Security-first mindset", "qualificationsPreferred" : "Experience with SIEM tools, Experience with log analysis platforms, Experience with security monitoring systems, Familiarity with HashiCorp Vault, Familiarity with Azure Key Vault, Familiarity with Google Secret Manager, SC-300 certification, AZ-500 certification, CISSP certification, CCSP certification", "remoteFriendly" : true, "workSiteFlexibility" : "Remote", "rawDescription" : "## Accountabilities Design, implement, and manage privileged access controls including Privileged Identity Management (PIM), just-in-time (JIT) access, approval workflows, and role assignments. Define and maintain secure administrative access processes for high-risk roles, privileged sessions, and emergency break-glass accounts. Lead access review and certification processes, ensuring remediation actions are completed and access remains aligned with least-privilege principles. Manage the lifecycle of service accounts, machine identities, secrets, API keys, and credentials, including rotation, monitoring, and decommissioning. Configure and maintain conditional access policies, MFA enforcement, and identity risk-based security controls. Design and implement automation for identity workflows, including approvals, access provisioning, reporting, and remediation processes. Collaborate with Security, Infrastructure, and Engineering teams to enhance identity security across cloud and enterprise environments. Support security audits, compliance requirements, incident response, and identity-related investigations. Contribute to the evolution of identity governance, PAM strategies, and security operations best practices. Improve identity security tooling, documentation, and operational processes to increase scalability and resilience. Requirements 4+ years of experience in Identity & Access Management (IAM), Cloud Security, Infrastructure Security, or Security Engineering roles. Hands-on experience with identity platforms such as Microsoft Entra ID and Google Cloud IAM. Strong understanding of identity security principles including least privilege, RBAC, MFA, conditional access, and privileged access management. Experience managing service accounts, machine identities, secrets management, and credential rotation at scale. Proven ability to design or operate PAM or identity governance processes in complex environments. Experience building automation using tools such as PowerShell, Python, APIs, or workflow orchestration platforms. Strong analytical and problem-solving skills with a security-first mindset. Experience working with SIEM tools, log analysis platforms, or security monitoring systems is a plus. Familiarity with tools such as HashiCorp Vault, Azure Key Vault, or Google Secret Manager is advantageous. Relevant certifications such as SC-300, AZ-500, CISSP, or CCSP are considered a strong plus. Excellent communication, documentation, and stakeholder management skills. Ability to work effectively in distributed, fast-paced, and collaborative engineering environments. Benefits Competitive salary with performance-based quarterly bonuses. Remote-first working model with flexibility across working hours. 28 days of paid annual leave. Core working hours with flexibility outside of defined collaboration windows. Top-tier equipment provided to support your work. Referral bonuses and performance-based flash bonuses. Annual company retreats with international team collaboration opportunities. Opportunity to work in a highly technical, security-focused environment. Exposure to modern cloud identity, PAM, and enterprise security architectures. Strong emphasis on autonomy, ownership, and continuous improvement. Collaborative and globally distributed team culture. ## Additional Information How Jobgether works: We use an AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team. We appreciate your interest and wish you the best! Why Apply Through Jobgether? Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time. #LI-CL1", "summaryDescription" : "Identity & PAM Security Engineer. Skills: Privileged Access Management, Cloud Security, Security Engineering. Design privileged access controls. Implement privileged access controls", "postedDate" : "2026-06-11T04:41:47.834", "createdAt" : "2026-06-11T04:41:47.834", "lastUpdated" : "2026-06-16T05:40:41.003", "ingestTimestamp" : "2026-06-14T21:30:39.425", "mongoId" : "6a2cb20c74d8ee00a09df4fc", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "50k-75k", "hasSalary" : false, "allSkills" : [ "Privileged Identity Management", "Just-in-time access", "Approval workflows", "Role assignments", "Least-privilege principles", "Service account lifecycle", "Machine identity lifecycle", "Secrets lifecycle", "API key lifecycle", "Credential lifecycle", "Identity security controls", "Automation design", "Automation implementation", "Cloud environments", "Enterprise environments", "Security audits", "Compliance requirements", "Incident response", "Identity investigations", "Tool improvement", "Operational processes", "Privileged Access Management", "Cloud Security", "Security Engineering", "Access controls", "Access processes", "Access review", "Access certification", "Service accounts", "Machine identities", "Secrets management", "Credential rotation", "Conditional access", "MFA enforcement", "Risk-based security", "Identity workflows", "Access provisioning", "Identity security", "PAM strategies", "Security operations", "Identity governance", "Identity security principles", "Least privilege", "RBAC", "MFA", "Privileged access management", "Cloud identity", "Enterprise security architectures", "SC-300", "AZ-500", "CISSP", "CCSP", "Microsoft Entra ID", "Google Cloud IAM", "HashiCorp Vault", "Azure Key Vault", "Google Secret Manager", "SIEM tools" ], "skillCount" : 58, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Mid", "dataQualityScore" : 0.8888889, "_score" : 984.2618, "daysOld" : 5, "hasLocation" : true, "hasGeo" : false, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.95 }, { "id" : "6a2cb20c74d8ee00a09df500", "title" : "Identity & PAM Security Engineer", "industry" : "IT", "salary" : { "min" : 85000.0, "max" : 125000.0, "currency" : "EUR", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for Senior Identity & PAM Security Engineer in Bulgaria, adjusted for the technology industry and remote work." }, "location" : "UK", "locations" : [ "UK" ], "certifications" : [ "SC-300", "AZ-500", "CISSP", "CCSP" ], "timestamp" : "2026-06-16T05:43:26.341", "fingerprint" : "bbe6c0d0977b0734232a18b975380d139505f94d41c97ed639c634488636a1c6", "source" : "lever", "language" : "en", "applyUrl" : "https://jobs.lever.co/jobgether/6d9135b0-ca4c-417b-9df4-3f3f437d7c16/apply", "externalId" : "6d9135b0-ca4c-417b-9df4-3f3f437d7c16", "industryFunction" : { }, "structuredLocations" : [ { "country" : "Bulgaria", "continent" : "eu", "workMode" : "remote" } ], "locationText" : "Bulgaria", "employmentType" : "FULL_TIME", "experienceMinYears" : 4, "experienceMaxYears" : 5, "experienceLevel" : "Mid", "technicalSkills" : "Microsoft Entra ID, Google Cloud IAM, PowerShell, Python, APIs, HashiCorp Vault, Azure Key Vault, Google Secret Manager", "professionalSkills" : [ "Access controls", "Access processes", "Access review", "Access certification", "Identity lifecycle management", "Conditional access", "MFA enforcement", "Risk-based security", "Identity workflows", "Identity security", "PAM strategies", "Security operations", "Identity governance" ], "hardSkillsList" : [ "Privileged Identity Management", "Just-in-time access", "Role assignments", "Service accounts management", "Machine identities management", "Secrets management", "API keys management", "Credentials management", "Conditional access policies", "MFA enforcement", "Identity risk controls", "Automation", "Access provisioning", "Reporting", "Remediation processes", "Cloud environments", "Enterprise environments", "Security audits", "Compliance requirements", "Incident response", "Identity investigations", "Security tooling", "Operational processes" ], "hardSkills" : [ { "name" : "Privileged Identity Management", "level" : "intermediate" }, { "name" : "Just-in-time access", "level" : "intermediate" }, { "name" : "Role assignments", "level" : "intermediate" }, { "name" : "Service accounts management", "level" : "intermediate" }, { "name" : "Machine identities management", "level" : "intermediate" }, { "name" : "Secrets management", "level" : "intermediate" }, { "name" : "API keys management", "level" : "intermediate" }, { "name" : "Credentials management", "level" : "intermediate" }, { "name" : "Conditional access policies", "level" : "intermediate" }, { "name" : "MFA enforcement", "level" : "intermediate" }, { "name" : "Identity risk controls", "level" : "intermediate" }, { "name" : "Automation", "level" : "intermediate" }, { "name" : "Access provisioning", "level" : "intermediate" }, { "name" : "Reporting", "level" : "intermediate" }, { "name" : "Remediation processes", "level" : "intermediate" }, { "name" : "Cloud environments", "level" : "intermediate" }, { "name" : "Enterprise environments", "level" : "intermediate" }, { "name" : "Security audits", "level" : "intermediate" }, { "name" : "Compliance requirements", "level" : "intermediate" }, { "name" : "Incident response", "level" : "intermediate" }, { "name" : "Identity investigations", "level" : "intermediate" }, { "name" : "Security tooling", "level" : "intermediate" }, { "name" : "Operational processes", "level" : "intermediate" } ], "majorSkills" : "Privileged Access Management, Cloud Security, Security Engineering", "majorSkillsList" : [ "Privileged Access Management", "Cloud Security", "Security Engineering" ], "coreResponsibilities" : "Design privileged access controls, Implement privileged access controls, Manage privileged access controls, Define secure administrative access, Maintain secure administrative access, Lead access review processes, Lead access certification processes, Ensure remediation actions completed, Manage service account lifecycle, Manage machine identity lifecycle, Manage secrets lifecycle, Manage API keys lifecycle, Manage credentials lifecycle, Configure conditional access policies, Configure MFA enforcement, Configure identity risk-based controls, Design automation for identity workflows, Implement automation for identity workflows, Collaborate with Security teams, Collaborate with Infrastructure teams, Collaborate with Engineering teams, Support security audits, Support compliance requirements, Support incident response, Support identity investigations, Contribute to identity governance evolution, Contribute to PAM strategies evolution, Contribute to security operations evolution, Improve identity security tooling, Improve identity security documentation, Improve operational processes", "teamCollaboration" : "Security teams; Infrastructure teams; Engineering teams; Globally distributed team", "domainKnowledge" : "Identity and Access Management; Cloud Security; Infrastructure Security; Privileged Access Management; Identity Governance; Least privilege; RBAC; MFA; Conditional access; Service accounts; Machine identities; Secrets management; Credential rotation; Cloud identity; Enterprise security architectures", "domainList" : [ "identity-and-access-management", "cloud-security", "infrastructure-security", "privileged-access-management", "identity-governance", "least-privilege", "rbac", "mfa", "conditional-access", "service-accounts", "machine-identities", "secrets-management", "credential-rotation", "cloud-identity", "enterprise-security-architectures" ], "domainSpecificKnowledge" : [ "Identity and Access Management", "Cloud Security", "Infrastructure Security", "Privileged Access Management", "Identity Governance", "Least privilege", "RBAC", "MFA", "Conditional access", "Service accounts", "Machine identities", "Secrets management", "Credential rotation", "Cloud identity", "Enterprise security architectures" ], "toolProficiency" : [ "Microsoft Entra ID", "Google Cloud IAM", "HashiCorp Vault", "Azure Key Vault", "Google Secret Manager" ], "communicationSkills" : "Documentation; Stakeholder management", "documentationSkills" : "Documentation", "continuousLearning" : "Continuous improvement", "problemSolvingSkills" : "Analytical; Problem-solving", "qualificationsBasic" : "4+ years IAM experience, 4+ years Cloud Security experience, 4+ years Infrastructure Security experience, 4+ years Security Engineering experience, Hands-on identity platforms experience, Microsoft Entra ID experience, Google Cloud IAM experience, Understand identity security principles, Manage service accounts at scale, Manage machine identities at scale, Manage secrets management at scale, Manage credential rotation at scale, Design PAM processes, Operate PAM processes, Design identity governance processes, Operate identity governance processes, Build automation using PowerShell, Build automation using Python, Build automation using APIs, Build automation using workflow platforms, Analytical skills, Problem-solving skills, Security-first mindset", "qualificationsPreferred" : "Experience with SIEM tools, Experience with log analysis platforms, Experience with security monitoring systems, Familiarity with HashiCorp Vault, Familiarity with Azure Key Vault, Familiarity with Google Secret Manager, SC-300 certification, AZ-500 certification, CISSP certification, CCSP certification", "remoteFriendly" : true, "workSiteFlexibility" : "Remote", "rawDescription" : "## Accountabilities Design, implement, and manage privileged access controls including Privileged Identity Management (PIM), just-in-time (JIT) access, approval workflows, and role assignments. Define and maintain secure administrative access processes for high-risk roles, privileged sessions, and emergency break-glass accounts. Lead access review and certification processes, ensuring remediation actions are completed and access remains aligned with least-privilege principles. Manage the lifecycle of service accounts, machine identities, secrets, API keys, and credentials, including rotation, monitoring, and decommissioning. Configure and maintain conditional access policies, MFA enforcement, and identity risk-based security controls. Design and implement automation for identity workflows, including approvals, access provisioning, reporting, and remediation processes. Collaborate with Security, Infrastructure, and Engineering teams to enhance identity security across cloud and enterprise environments. Support security audits, compliance requirements, incident response, and identity-related investigations. Contribute to the evolution of identity governance, PAM strategies, and security operations best practices. Improve identity security tooling, documentation, and operational processes to increase scalability and resilience. Requirements 4+ years of experience in Identity & Access Management (IAM), Cloud Security, Infrastructure Security, or Security Engineering roles. Hands-on experience with identity platforms such as Microsoft Entra ID and Google Cloud IAM. Strong understanding of identity security principles including least privilege, RBAC, MFA, conditional access, and privileged access management. Experience managing service accounts, machine identities, secrets management, and credential rotation at scale. Proven ability to design or operate PAM or identity governance processes in complex environments. Experience building automation using tools such as PowerShell, Python, APIs, or workflow orchestration platforms. Strong analytical and problem-solving skills with a security-first mindset. Experience working with SIEM tools, log analysis platforms, or security monitoring systems is a plus. Familiarity with tools such as HashiCorp Vault, Azure Key Vault, or Google Secret Manager is advantageous. Relevant certifications such as SC-300, AZ-500, CISSP, or CCSP are considered a strong plus. Excellent communication, documentation, and stakeholder management skills. Ability to work effectively in distributed, fast-paced, and collaborative engineering environments. Benefits Competitive salary with performance-based quarterly bonuses. Remote-first working model with flexibility across working hours. 28 days of paid annual leave. Core working hours with flexibility outside of defined collaboration windows. Top-tier equipment provided to support your work. Referral bonuses and performance-based flash bonuses. Annual company retreats with international team collaboration opportunities. Opportunity to work in a highly technical, security-focused environment. Exposure to modern cloud identity, PAM, and enterprise security architectures. Strong emphasis on autonomy, ownership, and continuous improvement. Collaborative and globally distributed team culture. ## Additional Information How Jobgether works: We use an AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team. We appreciate your interest and wish you the best! Why Apply Through Jobgether? Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time. #LI-CL1", "summaryDescription" : "Identity & PAM Security Engineer. Skills: Privileged Access Management, Cloud Security, Security Engineering. Design privileged access controls. Implement privileged access controls", "postedDate" : "2026-06-11T04:41:14.529", "createdAt" : "2026-06-11T04:41:14.529", "lastUpdated" : "2026-06-16T05:43:26.341", "ingestTimestamp" : "2026-06-14T21:08:58.513", "mongoId" : "6a2cb20c74d8ee00a09df500", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "75k-100k", "hasSalary" : false, "allSkills" : [ "Privileged Identity Management", "Just-in-time access", "Role assignments", "Service accounts management", "Machine identities management", "Secrets management", "API keys management", "Credentials management", "Conditional access policies", "MFA enforcement", "Identity risk controls", "Automation", "Access provisioning", "Reporting", "Remediation processes", "Cloud environments", "Enterprise environments", "Security audits", "Compliance requirements", "Incident response", "Identity investigations", "Security tooling", "Operational processes", "Privileged Access Management", "Cloud Security", "Security Engineering", "Access controls", "Access processes", "Access review", "Access certification", "Identity lifecycle management", "Conditional access", "Risk-based security", "Identity workflows", "Identity security", "PAM strategies", "Security operations", "Identity governance", "Identity and Access Management", "Infrastructure Security", "Identity Governance", "Least privilege", "RBAC", "MFA", "Service accounts", "Machine identities", "Credential rotation", "Cloud identity", "Enterprise security architectures", "SC-300", "AZ-500", "CISSP", "CCSP", "Microsoft Entra ID", "Google Cloud IAM", "HashiCorp Vault", "Azure Key Vault", "Google Secret Manager" ], "skillCount" : 58, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Senior", "dataQualityScore" : 0.8888889, "_score" : 984.2216, "daysOld" : 5, "hasLocation" : true, "hasGeo" : false, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.97 }, { "id" : "6a2ab57974d8ee00a06dd106", "title" : "Staff Software Engineer – Identity & Access Management Platform", "company" : "Kaseya", "industry" : "Software", "salary" : { "min" : 175000.0, "max" : 245000.0, "currency" : "CAD", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Lead Staff Software Engineer in the SaaS industry in Canada, adjusted for seniority and remote work." }, "location" : "Canada - Remote", "locations" : [ "Canada - Remote" ], "timestamp" : "2026-06-14T09:29:09.147", "fingerprint" : "d96f99a7cc71d8d2d3d5a5497c1925ac091fabc4b3e5cc19e803f15f54b9d2a9", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://www.kaseya.com/careers/jobs/id/6014445004/?gh_jid=6014445004", "externalId" : "6014445004", "industryFunction" : { }, "structuredLocations" : [ { "country" : "Canada", "continent" : "na", "workMode" : "remote" } ], "locationText" : "Canada", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "technicalSkills" : "OAuth 2.0, OpenID Connect, OIDC, SAML, JWTs, MFA, SSO, Keycloak, Authentik, Zitadel, Okta, Auth0, Microsoft Entra ID, Google Workspace, Active Directory, Open Policy Agent, OPA, Cedar", "professionalSkills" : [ "System design", "Access governance", "Tenant isolation", "Machine identity management", "Secrets management", "Certificate management", "Compliance requirements", "Audit requirements" ], "hardSkillsList" : [ "Authentication", "Authorization", "Identity governance", "User lifecycle management", "Delegated administration" ], "softSkillsList" : [ "Accountability", "Adaptability", "Commitment" ], "hardSkills" : [ { "name" : "Authentication", "level" : "intermediate" }, { "name" : "Authorization", "level" : "intermediate" }, { "name" : "Identity governance", "level" : "intermediate" }, { "name" : "User lifecycle management", "level" : "intermediate" }, { "name" : "Delegated administration", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Accountability" }, { "name" : "Adaptability" }, { "name" : "Commitment" } ], "coreResponsibilities" : "Design IAM platform services, Build IAM platform services, Maintain IAM platform services, Design IAM APIs, Build IAM APIs, Maintain IAM APIs, Develop integrations between identity providers, Develop integrations between authorization systems, Develop integrations between SaaS products, Implement authentication capabilities, Implement authorization capabilities, Implement user lifecycle management, Build services supporting access governance, Build services supporting delegated administration, Build services supporting compliance requirements, Design secure service-to-service authentication, Design machine identity workflows, Improve platform scalability, Improve platform reliability, Improve platform observability, Improve operational performance, Participate in architecture reviews, Participate in technical design discussions, Mentor engineers, Contribute to engineering standards, Contribute to best practices", "teamCollaboration" : "Work with Engineering teams; Work with Security teams; Work with Product teams", "domainKnowledge" : "Identity and Access Management; SaaS products; Cloud-native services; Multi-tenant SaaS", "domainList" : [ "identity-and-access-management", "saas-products", "cloud-native-services", "multi-tenant-saas" ], "domainSpecificKnowledge" : [ "Identity and Access Management", "SaaS products", "Cloud-native services", "Multi-tenant SaaS" ], "toolProficiency" : [ "Keycloak", "Authentik", "Zitadel", "Okta", "Auth0", "Microsoft Entra ID", "Google Workspace", "Active Directory", "Open Policy Agent", "OPA", "Cedar", "GitHub Copilot", "ChatGPT" ], "qualificationsBasic" : "8+ years software engineering experience, Experience building distributed systems, Experience building platform services, Experience implementing authentication, Experience implementing authorization, Experience with OAuth 2.0, Experience with OpenID Connect, Experience with OIDC, Experience with SAML, Experience with JWTs, Experience with MFA, Experience with enterprise SSO, Experience integrating IAM platforms, Experience building cloud-native services", "qualificationsPreferred" : "Multi-tenant SaaS architectures, Tenant isolation models, RBAC, ABAC, Delegated administration, Access governance solutions, Integrating enterprise identity providers, Experience with policy engines, Machine identity management, Secrets management, Certificate management, Supporting compliance requirements, Supporting audit requirements, Using AI-assisted development tools", "remoteFriendly" : true, "workSiteFlexibility" : "Remote", "rawDescription" : "About Kaseya Kaseya is the leading provider of AI-powered IT management and cybersecurity software, serving Managed Service Providers (MSPs) and internal IT organizations worldwide. Our comprehensive platform helps organizations efficiently manage, secure, and automate their IT environments, driving operational efficiency and long-term business success. Backed by Insight Partners, a leading global software investor, Kaseya has experienced sustained double-digit growth and continues to expand its global footprint. Today, Kaseya supports customers in more than 20 countries and manages over 15 million endpoints worldwide. Founded in 2000, Kaseya has built a culture centered around innovation, accountability, and results. We are a high-growth, high-performance organization that values individuals who are driven, adaptable, and committed to delivering exceptional outcomes for our customers and teammates alike. At Kaseya, success comes from embracing challenges, moving with urgency, and continuously raising the bar. Staff Software Engineer – Identity & Access Management Platform Why Kaseya? Join a fast-growing company that’s transforming the IT industry. At Kaseya, you’ll have the opportunity to work with cutting-edge technology, collaborate with a dynamic team, and develop your career in a highimpact role. Join the Kaseya growth rocket ship and see how we are #ChangingLives! Job Summary We’re hiring a Staff Software Engineer to help build and scale Kaseya’s Identity and Access Management (IAM) platform. This role focuses on developing authentication, authorization, and identity governance services that support a growing portfolio of SaaS products. You will work closely with Engineering, Security, and Product teams to deliver secure, reliable, and scalable identity capabilities while contributing to the long-term evolution of the platform. Roles & Responsibilities Design, build, and maintain IAM platform services and APIs Develop integrations between identity providers, authorization systems, and SaaS products Implement authentication, authorization, and user lifecycle management capabilities Build services supporting access governance, delegated administration, and compliance requirements Design secure service-to-service authentication and machine identity workflows Improve platform scalability, reliability, observability, and operational performance Participate in architecture reviews and technical design discussions Mentor engineers and contribute to engineering standards and best practices Required Qualifications 8+ years of software engineering experience building distributed systems or platform services Experience implementing authentication and authorization solutions in production environments Experience with OAuth 2.0, OpenID Connect (OIDC), SAML, JWTs, MFA, or enterprise SSO Experience integrating IAM platforms such as Keycloak, Authentik, Zitadel, Okta, Auth0, or similar technologies Experience building cloud-native services for SaaS applications or platform environments Preferred Qualifications Experience with multi-tenant SaaS architectures and tenant isolation models Experience with RBAC, ABAC, delegated administration, or access governance solutions Experience integrating enterprise identity providers such as Microsoft Entra ID, Okta, Google Workspace, or Active Directory Experience with policy engines such as Open Policy Agent (OPA) or Cedar Experience with machine identity management, secrets management, or certificate management Experience supporting compliance or audit requirements within enterprise environments Experience using AI-assisted development tools (e.g., GitHub Copilot, ChatGPT) in development workflows Additional information Kaseya provides equal employment opportunity to all employees and applicants without regard to race, religion, age, ancestry, gender, sex, sexual orientation, national origin, citizenship status, physical or mental disability, veteran status, marital status, or any other characteristic protected by applicable law.", "summaryDescription" : "Staff Software Engineer – Identity & Access Management Platform at Kaseya. Design IAM platform services. Build IAM platform services", "postedDate" : "2026-06-11T21:20:40.057", "createdAt" : "2026-06-11T21:20:40.057", "lastUpdated" : "2026-06-14T09:29:09.147", "ingestTimestamp" : "2026-06-11T21:20:40.057", "mongoId" : "6a2ab57974d8ee00a06dd106", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "150k-200k", "hasSalary" : false, "allSkills" : [ "Authentication", "Authorization", "Identity governance", "User lifecycle management", "Delegated administration", "Accountability", "Adaptability", "Commitment", "System design", "Access governance", "Tenant isolation", "Machine identity management", "Secrets management", "Certificate management", "Compliance requirements", "Audit requirements", "Identity and Access Management", "SaaS products", "Cloud-native services", "Multi-tenant SaaS", "Keycloak", "Authentik", "Zitadel", "Okta", "Auth0", "Microsoft Entra ID", "Google Workspace", "Active Directory", "Open Policy Agent", "OPA", "Cedar", "GitHub Copilot", "ChatGPT" ], "skillCount" : 33, "jobCategory" : "other", "jobSubcategory" : "platform", "dataQualityScore" : 0.8888889, "_score" : 983.6479, "daysOld" : 2, "hasLocation" : true, "hasGeo" : false, "llmIndustry" : "Software" }, { "id" : "69fda4e54c40e2acd1b99a69", "title" : "Senior PMT, Ads Agent Identity and Authorization Infrastructure", "company" : "Amazon.com Services LLC", "industry" : "Project/Program/Product Management--Technical, Product Management - Technical, Advertising", "salary" : { "min" : 166000.0, "max" : 225000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "New York, New York, USA", "locations" : [ "New York, New York, USA" ], "timestamp" : "2026-06-15T03:55:38.487", "fingerprint" : "763a96e6b6fc3d765dc984b94d1ea56be0ecc3334eec285b27962de5455f4062", "source" : "amazon", "language" : "en", "applyUrl" : "https://account.amazon.jobs/jobs/10412505/apply", "externalId" : "71b4bfb3-5b17-48e8-aae2-c4e60f68c9ca", "industryFunction" : { }, "structuredLocations" : [ { "city" : "New York", "state" : "New York", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "40.7127281,-74.0060152" } ], "locationText" : "New York, New York, United States", "employmentType" : "FULL_TIME", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "technicalSkills" : "REST API", "professionalSkills" : [ "Product strategy", "Roadmap definition", "Product requirements", "Technical specifications", "Customer value propositions", "Product-market fit" ], "hardSkillsList" : [ "Authorization models", "Delegation tokens", "Spend controls", "Circuit breakers", "Authentication protocols" ], "hardSkills" : [ { "name" : "Authorization models", "level" : "intermediate" }, { "name" : "Delegation tokens", "level" : "intermediate" }, { "name" : "Spend controls", "level" : "intermediate" }, { "name" : "Circuit breakers", "level" : "intermediate" }, { "name" : "Authentication protocols", "level" : "intermediate" } ], "majorSkills" : "Identity management, Access management, Authorization infrastructure", "majorSkillsList" : [ "Identity management", "Access management", "Authorization infrastructure" ], "coreResponsibilities" : "Own product vision and roadmap, Define product requirements, Drive cross-functional alignment, Author PRFAQs, Author BRDs, Author technical specifications, Define and track success metrics, Represent customer and partner needs, Partner with engineering, Drive beta programs", "teamCollaboration" : "Cross-functional alignment; Engineering teams; API platform; Security teams; Partner-facing organizations; Identity teams; Authorization teams; Data teams; Access Experience teams; Ads Agent Orchestrator team; Developer Experience; Partner Enablement", "projectManagementSkills" : [ "Roadmap strategy", "Roadmap definition" ], "domainKnowledge" : "Agent identity; Agent authorization; AI agents; Agent registry; Authentication flows; Capability-scoped authorization; Advertiser controls; Audit trail; Agentic commerce; M2M auth; Short-lived tokens; OAuth extensions; Identity and access management", "domainList" : [ "agent-identity", "agent-authorization", "ai-agents", "agent-registry", "authentication-flows", "capability-scoped-authorization", "advertiser-controls", "audit-trail", "agentic-commerce", "m2m-auth", "short-lived-tokens", "oauth-extensions", "identity-and-access-management" ], "domainSpecificKnowledge" : [ "Agent identity", "Agent authorization", "AI agents", "Agent registry", "Authentication flows", "Capability-scoped authorization", "Advertiser controls", "Audit trail", "Agentic commerce", "M2M auth", "Short-lived tokens", "OAuth extensions", "Identity and access management" ], "toolProficiency" : [ "Tableau", "Qlikview", "QuickSight" ], "communicationSkills" : "Customer value propositions; Executive-level prioritization", "documentationSkills" : "PRFAQs; BRDs; Technical specifications", "problemSolvingSkills" : "Feature delivery and tradeoffs", "outcomesObjectives" : "Agent adoption; Authorization accuracy; Advertiser control adoption; Developer onboarding time", "qualificationsBasic" : "2+ years end to end product delivery, 5+ years technical product management, Bachelor's degree, Contribute to engineering discussions, Feature delivery and tradeoffs, Own/drive roadmap strategy, Manage technical products, Represent and advocate customers", "qualificationsPreferred" : "Experience using analytical tools, Building and driving adoption, Software development experience, Experience deploying IAM systems, Experience in web security, Experience with web-based applications", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "As AI agents become the primary interface for advertisers and partners on Amazon Ads, we are building agent-native identity and authorization infrastructure that treats AI agents as first-class participants. We believe every agent should have a unique identity, authenticate through purpose-built flows, receive only the permissions its declared purpose requires, and produce a complete audit trail of every action it takes. We're looking for a Senior Product Manager – Technical (PMT) to define and drive the product strategy for Agent Identity and Authorization Infrastructure within Amazon Ads. You will own the roadmap for how 5,000+ partners and 2M+ advertisers grant, scope, and govern AI agent access to their advertising accounts — spanning agent registry, authentication, capability-scoped authorization, advertiser-facing controls, and auditability. This is a greenfield opportunity to define the trust layer for agentic commerce at Amazon scale. Key job responsibilities - Own the end-to-end product vision and roadmap for agent identity, authentication, and authorization — from 1P agent registry through 3P developer SDK and advertiser-facing access controls - Define product requirements for capability-scoped authorization models that go beyond tool-level access to intent-bound, time-bound, and data-bound delegation - Drive cross-functional alignment across 10+ engineering teams, API platform, security, and partner-facing organizations to deliver integrated agent trust infrastructure - Author PRFAQs, BRDs, and technical specifications for new authorization primitives (agent-to-agent delegation, programmable delegation tokens, spend controls, circuit breakers) - Define and track success metrics including agent adoption, authorization accuracy, advertiser control adoption, and developer onboarding time - Represent advertiser and partner needs in executive-level prioritization, translating complex authorization concepts into clear customer value propositions - Partner with engineering to make build/buy/integrate decisions on authentication protocols (M2M auth, short-lived tokens, OAuth extensions for agents) - Drive beta programs with external partners (agencies, integrators) to validate product-market fit before scaled rollout A day in the life You'll start your day reviewing agent adoption metrics and authorization error rates across 1P and 3P surfaces. You might spend the morning in a design review with engineers debating whether capability-scoped permissions should be enforced at the gateway or service layer. After lunch, you're leading a working session with a large agency partner (like PacVue or Teikametrics) to understand how they want to register and manage multiple specialized agents under their application. In the afternoon, you're writing the product spec for the advertiser-facing Agent Access UI — where advertisers see every authorized agent, scope what each can do, and revoke access instantly. You close the day aligning with your VP on the 3P agent sandbox launch timeline for unBoxed. Your internal stakeholders include engineering (Identity, Authorization, Data, and Access Experience teams), the Ads Agent Orchestrator team, Developer Experience (DX), and Partner Enablement. Your customers are advertisers who need control over AI agents accessing their accounts, partners building agentic integrations, and internal 1P agent teams shipping skills on the Ads Agent platform. About the team The Ads Agent Identity and Authorization Infrastructure (AI²) team owns identity and access management for Amazon Ads — for both humans and AI agents. We manage registration, account management, permission controls, and ad-product eligibility that serve as gateways to Amazon Ads, impacting 5K+ partners and 2M+ advertisers globally with 800K+ registrations per year and 5M+ active users. We are a team of builders who ship at high velocity — we launched agent registry and agent authorization for 1P agents in Q1 2026, and are now extending to 3P. We value customer obsession (advertisers must trust the agents acting on their behalf), ownership (you own the product end-to-end from vision through metrics), and bias for action (we ship iteratively with real partners, not in isolation). We are based in New York (JFK19). Basic Qualifications: - 2+ years of end to end product delivery experience - 5+ years of technical product or program management experience - Bachelor's degree - Experience contributing to engineering discussions around technology decisions and strategy related to a product - Experience with feature delivery and tradeoffs of a product - Experience owning/driving roadmap strategy and definition - Experience managing technical products or online services - Experience in representing and advocating for a variety of critical customers and stakeholders during executive-level prioritization and planning Preferred Qualifications: - Experience in using analytical tools, such as Tableau, Qlikview, QuickSight - Experience in building and driving adoption of new tools - Experience in software development, or experience working with REST API based services - Experience in deploying identity and access management systems, or experience in web security and experience with web-based applications and HTTP Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status. Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner. The base salary range for this position is listed below. Your Amazon package will include sign-on payments and restricted stock units (RSUs). Final compensation will be determined based on factors including experience, qualifications, and location. Amazon also offers comprehensive benefits including health insurance (medical, dental, vision, prescription, Basic Life & AD&D insurance and option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage), 401(k) matching, paid time off, and parental leave. Learn more about our benefits at https://amazon.jobs/en/benefits . USA, NY, New York - 166,300.00 - 225,000.00 USD annually", "summaryDescription" : "Senior PMT, Ads Agent Identity and Authorization Infrastructure at Amazon.com Services LLC. Skills: Identity management, Access management, Authorization infrastructure. Own product vision and roadmap. Define product requirements", "postedDate" : "2026-06-13T07:46:29.901", "createdAt" : "2026-06-13T07:46:29.901", "lastUpdated" : "2026-06-15T03:55:38.487", "ingestTimestamp" : "2026-06-13T07:46:29.901", "mongoId" : "69fda4e54c40e2acd1b99a69", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://account.amazon.jobs/jobs/10412505/apply", "salaryAnnualMin" : 166000, "salaryAnnualMax" : 225000, "salaryBand" : "150k-200k", "hasSalary" : true, "allSkills" : [ "Authorization models", "Delegation tokens", "Spend controls", "Circuit breakers", "Authentication protocols", "Identity management", "Access management", "Authorization infrastructure", "Product strategy", "Roadmap definition", "Product requirements", "Technical specifications", "Customer value propositions", "Product-market fit", "Roadmap strategy", "Agent identity", "Agent authorization", "AI agents", "Agent registry", "Authentication flows", "Capability-scoped authorization", "Advertiser controls", "Audit trail", "Agentic commerce", "M2M auth", "Short-lived tokens", "OAuth extensions", "Identity and access management", "Tableau", "Qlikview", "QuickSight" ], "skillCount" : 31, "jobCategory" : "project-management", "dataQualityScore" : 1.0, "_score" : 968.0024, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true }, { "id" : "6a2cb20c74d8ee00a09df4fd", "title" : "Identity & PAM Security Engineer", "industry" : "IT", "salary" : { "min" : 75000.0, "max" : 105000.0, "currency" : "EUR", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for Identity & PAM Security Engineer in Germany, adjusted for mid-seniority, technology industry, and onsite work mode." }, "location" : "Germany", "locations" : [ "Germany" ], "certifications" : [ "SC-300", "AZ-500", "CISSP", "CCSP" ], "timestamp" : "2026-06-16T01:48:04.601", "fingerprint" : "14616371812e0be42c5e20d29ca7a00f3052bee5ab93db912b5d90e1779e174d", "source" : "lever", "language" : "en", "applyUrl" : "https://jobs.lever.co/jobgether/33499503-0724-412e-8866-e8ba47f99ce1/apply", "externalId" : "33499503-0724-412e-8866-e8ba47f99ce1", "industryFunction" : { }, "structuredLocations" : [ { "country" : "Germany", "continent" : "eu", "workMode" : "onsite" } ], "locationText" : "Germany", "employmentType" : "FULL_TIME", "experienceMinYears" : 4, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "technicalSkills" : "Microsoft Entra ID, Google Cloud IAM, PowerShell, Python, APIs, HashiCorp Vault, Azure Key Vault, Google Secret Manager", "professionalSkills" : [ "Security engineering", "Cloud security", "Infrastructure security", "Identity management", "Access management", "Security operations" ], "hardSkillsList" : [ "Privileged access controls", "Just-in-time access", "Role assignments", "Service account lifecycle", "Machine identity lifecycle", "Secret rotation", "Credential rotation", "Conditional access policies", "MFA enforcement", "Identity risk controls", "Identity workflows", "Access provisioning", "Reporting processes", "Remediation processes", "Identity governance", "PAM strategies", "Security tooling", "Operational processes", "Least privilege", "RBAC", "MFA", "Privileged access management", "Secrets management", "PAM processes", "Identity governance processes", "Workflow orchestration" ], "softSkillsList" : [ "Documentation", "Stakeholder management" ], "hardSkills" : [ { "name" : "Privileged access controls", "level" : "intermediate" }, { "name" : "Just-in-time access", "level" : "intermediate" }, { "name" : "Role assignments", "level" : "intermediate" }, { "name" : "Service account lifecycle", "level" : "intermediate" }, { "name" : "Machine identity lifecycle", "level" : "intermediate" }, { "name" : "Secret rotation", "level" : "intermediate" }, { "name" : "Credential rotation", "level" : "intermediate" }, { "name" : "Conditional access policies", "level" : "intermediate" }, { "name" : "MFA enforcement", "level" : "intermediate" }, { "name" : "Identity risk controls", "level" : "intermediate" }, { "name" : "Identity workflows", "level" : "intermediate" }, { "name" : "Access provisioning", "level" : "intermediate" }, { "name" : "Reporting processes", "level" : "intermediate" }, { "name" : "Remediation processes", "level" : "intermediate" }, { "name" : "Identity governance", "level" : "intermediate" }, { "name" : "PAM strategies", "level" : "intermediate" }, { "name" : "Security tooling", "level" : "intermediate" }, { "name" : "Operational processes", "level" : "intermediate" }, { "name" : "Least privilege", "level" : "intermediate" }, { "name" : "RBAC", "level" : "intermediate" }, { "name" : "MFA", "level" : "intermediate" }, { "name" : "Privileged access management", "level" : "intermediate" }, { "name" : "Secrets management", "level" : "intermediate" }, { "name" : "PAM processes", "level" : "intermediate" }, { "name" : "Identity governance processes", "level" : "intermediate" }, { "name" : "Workflow orchestration", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Documentation" }, { "name" : "Stakeholder management" } ], "coreResponsibilities" : "Design privileged access controls, Implement privileged access controls, Manage privileged access controls, Define secure administrative access, Maintain secure administrative access, Lead access review processes, Lead access certification processes, Ensure remediation actions completed, Manage service account lifecycle, Manage machine identity lifecycle, Manage secrets lifecycle, Manage API key lifecycle, Manage credential lifecycle, Configure conditional access policies, Configure MFA enforcement, Configure identity risk controls, Design automation for identity workflows, Implement automation for identity workflows, Collaborate with Security teams, Collaborate with Infrastructure teams, Collaborate with Engineering teams, Support security audits, Support compliance requirements, Support incident response, Support identity investigations, Contribute to identity governance evolution, Contribute to PAM strategies evolution, Contribute to security operations evolution, Improve identity security tooling, Improve identity security documentation, Improve operational processes", "teamCollaboration" : "Security teams; Infrastructure teams; Engineering teams; Globally distributed team", "domainKnowledge" : "Identity security principles; Least privilege; RBAC; MFA; Conditional access; Privileged access management; Identity governance; PAM strategies; Cloud identity; Enterprise security architectures", "domainList" : [ "identity-security-principles", "least-privilege", "rbac", "mfa", "conditional-access", "privileged-access-management", "identity-governance", "pam-strategies", "cloud-identity", "enterprise-security-architectures" ], "domainSpecificKnowledge" : [ "Identity security principles", "Least privilege", "RBAC", "MFA", "Conditional access", "Privileged access management", "Identity governance", "PAM strategies", "Cloud identity", "Enterprise security architectures" ], "toolProficiency" : [ "Microsoft Entra ID", "Google Cloud IAM", "HashiCorp Vault", "Azure Key Vault", "Google Secret Manager", "SIEM tools", "Log analysis platforms" ], "communicationSkills" : "Stakeholder management", "documentationSkills" : "Documentation", "continuousLearning" : "Continuous improvement", "problemSolvingSkills" : "Problem-solving skills; Analytical skills", "qualificationsBasic" : "4+ years IAM experience, 4+ years Cloud Security experience, 4+ years Infrastructure Security experience, 4+ years Security Engineering experience, Hands-on Microsoft Entra ID experience, Hands-on Google Cloud IAM experience, Understanding identity security principles, Understanding least privilege, Understanding RBAC, Understanding MFA, Understanding conditional access, Understanding privileged access management, Experience managing service accounts, Experience managing machine identities, Experience managing secrets management, Experience managing credential rotation, Proven ability design PAM processes, Proven ability operate PAM processes, Proven ability design identity governance processes, Proven ability operate identity governance processes, Experience building automation, Analytical skills, Problem-solving skills, Security-first mindset", "qualificationsPreferred" : "Experience with SIEM tools a plus, Experience with log analysis platforms a plus, Experience with security monitoring systems a plus, Familiarity with HashiCorp Vault advantageous, Familiarity with Azure Key Vault advantageous, Familiarity with Google Secret Manager advantageous, SC-300 certification a plus, AZ-500 certification a plus, CISSP certification a plus, CCSP certification a plus", "remoteFriendly" : true, "workSiteFlexibility" : "Remote", "rawDescription" : "## Accountabilities Design, implement, and manage privileged access controls including Privileged Identity Management (PIM), just-in-time (JIT) access, approval workflows, and role assignments. Define and maintain secure administrative access processes for high-risk roles, privileged sessions, and emergency break-glass accounts. Lead access review and certification processes, ensuring remediation actions are completed and access remains aligned with least-privilege principles. Manage the lifecycle of service accounts, machine identities, secrets, API keys, and credentials, including rotation, monitoring, and decommissioning. Configure and maintain conditional access policies, MFA enforcement, and identity risk-based security controls. Design and implement automation for identity workflows, including approvals, access provisioning, reporting, and remediation processes. Collaborate with Security, Infrastructure, and Engineering teams to enhance identity security across cloud and enterprise environments. Support security audits, compliance requirements, incident response, and identity-related investigations. Contribute to the evolution of identity governance, PAM strategies, and security operations best practices. Improve identity security tooling, documentation, and operational processes to increase scalability and resilience. Requirements 4+ years of experience in Identity & Access Management (IAM), Cloud Security, Infrastructure Security, or Security Engineering roles. Hands-on experience with identity platforms such as Microsoft Entra ID and Google Cloud IAM. Strong understanding of identity security principles including least privilege, RBAC, MFA, conditional access, and privileged access management. Experience managing service accounts, machine identities, secrets management, and credential rotation at scale. Proven ability to design or operate PAM or identity governance processes in complex environments. Experience building automation using tools such as PowerShell, Python, APIs, or workflow orchestration platforms. Strong analytical and problem-solving skills with a security-first mindset. Experience working with SIEM tools, log analysis platforms, or security monitoring systems is a plus. Familiarity with tools such as HashiCorp Vault, Azure Key Vault, or Google Secret Manager is advantageous. Relevant certifications such as SC-300, AZ-500, CISSP, or CCSP are considered a strong plus. Excellent communication, documentation, and stakeholder management skills. Ability to work effectively in distributed, fast-paced, and collaborative engineering environments. Benefits Competitive salary with performance-based quarterly bonuses. Remote-first working model with flexibility across working hours. 28 days of paid annual leave. Core working hours with flexibility outside of defined collaboration windows. Top-tier equipment provided to support your work. Referral bonuses and performance-based flash bonuses. Annual company retreats with international team collaboration opportunities. Opportunity to work in a highly technical, security-focused environment. Exposure to modern cloud identity, PAM, and enterprise security architectures. Strong emphasis on autonomy, ownership, and continuous improvement. Collaborative and globally distributed team culture. ## Additional Information How Jobgether works: We use an AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team. We appreciate your interest and wish you the best! Why Apply Through Jobgether? Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time. #LI-CL1", "summaryDescription" : "Identity & PAM Security Engineer. Design privileged access controls. Implement privileged access controls", "postedDate" : "2026-06-11T04:12:29.830", "createdAt" : "2026-06-11T04:12:29.830", "lastUpdated" : "2026-06-16T01:48:04.601", "ingestTimestamp" : "2026-06-14T21:06:54.320", "mongoId" : "6a2cb20c74d8ee00a09df4fd", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "75k-100k", "hasSalary" : false, "allSkills" : [ "Privileged access controls", "Just-in-time access", "Role assignments", "Service account lifecycle", "Machine identity lifecycle", "Secret rotation", "Credential rotation", "Conditional access policies", "MFA enforcement", "Identity risk controls", "Identity workflows", "Access provisioning", "Reporting processes", "Remediation processes", "Identity governance", "PAM strategies", "Security tooling", "Operational processes", "Least privilege", "RBAC", "MFA", "Privileged access management", "Secrets management", "PAM processes", "Identity governance processes", "Workflow orchestration", "Documentation", "Stakeholder management", "Security engineering", "Cloud security", "Infrastructure security", "Identity management", "Access management", "Security operations", "Identity security principles", "Conditional access", "Cloud identity", "Enterprise security architectures", "SC-300", "AZ-500", "CISSP", "CCSP", "Microsoft Entra ID", "Google Cloud IAM", "HashiCorp Vault", "Azure Key Vault", "Google Secret Manager", "SIEM tools", "Log analysis platforms" ], "skillCount" : 49, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Mid", "dataQualityScore" : 0.8888889, "_score" : 953.66095, "daysOld" : 4, "hasLocation" : true, "hasGeo" : false, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.95 }, { "id" : "6a2eb32b74d8ee00a0e7dec7", "title" : "Officer-Identity & Access Management Infrastructure Analyst", "company" : "Citi", "industry" : "Banking", "salary" : { "min" : 1200000.0, "max" : 2000000.0, "currency" : "INR", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for India, adjusted for mid-seniority, and the banking industry." }, "location" : "1/124, SHIVAJI GARDENS, MOONLI", "locations" : [ "1/124, SHIVAJI GARDENS, MOONLI", "India" ], "timestamp" : "2026-06-16T01:06:18.241", "fingerprint" : "6837260b01513c7fefece207373709e8192d9f883b9bbc6a0ee36c8c45121483", "source" : "workday", "language" : "en", "applyUrl" : "https://citi.wd5.myworkdayjobs.com/2/job/1124-SHIVAJI-GARDENS-MOONLI/Officer-Identity---Access-Management-Infrastructure-Analyst_26964840-1", "externalId" : "26964840", "industryFunction" : { }, "locationPoint" : "18.53017,73.85263", "structuredLocations" : [ { "city" : "Moonli", "workMode" : "onsite" } ], "locationText" : "Moonli", "employmentType" : "FULL_TIME", "remoteFriendly" : false, "rawDescription" : "The Infrastructure Analyst 1 is an entry level role responsible for assisting with LAN / WAN and help desk administration activities, including network maintenance, technical guidance, and security in coordination with the Technology Infrastructure team. The overall objective is to use infrastructure technology knowledge and identified policies to process data, resolve issues and execute administrative tasks. **_Responsibilities:_** * · Provision user/Functional ID entitlements, compliance review requests and/or incident/change management handling for Citi’s global customer base within established support thresholds · Analyzing and finding the key areas for process improvement and creating an action plan for the implementation of the same. · Assist higher management in maintaining operational service levels in line with the global IAM standards. · Escalations management- Ensure the escalations raised by clients are handled appropriately in a timely manner. · Conduct basic housekeeping tasks, such as inactivity maintenance. Perform manual entitlement review maintenance. · Ensure adherence to pre-assigned SLO requirements for designated requests at a personal and drive at team level. · Implements already established security procedures within the framework of specific system assignments, focusing on the full scope of IAM Service Catalog requirements for simple thru complex, multi-tiered applications. · Understands Service Delivery Process Controls and under supervision, participate in annual review of Process Control documents associated with specific systems assigned. · Demonstrates basic understanding of Lean processes. · Understands the high-level principle behind Information Security concepts and policies; and applies / implements into day-to-day work. · Identifies potential compliance issues and raise to management attention. · Must be able to exchange information in a concise and logical way as well as be sensitive to audience diversity. · Proven use of discretion and judgment given the subject sensitivity of the work data · Ability to manage multiple efforts and adjust priorities with evolving work efforts. · Adhere to the defined Risk and Control guidelines and perform the activity within the distinct guidelines _._ # **_Qualifications:_** * Should possess 5-8 years of work experience as an SME in an operational/processing environment. However, experience in **Identity & Access management, Information Security, Risk and Control** domain would be an added advantage. * Experience in handling team escalation’s * Experience in handling Internal/External clients. Ability to deal demanding client expectations. * Must be able to use experience to identify possible issues before they arise and to be pro-active in resolving such issues. * Must have the ability to multi-task by taking on extra ad-hoc tasks without letting the day-to-day tasks suffer. * Ability to work independently within a team environment. * Hands on experience in using Microsoft Office Tools * Minimum bachelor’s degree. **Skills & Competencies:** · Demonstrated high level of written and oral English communication/Interpersonal/negotiation skills to operate with Global Teams. · should be confident, Self-driven, organized, analytical/Problem solving Mindset, able to identify obstacles and find ways to overcome them. · An open and participatory style that encourages creativity, cooperation and sharing of information across different teams. · Flexibility and adaptability to a fast-paced working environment · Should be flexible with work shifts and be ready to work in different shifts with short notice. · Ability to review & authorize process improvement ideas from the team and facilitate implementation. · Possess Good Presentation Skills · Periodic review of Process and Control documents and its maintenance ** _Education:_** * Bachelor’s/University degree or equivalent experience This job description provides a high-level review of the types of work performed. Other job-related duties may be assigned as required. \\------------------------------------------------------ ## **Job Family Group:** Technology \\------------------------------------------------------ ## **Job Family:** Infrastructure \\------------------------------------------------------ ## **Time Type:** Full time \\------------------------------------------------------ ## **Most Relevant Skills** Please see the requirements listed above. \\------------------------------------------------------ ## **Other Relevant Skills** For complementary skills, please see above and/or contact the recruiter. \\------------------------------------------------------ _Citi is an equal opportunity employer, and qualified candidates will receive consideration without regard to their race, color, religion, sex, sexual orientation, gender identity, national origin, disability, status as a protected veteran, or any other characteristic protected by law._ __ _If you are a person with a disability and need a reasonable accommodation to use our search tools and/or apply for a career opportunity review_ _[Accessibility at Citi](https://www.citigroup.com/citi/accessibility/application-accessibility.htm)._ _View Citi’s[EEO Policy Statement](https://www.citigroup.com/global/eeo-aa-policy) and the [Know Your Rights](https://www.eeoc.gov/sites/default/files/2023-06/22-088_EEOC_KnowYourRights6.12ScreenRdr.pdf) poster._", "summaryDescription" : "Officer-Identity & Access Management Infrastructure Analyst at Citi", "postedDate" : "2026-06-10T21:16:21.504", "createdAt" : "2026-06-14T21:16:21.456", "lastUpdated" : "2026-06-16T01:06:18.241", "ingestTimestamp" : "2026-06-14T21:16:21.456", "mongoId" : "6a2eb32b74d8ee00a0e7dec7", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://citi.wd5.myworkdayjobs.com/2/job/1124-SHIVAJI-GARDENS-MOONLI/Officer-Identity---Access-Management-Infrastructure-Analyst_26964840-1", "salaryBand" : "200k+", "hasSalary" : false, "allSkills" : [ ], "skillCount" : 0, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "mid", "dataQualityScore" : 0.7777778, "_score" : 950.94476, "daysOld" : 5, "hasLocation" : true, "hasGeo" : false, "llmIndustry" : "Banking", "llmIndustryConfidence" : 0.95 }, { "id" : "6a2ab57874d8ee00a06dd0d6", "title" : "Senior Staff Software Engineer – Identity & Access Management Platform", "company" : "Kaseya", "industry" : "IT Management", "salary" : { "min" : 165000.0, "max" : 230000.0, "currency" : "CAD", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for Senior Staff Software Engineer in Canada, adjusted for the SaaS industry and remote work." }, "location" : "Canada - Remote", "locations" : [ "Canada - Remote" ], "timestamp" : "2026-06-14T21:41:46.905", "fingerprint" : "2a25ca25d936deb9e06e69f68a4f5d9b1067820b49e5459ea1fc3122aa040565", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://www.kaseya.com/careers/jobs/id/6017310004/?gh_jid=6017310004", "externalId" : "6017310004", "industryFunction" : { }, "structuredLocations" : [ { "country" : "Canada", "continent" : "na", "workMode" : "remote" } ], "locationText" : "Canada", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "technicalSkills" : "OAuth 2.0, OpenID Connect, SAML, JWTs, MFA, SSO", "professionalSkills" : [ "Platform architecture", "Identity governance", "Technical leadership" ], "hardSkillsList" : [ "Authentication", "Authorization", "Identity management" ], "softSkillsList" : [ "Accountability", "Adaptability", "Urgency", "Leadership" ], "hardSkills" : [ { "name" : "Authentication", "level" : "intermediate" }, { "name" : "Authorization", "level" : "intermediate" }, { "name" : "Identity management", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Accountability" }, { "name" : "Adaptability" }, { "name" : "Urgency" }, { "name" : "Leadership" } ], "teamCollaboration" : "Cross-functional teams; Engineering organizations; Security teams; Compliance teams; Product teams", "domainKnowledge" : "Identity and Access Management; Authentication; Authorization; Identity governance; RBAC; ABAC; Multi-tenant environments; Machine identities; Secrets management; Workload authentication; Cloud-based environments; SaaS environments; SOC 2; ISO 27001; HIPAA; PCI-DSS; NIST", "domainList" : [ "identity-and-access-management", "authentication", "authorization", "identity-governance", "rbac", "abac", "multi-tenant-environments", "machine-identities", "secrets-management", "workload-authentication", "cloud-based-environments", "saas-environments", "soc-2", "iso-27001", "hipaa", "pci-dss", "nist" ], "domainSpecificKnowledge" : [ "Identity and Access Management", "Authentication", "Authorization", "Identity governance", "RBAC", "ABAC", "Multi-tenant environments", "Machine identities", "Secrets management", "Workload authentication", "Cloud-based environments", "SaaS environments", "SOC 2", "ISO 27001", "HIPAA", "PCI-DSS", "NIST" ], "toolProficiency" : [ "Zitadel", "Keycloak", "Authentik", "Okta", "Auth0", "Ping Identity", "Microsoft Entra ID", "Google Workspace", "Active Directory", "Open Policy Agent", "Cedar" ], "qualificationsBasic" : "10+ years software engineering experience, Experience building distributed systems, Experience building platform services, Experience designing IAM solutions, Experience implementing IAM solutions, Experience designing authentication solutions, Experience implementing authentication solutions, Experience designing authorization solutions, Experience implementing authorization solutions, Experience designing identity governance solutions, Experience implementing identity governance solutions, Experience with OAuth 2.0, Experience with OpenID Connect, Experience with SAML, Experience with JWTs, Experience with MFA, Experience with enterprise SSO, Experience implementing enterprise IAM platforms, Experience integrating enterprise IAM platforms, Experience designing secure services, Experience designing scalable services, Experience in cloud-based environments, Experience in SaaS environments", "qualificationsPreferred" : "Experience designing multi-tenant identity platforms, Experience designing delegated administration models, Experience with RBAC, Experience with ABAC, Experience with policy-based authorization, Experience with entitlement management, Experience integrating enterprise identity providers, Experience with policy engines, Experience supporting machine identities, Experience supporting secrets management, Experience supporting workload authentication, Experience leading large-scale platform migrations, Experience leading modernization initiatives, Experience supporting SOC 2 compliance, Experience supporting ISO 27001 compliance, Experience supporting HIPAA compliance, Experience supporting PCI-DSS compliance, Experience supporting NIST compliance", "remoteFriendly" : true, "workSiteFlexibility" : "Remote", "rawDescription" : "About Kaseya Kaseya is the leading provider of AI-powered IT management and cybersecurity software, serving Managed Service Providers (MSPs) and internal IT organizations worldwide. Our comprehensive platform helps organizations efficiently manage, secure, and automate their IT environments, driving operational efficiency and long-term business success. Backed by Insight Partners, a leading global software investor, Kaseya has experienced sustained double-digit growth and continues to expand its global footprint. Today, Kaseya supports customers in more than 20 countries and manages over 15 million endpoints worldwide. Founded in 2000, Kaseya has built a culture centered around innovation, accountability, and results. We are a high-growth, high-performance organization that values individuals who are driven, adaptable, and committed to delivering exceptional outcomes for our customers and teammates alike. At Kaseya, success comes from embracing challenges, moving with urgency, and continuously raising the bar. Senior Staff Software Engineer – Identity & Access Management Platform Why Kaseya? Join a fast-growing company that’s transforming the IT industry. At Kaseya, you’ll have the opportunity to work with cutting-edge technology, collaborate with a dynamic team, and develop your career in a high impact role. Join the Kaseya growth rocket ship and see how we are #ChangingLives! Job Summary We’re hiring a Senior Staff Software Engineer to lead the design and evolution of Kaseya’s Identity and Access Management (IAM) platform. This role focuses on building a centralized identity foundation supporting authentication, authorization, governance, and compliance across multiple products and business domains. You will provide technical leadership for platform architecture, drive adoption across engineering organizations, and deliver secure, scalable identity services that support customers, employees, partners, APIs, and machine identities. Roles & Responsibilities Define architecture and technical direction for the IAM platform across multiple products and services Lead design and implementation of authentication, authorization, and identity governance capabilities Build and operate core IAM platform services, APIs, and integrations Drive platform adoption and migration initiatives across engineering teams Design solutions supporting RBAC, ABAC, delegated administration, and multi-tenant environments Partner with Security, Compliance, and Product teams to meet governance and regulatory requirements Lead architecture reviews and technical design discussions for identity-related initiatives Mentor engineers and establish engineering standards for identity platform development Required Qualifications 10+ years of software engineering experience building distributed systems or platform services Experience designing and implementing IAM, authentication, authorization, or identity governance solutions Experience with OAuth 2.0, OpenID Connect (OIDC), SAML, JWTs, MFA, and enterprise SSO Experience implementing or integrating enterprise IAM platforms (e.g., Zitadel, Keycloak, Authentik, Okta, Auth0, Ping Identity) Experience designing secure, scalable services in cloud-based or SaaS environments Preferred Qualifications Experience designing multi-tenant identity platforms or delegated administration models Experience with RBAC, ABAC, policy-based authorization, or entitlement management Experience integrating enterprise identity providers such as Microsoft Entra ID, Okta, Google Workspace, or Active Directory Experience with policy engines such as Open Policy Agent (OPA) or Cedar Experience supporting machine identities, secrets management, or workload authentication Experience leading large-scale platform migrations or modernization initiatives Experience supporting compliance requirements such as SOC 2, ISO 27001, HIPAA, PCI-DSS, or NIST Additional information Kaseya provides equal employment opportunity to all employees and applicants without regard to race, religion, age, ancestry, gender, sex, sexual orientation, national origin, citizenship status, physical or mental disability, veteran status, marital status, or any other characteristic protected by applicable law.", "summaryDescription" : "Senior Staff Software Engineer – Identity & Access Management Platform at Kaseya", "postedDate" : "2026-06-11T19:32:37.442", "createdAt" : "2026-06-11T19:32:37.442", "lastUpdated" : "2026-06-14T21:41:46.905", "ingestTimestamp" : "2026-06-11T19:32:37.442", "mongoId" : "6a2ab57874d8ee00a06dd0d6", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "150k-200k", "hasSalary" : false, "allSkills" : [ "Authentication", "Authorization", "Identity management", "Accountability", "Adaptability", "Urgency", "Leadership", "Platform architecture", "Identity governance", "Technical leadership", "Identity and Access Management", "RBAC", "ABAC", "Multi-tenant environments", "Machine identities", "Secrets management", "Workload authentication", "Cloud-based environments", "SaaS environments", "SOC 2", "ISO 27001", "HIPAA", "PCI-DSS", "NIST", "Zitadel", "Keycloak", "Authentik", "Okta", "Auth0", "Ping Identity", "Microsoft Entra ID", "Google Workspace", "Active Directory", "Open Policy Agent", "Cedar" ], "skillCount" : 35, "jobCategory" : "other", "jobSubcategory" : "platform", "dataQualityScore" : 0.8888889, "_score" : 926.483, "daysOld" : 3, "hasLocation" : true, "hasGeo" : false, "llmIndustry" : "IT Management" }, { "id" : "6a2b31c774d8ee00a0787ea2", "title" : "Senior Manager, Value and Access Solutions", "company" : "Cardinal Health", "industry" : "Healthcare", "salary" : { "min" : 105100.0, "max" : 135090.0, "currency" : "USD", "frequency" : "yearly" }, "location" : "US-Nationwide-FIELD", "locations" : [ "US-Nationwide-FIELD", "United States of America" ], "timestamp" : "2026-06-14T23:19:05.403", "fingerprint" : "49b8cd3674e2927efb206e49b9bdf874eebb677f068197a5629d182c2051ef0f", "source" : "workday", "language" : "en", "applyUrl" : "https://cardinalhealth.wd1.myworkdayjobs.com/EXT/job/US-Nationwide-FIELD/Senior-Manager--Value-and-Access-Solutions_20181528", "externalId" : "20181528", "industryFunction" : { }, "locationPoint" : "49.1,1.96667", "structuredLocations" : [ { "country" : "United States", "continent" : "na", "workMode" : "onsite" } ], "locationText" : "United States", "employmentType" : "FULL_TIME", "minimumEducation" : "Bachelor's", "experienceMinYears" : 3, "experienceMaxYears" : 5, "experienceLevel" : "Manager", "professionalSkills" : [ "Payer strategy", "Go-to-market content", "Manufacturer deliverables", "HEOR evidence needs", "Claims analysis", "Reimbursement analysis", "Business cases", "Solutions updates", "Roadmap development", "Internal briefs", "Executive updates", "Data visualization", "Visual storytelling" ], "hardSkillsList" : [ "Data analysis", "Data visualization" ], "hardSkills" : [ { "name" : "Data analysis", "level" : "intermediate" }, { "name" : "Data visualization", "level" : "intermediate" } ], "majorSkills" : "Market access, Payer strategy", "majorSkillsList" : [ "Market access", "Payer strategy" ], "coreResponsibilities" : "Support shaping payer access solutions, Develop marketing materials for payer solutions, Pitch payer access offering, Work with RWE and Analytics & Insights teams, Deliver strategic recommendations to clients, Deliver strategic recommendations to leadership, Partner closely with sales teams, Build content for RFPs, Build content for pitches, Build content for manufacturer engagements, Contribute to business cases, Contribute to solutions updates, Contribute to ATS roadmap development, Convert insights into internal briefs, Convert insights into executive updates, Develop compelling materials for internal audiences, Develop compelling materials for external audiences, Ensure high-quality data analysis development, Ensure high-quality data visualization, Ensure high-quality visual storytelling, Present data analyses to partners, Present data analyses to leaders, Present recommendations to partners, Present recommendations to leaders", "teamCollaboration" : "Cross-functional partners; Sales teams; Internal leadership; External manufacturer audiences", "projectManagementSkills" : [ "Project management", "Workstreams", "Analytics" ], "domainKnowledge" : "Cell & gene therapies; U.S. payer dynamics; Reimbursement processes; Advanced therapies", "domainList" : [ "cell-gene-therapies", "u-s-payer-dynamics", "reimbursement-processes", "advanced-therapies" ], "domainSpecificKnowledge" : [ "Cell & gene therapies", "U.S. payer dynamics", "Reimbursement processes", "Advanced therapies" ], "communicationSkills" : "Presentation skills; Communication skills; Storytelling", "problemSolvingSkills" : "Actionable insights", "specialRequirements" : "Travel as needed", "qualificationsBasic" : "BA, BS or equivalent experience, 3-5 years experience biopharma commercialization, 3-5 years experience market access, 3-5 years experience HEOR consulting, 1+ years cell & gene therapy market experience, Direct experience working with payers, Direct experience working with specialty pharmacies, Direct experience working with PBMs, Direct experience working with health systems, Understanding of U.S. payer dynamics, Understanding of reimbursement processes, Understanding of coverage policies, Understanding of financial/access barriers for advanced therapies, Experience developing payer strategy, Experience developing HEOR deliverables, Experience in customer-facing roles, Ability to analyze complex data sets, Experience managing project components, Experience with workstream ownership, Experience with analytics in matrixed environment, Ability to travel as needed", "qualificationsPreferred" : "PharmD or other advanced degree preferred", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "**_Job Description_** **What Product or Services Marketing contributes to Cardinal Health** Product & Solutions Marketing defines product and market strategy, including customer need identification, market research, solution design, positioning, pricing, promotion, branding, and distribution to drive customer loyalty and profitability. Within Advanced Therapy Solutions (ATS), the Senior Manager, Value & Access Solutions plays a key role in shaping and commercializing payer, evidence, and reimbursement-focused offerings that support biopharma manufacturers developing cell and gene therapies (CGT). This role is ideal for a strategic, execution‑oriented professional who can translate complex CGT market access dynamics into actionable payer strategies, compelling go‑to‑market content, and manufacturer-ready deliverables. **Responsibilities** _Payer Solutions Positioning & Commercial Development_ * Support the Director of Value & Access Solutions in shaping payer access solutions based on evolving CGT landscape, payer policy shifts, HEOR evidence needs, and manufacturer feedback * Develop marketing materials for payer value and access solutions _Payer Value and Access Solutions Execution_ * Pitch payer access offering to biopharma manufacturers * Work with RWE and Analytics & Insights teams with claims, reimbursement, and health economics data analyses * Deliver strategic recommendations and deliverables to biopharma clients and senior leadership _Cross-Functional Collaboration_ * Partner closely with sales teams to build content for RFPs, pitches, and manufacturer engagements, ensuring alignment to clinical profiles, launch strategy, and access challenges * Contribute to business cases, solutions updates, and ATS roadmap development * Convert insights into internal briefs and executive updates to inform team decision-making _Communication, Storytelling & Deliverable Excellence_ * Develop clear, compelling materials for internal leadership and external manufacturer audiences * Ensure high-quality data analysis development, data visualization, and visual storytelling * Present data analyses and recommendations to cross-functional partners and leaders **Qualifications** * BA, BS or equivalent experience in related field; PharmD or other advanced degree preferred * 3-5 years of experience in biopharma commercialization, market access and / or HEOR consulting * 1+ years of experience in the cell & gene therapy market strongly preferred * Direct experience working with or consulting with payers, specialty pharmacies, PBMs, and/or health systems * Strong understanding of U.S. payer dynamics, reimbursement processes, coverage policies, and financial/access barriers for advanced therapies, including CGTs * Experience developing payer strategy & HEOR deliverables for manufacturers (e.g., access strategy content, payer insights decks, claims analyses, value narratives) * Experience in customer-facing roles with strong presentation and communication skills * Ability to analyze complex data sets and translate into actionable insights * Experience in managing components of projects, ownership of workstreams and/or analytics in a highly matrixed environment * Collaborative and flexible team player * Ability to travel as needed **What is expected of you and others at this level** * Applies knowledge and understanding of concepts, principles, and technical capabilities to manage a wide variety of projects * Participates in the development of policies and procedures to achieve specific goals * Recommends new practices, processes, metrics, or models * Works on or may lead complex projects of large scope * Projects may have significant and long-term impact * Provides solutions which may set precedent * Independently determines method for completion of new projects * Receives guidance on overall project objectives * Acts as a mentor to less experienced colleagues Anticipated salary range: $105,100 - $135,090 Bonus eligible: Yes Benefits: Cardinal Health offers a wide variety of benefits and programs to support health and well-being. * Medical, dental and vision coverage * Paid time off plan * Health savings account (HSA) * 401k savings plan * Access to wages before pay day with myFlexPay * Flexible spending accounts (FSAs) * Short- and long-term disability coverage * Work-Life resources * Paid parental leave * Healthy lifestyle programs Application window anticipated to close: 07/15/2026 *if interested in opportunity, please submit application as soon as possible. The salary range listed is an estimate. Pay at Cardinal Health is determined by multiple factors including, but not limited to, a candidate’s geographical location, relevant education, experience and skills and an evaluation of internal pay equity. _Candidates who are back-to-work, people with disabilities, without a college degree, and Veterans are encouraged to apply.___ _Cardinal Health supports an inclusive workplace that values diversity of thought, experience and background. We celebrate the power of our differences to create better solutions for our customers by ensuring employees can be their authentic selves each day. Cardinal Health is an Equal Opportunity/Affirmative Action employer. All qualified applicants will receive consideration for employment without regard to race, religion, color, national origin, ancestry, age, physical or mental disability, sex, sexual orientation, gender identity/expression, pregnancy, veteran status, marital status, creed, status with regard to public assistance, genetic status or any other status protected by federal, state or local law._ _To read and review this privacy notice click_[here](https://www.cardinalhealth.com/content/dam/corp/email/documents/corp/cardinal-health-online-application-privacy-policy.pdf)", "summaryDescription" : "Senior Manager, Value and Access Solutions at Cardinal Health. Skills: Market access, Payer strategy. Support shaping payer access solutions. Develop marketing materials for payer solutions", "postedDate" : "2026-06-12T04:25:19.851", "createdAt" : "2026-06-12T04:25:19.681", "lastUpdated" : "2026-06-14T23:19:05.403", "ingestTimestamp" : "2026-06-12T04:25:19.681", "mongoId" : "6a2b31c774d8ee00a0787ea2", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://cardinalhealth.wd1.myworkdayjobs.com/EXT/job/US-Nationwide-FIELD/Senior-Manager--Value-and-Access-Solutions_20181528", "salaryAnnualMin" : 105100, "salaryAnnualMax" : 135090, "salaryBand" : "100k-150k", "hasSalary" : true, "allSkills" : [ "Data analysis", "Data visualization", "Market access", "Payer strategy", "Go-to-market content", "Manufacturer deliverables", "HEOR evidence needs", "Claims analysis", "Reimbursement analysis", "Business cases", "Solutions updates", "Roadmap development", "Internal briefs", "Executive updates", "Visual storytelling", "Project management", "Workstreams", "Analytics", "Cell & gene therapies", "U.S. payer dynamics", "Reimbursement processes", "Advanced therapies" ], "skillCount" : 22, "jobCategory" : "other", "seniorityLevel" : "manager", "dataQualityScore" : 1.0, "_score" : 918.8974, "daysOld" : 2, "hasLocation" : true, "hasGeo" : false, "llmIndustry" : "Healthcare" }, { "id" : "6a2ab57874d8ee00a06dd0d4", "title" : "Senior Staff Software Engineer – Identity & Access Management Platform", "company" : "Kaseya", "industry" : "IT management and cybersecurity software", "salary" : { "min" : 175000.0, "max" : 245000.0, "currency" : "CAD", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for Senior Staff Software Engineer in Canada, adjusted for the SaaS industry and remote work." }, "location" : "Canada - Remote", "locations" : [ "Canada - Remote" ], "timestamp" : "2026-06-14T21:09:44.034", "fingerprint" : "7b087657bfb2cb92a87d63a5d6b09cc6de0883849d180d499455379d9af55f31", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://www.kaseya.com/careers/jobs/id/6014449004/?gh_jid=6014449004", "externalId" : "6014449004", "industryFunction" : { }, "structuredLocations" : [ { "country" : "Canada", "continent" : "na", "workMode" : "remote" } ], "locationText" : "Canada", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "technicalSkills" : "OAuth 2.0, OpenID Connect, SAML, JWTs, MFA, SSO, RBAC, ABAC, API", "professionalSkills" : [ "Identity governance", "Platform architecture", "Technical leadership", "SaaS environments", "Cloud-based environments" ], "hardSkillsList" : [ "Authentication", "Authorization", "Identity governance", "RBAC", "ABAC", "Delegated administration", "Multi-tenant environments", "Machine identities", "Secrets management", "Workload authentication" ], "softSkillsList" : [ "Accountability", "Adaptability", "Mentoring" ], "hardSkills" : [ { "name" : "Authentication", "level" : "intermediate" }, { "name" : "Authorization", "level" : "intermediate" }, { "name" : "Identity governance", "level" : "intermediate" }, { "name" : "RBAC", "level" : "intermediate" }, { "name" : "ABAC", "level" : "intermediate" }, { "name" : "Delegated administration", "level" : "intermediate" }, { "name" : "Multi-tenant environments", "level" : "intermediate" }, { "name" : "Machine identities", "level" : "intermediate" }, { "name" : "Secrets management", "level" : "intermediate" }, { "name" : "Workload authentication", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Accountability" }, { "name" : "Adaptability" }, { "name" : "Mentoring" } ], "majorSkills" : "Platform architecture, Secure services", "majorSkillsList" : [ "Platform architecture", "Secure services" ], "coreResponsibilities" : "Define architecture for IAM platform, Define technical direction for IAM platform, Lead design of authentication capabilities, Lead design of authorization capabilities, Lead design of identity governance capabilities, Build core IAM platform services, Operate core IAM platform services, Build IAM platform APIs, Operate IAM platform APIs, Build IAM platform integrations, Operate IAM platform integrations, Drive platform adoption initiatives, Drive platform migration initiatives, Design solutions for RBAC, Design solutions for ABAC, Design solutions for delegated administration, Design solutions for multi-tenant environments, Partner with Security teams, Partner with Compliance teams, Partner with Product teams, Meet governance requirements, Meet regulatory requirements, Lead architecture reviews, Lead technical design discussions", "teamCollaboration" : "Engineering organizations; Security teams; Compliance teams; Product teams", "domainKnowledge" : "Identity and Access Management; Cloud-native architecture; SaaS environments; Machine identities; Secrets management; Workload authentication; SOC 2; ISO 27001; HIPAA; PCI-DSS; NIST", "domainList" : [ "identity-and-access-management", "cloud-native-architecture", "saas-environments", "machine-identities", "secrets-management", "workload-authentication", "soc-2", "iso-27001", "hipaa", "pci-dss", "nist" ], "domainSpecificKnowledge" : [ "Identity and Access Management", "Cloud-native architecture", "SaaS environments", "Machine identities", "Secrets management", "Workload authentication", "SOC 2", "ISO 27001", "HIPAA", "PCI-DSS", "NIST" ], "toolProficiency" : [ "Zitadel", "Keycloak", "Authentik", "Okta", "Auth0", "Ping Identity", "Microsoft Entra ID", "Google Workspace", "Active Directory", "Open Policy Agent", "Cedar" ], "qualificationsBasic" : "10+ years software engineering experience, Experience building distributed systems, Experience building platform services, Experience designing IAM solutions, Experience implementing IAM solutions, Experience designing authentication solutions, Experience implementing authentication solutions, Experience designing authorization solutions, Experience implementing authorization solutions, Experience designing identity governance solutions, Experience implementing identity governance solutions, Experience with OAuth 2.0, Experience with OpenID Connect, Experience with SAML, Experience with JWTs, Experience with MFA, Experience with enterprise SSO, Experience implementing enterprise IAM platforms, Experience integrating enterprise IAM platforms, Experience designing secure services, Experience designing scalable services, Experience in cloud-based environments, Experience in SaaS environments", "qualificationsPreferred" : "Experience designing multi-tenant identity platforms, Experience designing delegated administration models, Experience with RBAC, Experience with ABAC, Experience with policy-based authorization, Experience with entitlement management, Experience integrating enterprise identity providers, Experience supporting machine identities, Experience supporting secrets management, Experience supporting workload authentication, Experience leading platform migrations, Experience leading platform modernization, Experience supporting SOC 2, Experience supporting ISO 27001, Experience supporting HIPAA, Experience supporting PCI-DSS, Experience supporting NIST", "remoteFriendly" : true, "workSiteFlexibility" : "Remote", "rawDescription" : "About Kaseya Kaseya is the leading provider of AI-powered IT management and cybersecurity software, serving Managed Service Providers (MSPs) and internal IT organizations worldwide. Our comprehensive platform helps organizations efficiently manage, secure, and automate their IT environments, driving operational efficiency and long-term business success. Backed by Insight Partners, a leading global software investor, Kaseya has experienced sustained double-digit growth and continues to expand its global footprint. Today, Kaseya supports customers in more than 20 countries and manages over 15 million endpoints worldwide. Founded in 2000, Kaseya has built a culture centered around innovation, accountability, and results. We are a high-growth, high-performance organization that values individuals who are driven, adaptable, and committed to delivering exceptional outcomes for our customers and teammates alike. At Kaseya, success comes from embracing challenges, moving with urgency, and continuously raising the bar. Senior Staff Software Engineer – Identity & Access Management Platform Why Kaseya? Join a fast-growing company that’s transforming the IT industry. At Kaseya, you’ll have the opportunity to work with cutting-edge technology, collaborate with a dynamic team, and develop your career in a high impact role. Join the Kaseya growth rocket ship and see how we are #ChangingLives! Job Summary We’re hiring a Senior Staff Software Engineer to lead the design and evolution of Kaseya’s Identity and Access Management (IAM) platform. This role focuses on building a centralized identity foundation supporting authentication, authorization, governance, and compliance across multiple products and business domains. You will provide technical leadership for platform architecture, drive adoption across engineering organizations, and deliver secure, scalable identity services that support customers, employees, partners, APIs, and machine identities. Roles & Responsibilities Define architecture and technical direction for the IAM platform across multiple products and services Lead design and implementation of authentication, authorization, and identity governance capabilities Build and operate core IAM platform services, APIs, and integrations Drive platform adoption and migration initiatives across engineering teams Design solutions supporting RBAC, ABAC, delegated administration, and multi-tenant environments Partner with Security, Compliance, and Product teams to meet governance and regulatory requirements Lead architecture reviews and technical design discussions for identity-related initiatives Mentor engineers and establish engineering standards for identity platform development Required Qualifications 10+ years of software engineering experience building distributed systems or platform services Experience designing and implementing IAM, authentication, authorization, or identity governance solutions Experience with OAuth 2.0, OpenID Connect (OIDC), SAML, JWTs, MFA, and enterprise SSO Experience implementing or integrating enterprise IAM platforms (e.g., Zitadel, Keycloak, Authentik, Okta, Auth0, Ping Identity) Experience designing secure, scalable services in cloud-based or SaaS environments Preferred Qualifications Experience designing multi-tenant identity platforms or delegated administration models Experience with RBAC, ABAC, policy-based authorization, or entitlement management Experience integrating enterprise identity providers such as Microsoft Entra ID, Okta, Google Workspace, or Active Directory Experience with policy engines such as Open Policy Agent (OPA) or Cedar Experience supporting machine identities, secrets management, or workload authentication Experience leading large-scale platform migrations or modernization initiatives Experience supporting compliance requirements such as SOC 2, ISO 27001, HIPAA, PCI-DSS, or NIST Additional information Kaseya provides equal employment opportunity to all employees and applicants without regard to race, religion, age, ancestry, gender, sex, sexual orientation, national origin, citizenship status, physical or mental disability, veteran status, marital status, or any other characteristic protected by applicable law.", "summaryDescription" : "Senior Staff Software Engineer – Identity & Access Management Platform at Kaseya. Skills: Platform architecture, Secure services. Define architecture for IAM platform. Define technical direction for IAM platform", "postedDate" : "2026-06-11T20:58:57.573", "createdAt" : "2026-06-11T20:58:57.573", "lastUpdated" : "2026-06-14T21:09:44.034", "ingestTimestamp" : "2026-06-11T20:58:57.573", "mongoId" : "6a2ab57874d8ee00a06dd0d4", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "150k-200k", "hasSalary" : false, "allSkills" : [ "Authentication", "Authorization", "Identity governance", "RBAC", "ABAC", "Delegated administration", "Multi-tenant environments", "Machine identities", "Secrets management", "Workload authentication", "Accountability", "Adaptability", "Mentoring", "Platform architecture", "Secure services", "Technical leadership", "SaaS environments", "Cloud-based environments", "Identity and Access Management", "Cloud-native architecture", "SOC 2", "ISO 27001", "HIPAA", "PCI-DSS", "NIST", "Zitadel", "Keycloak", "Authentik", "Okta", "Auth0", "Ping Identity", "Microsoft Entra ID", "Google Workspace", "Active Directory", "Open Policy Agent", "Cedar" ], "skillCount" : 36, "jobCategory" : "other", "jobSubcategory" : "platform", "dataQualityScore" : 0.8888889, "_score" : 907.85803, "daysOld" : 3, "hasLocation" : true, "hasGeo" : false, "llmIndustry" : "IT management and cybersecurity software" }, { "id" : "6a2a524a74d8ee00a05f959e", "title" : "Staff Engineer (Identity Team)", "company" : "Ebury", "industry" : "FinTech", "salary" : { "min" : 115000.0, "max" : 165000.0, "currency" : "GBP", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Lead Staff Engineer in London, UK, adjusted for the FinTech industry and company size." }, "location" : "London", "locations" : [ "London" ], "timestamp" : "2026-06-13T08:16:29.959", "fingerprint" : "4db67a4317ef38859db0423ddb53045db2cd28780f87b96c77074e87cca61a6d", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://ebury.com/company/careers/job?gh_jid=4889165101", "externalId" : "4889165101", "industryFunction" : { }, "structuredLocations" : [ { "city" : "London", "country" : "United Kingdom", "continent" : "eu", "source" : "llm", "workMode" : "hybrid", "geo" : "51.5074456,-0.1277653" } ], "locationText" : "London, United Kingdom", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "technicalSkills" : "Python, Java, Go, AWS, GCP, Azure, Docker, Kubernetes", "professionalSkills" : [ "Software design", "Architectural design", "Identity management", "Access control", "Authorization policies" ], "hardSkillsList" : [ "Data structures", "Algorithms", "Complexity analysis", "Authentication techniques" ], "softSkillsList" : [ "Leadership", "Mentoring" ], "hardSkills" : [ { "name" : "Data structures", "level" : "intermediate" }, { "name" : "Algorithms", "level" : "intermediate" }, { "name" : "Complexity analysis", "level" : "intermediate" }, { "name" : "Authentication techniques", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Leadership" }, { "name" : "Mentoring" } ], "majorSkills" : "Identity, Access Management, Authorization", "majorSkillsList" : [ "Identity", "Access Management", "Authorization" ], "coreResponsibilities" : "Design software solutions, Develop software solutions, Test software solutions, Deploy software solutions, Collaborate with cross-functional teams, Deliver robust features, Deliver products, Participate in software development lifecycle, Contribute to technical discussions, Contribute to architectural design reviews, Uphold engineering best practices, Enhance engineering best practices, Leverage AI tools", "teamCollaboration" : "Cross-functional teams; Product managers; Designers; Other engineers", "projectManagementSkills" : [ "CI/CD principles" ], "domainKnowledge" : "Identity; Access Management; Fine-Grained Access Control; Authorization policies; Advanced authentication; Unified identity model; Cloud computing; Containerisation; Domain-Driven Design; Centralized architecture", "domainList" : [ "identity", "access-management", "fine-grained-access-control", "authorization-policies", "advanced-authentication", "unified-identity-model", "cloud-computing", "containerisation", "domain-driven-design", "centralized-architecture" ], "domainSpecificKnowledge" : [ "Identity", "Access Management", "Fine-Grained Access Control", "Authorization policies", "Advanced authentication", "Unified identity model", "Cloud computing", "Containerisation", "Domain-Driven Design", "Centralized architecture" ], "communicationSkills" : "Interpersonal skills", "continuousLearning" : "Mentorship; Career progression", "innovationCreativity" : "Innovation", "problemSolvingSkills" : "Problem-solving; Analytical skills", "qualificationsBasic" : "Bachelor's or Master's degree, 7+ years of experience, Experience in fintech, Proficient understanding of core computer science principles, Demonstrable programming ability in at least one modern language, Analytical and problem-solving skills, Excellent communication and interpersonal skills", "qualificationsPreferred" : "Experience building enterprise-level Identity platforms, Experience building Access Management platforms, Experience building Fine-Grained Access Control systems, Experience defining authorization policies, Knowledge of advanced authentication techniques, Experience consolidating fragmented user identities, Familiarity with cloud computing platforms, Familiarity with containerisation technologies, Contributions to open-source projects, Personal portfolio demonstrating technical curiosity, Experience with Domain-Driven Design, Experience standardizing communication patterns", "remoteFriendly" : true, "workSiteFlexibility" : "Hybrid", "rawDescription" : "Ebury helps ambitious businesses unlock global growth, and we take the same approach with our people. We encourage innovation and movement, collaboration and problem-solving, and foster an environment where everyone can feel they belong, are valued, supported and empowered to succeed. If you’re a collaborator who wants to help transform how businesses operate globally, get in touch - we’d love to discuss how Ebury can accelerate your career so you can shape the future. Staff Engineer (Identity Team) London Office - Hybrid: 4 days in the office, 1 day working from home Ebury is seeking exceptional and highly motivated software engineers to join our engineering division in London. This is an opportunity to make a significant impact within a leading FinTech firm. As a Staff Software Engineer, you will be an integral part of our Identity team from your first day, contributing to mission-critical projects. As a Senior Engineer, you will have significant responsibility, agency, and ownership of large, mission-critical services, products, and platforms. We are committed to identifying and nurturing future technical leaders, for those who demonstrate exceptional performance and aptitude, we offer an accelerated path for career progression. What We Offer Competitive salary, performance-based bonus, and a comprehensive benefits package. A structured career development path with dedicated mentorship from senior engineers and clear opportunities for advancement. The opportunity to work on complex, intellectually stimulating projects that have a significant and measurable business impact. A dynamic, inclusive, and high-performance work environment within a leading, high-growth global FinTech company. The opportunity to build and contribute to critical projects from day 1. Key Responsibilities Design, develop, test, and deploy high-quality, scalable software solutions for our global financial platform. Collaborate effectively with cross-functional teams, including product managers, designers, and other engineers, to deliver robust features and products. Participate in the full software development lifecycle, from initial ideation and technical design to deployment and operational maintenance. Contribute to technical discussions and architectural design reviews, helping to shape the future of our technology stack. Uphold and enhance engineering best practices through rigorous code reviews, automated testing, and adherence to continuous integration/deployment (CI/CD) principles. We encourage you to leverage the latest AI tools to augment your skills and accelerate your learning. We champion their responsible use, emphasizing that you must be able to fully understand and own any code or solution you develop. Required Qualifications A Bachelor's or Master's degree in Computer Science, Software Engineering, or a closely related technical discipline, with a strong academic record. You’ll probably have over 7 years of experience as a software engineer writing production-grade code, but competency, attitude, and ability matter more to us than a number. Experience working in fintech or within the financial services industry. Proficient understanding of core computer science principles, including data structures, algorithms, software design, and complexity analysis. Demonstrable programming ability in at least one modern language (e.g., Python, Java, Go, etc). Strong analytical and problem-solving skills, with the ability to approach complex challenges in a structured manner. Excellent communication and interpersonal skills, with a commitment to working effectively within a collaborative team environment. Desirable Attributes Experience building enterprise-level Identity, Access Management (IAM) platforms, Fine-Grained Access Control (FGAC) systems, and defining authorization policies. Knowledge of advanced authentication techniques, such as device binding/attestation, and experience in consolidating fragmented user identities into a unified identity model. Familiarity with cloud computing platforms (e.g., AWS, GCP, Azure) and containerisation technologies (e.g., Docker, Kubernetes). Contributions to open-source projects or a personal portfolio demonstrating technical curiosity and skill. Experience with Domain-Driven Design (DDD) and standardizing communication patterns in a centralized architecture. #LI-AT1 About us Ebury delivers sophisticated, integrated solutions — business accounts, hedging, and financing — on a single platform with a seamless workflow. Our success is built on a simple premise and singular purpose: To help businesses operate and scale globally. Since its founding in 2009, Ebury has always been a fast-growing leader in fintech. Today, we bring together 1,800+ Eburians across nearly 70 cities and we’re always looking to add to our team. At the heart of our offering is a proprietary platform, purpose-built to help businesses seamlessly streamline and manage global cash flow. We focus on continuous product evolution and innovation to build the infrastructure for borderless growth and help our clients scale at every stage. The opportunities at Ebury are as diverse as our people, ranging from business development to engineering roles across our tech pillars. We believe in inclusion. We stand against discrimination in all forms and are against the intolerance of differences that makes us a modern and successful organisation. At Ebury, you can be whoever you want to be and still feel a sense of belonging no matter your story.", "summaryDescription" : "Staff Engineer (Identity Team) at Ebury. Skills: Identity, Access Management, Authorization. Design software solutions. Develop software solutions", "postedDate" : "2026-06-11T17:55:46.366", "createdAt" : "2026-06-11T17:55:46.366", "lastUpdated" : "2026-06-13T08:16:29.959", "ingestTimestamp" : "2026-06-11T17:55:46.366", "mongoId" : "6a2a524a74d8ee00a05f959e", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "100k-150k", "hasSalary" : false, "allSkills" : [ "Data structures", "Algorithms", "Complexity analysis", "Authentication techniques", "Leadership", "Mentoring", "Identity", "Access Management", "Authorization", "Software design", "Architectural design", "Identity management", "Access control", "Authorization policies", "CI/CD principles", "Fine-Grained Access Control", "Advanced authentication", "Unified identity model", "Cloud computing", "Containerisation", "Domain-Driven Design", "Centralized architecture" ], "skillCount" : 22, "jobCategory" : "engineering", "jobSubcategory" : "technology", "dataQualityScore" : 0.8888889, "_score" : 889.16693, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "FinTech" }, { "id" : "6a2176d374d8ee00a0c1af9a", "title" : "Software Development Engineer - AWS Identity Access Management, AWS IAM Propagation Integrity", "company" : "Amazon Development Center U.S., Inc.", "industry" : "Software Development, Cloud Computing", "salary" : { "min" : 143700.0, "max" : 194400.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "Seattle, Washington, USA", "locations" : [ "Seattle, Washington, USA" ], "timestamp" : "2026-06-15T06:43:35.302", "fingerprint" : "c1cede423482415362f9c1fadae2b43885574d4372af8a1b44f68f0e7313c60a", "source" : "amazon", "language" : "en", "applyUrl" : "https://account.amazon.jobs/jobs/10438697/apply", "externalId" : "fbff836c-121f-4c6f-ad1b-f48bcad9f126", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Seattle", "state" : "Washington", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "47.6038321,-122.3300620" } ], "locationText" : "Seattle, Washington, United States", "employmentType" : "FULL_TIME", "minimumEducation" : "Bachelor's", "experienceMinYears" : 3, "experienceMaxYears" : 5, "experienceLevel" : "Mid", "technicalSkills" : "AWS, Machine learning, Artificial intelligence", "professionalSkills" : [ "System design", "Performance engineering", "Scalability engineering" ], "hardSkillsList" : [ "Access control", "Identity management", "Authorization" ], "softSkillsList" : [ "Mentoring" ], "hardSkills" : [ { "name" : "Access control", "level" : "intermediate" }, { "name" : "Identity management", "level" : "intermediate" }, { "name" : "Authorization", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Mentoring" } ], "majorSkills" : "AWS IAM, System design, Software development", "majorSkillsList" : [ "AWS IAM", "System design", "Software development" ], "coreResponsibilities" : "Design systems and services, Implement systems and services, Deploy systems and services, Decompose complex problems, Understand system interdependencies, Understand system limitations", "teamCollaboration" : "Talented teams; Senior engineers; Junior team members", "domainKnowledge" : "Identity management; Access control; Authorization; Cloud security", "domainList" : [ "identity-management", "access-control", "authorization", "cloud-security" ], "domainSpecificKnowledge" : [ "Identity management", "Access control", "Authorization", "Cloud security" ], "continuousLearning" : "Formal mentor search; Work and train together; Annual learning experiences", "innovationCreativity" : "Innovate identity stack; Innovate authentication stack; Innovate authorization stack", "problemSolvingSkills" : "Functionally decompose problems", "qualificationsBasic" : "3+ years software development, 2+ years design or architecture, Programming with one language", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "The Amazon Web Services (AWS) Identity team builds, operates, and innovates the identity, authentication, and authorization stack for the AWS cloud. Our mission is to push the technical boundaries to enable AWS customers to run their business workloads confidently and securely. As part of this mission, we leverage customer obsession and technologies to help customers set appropriate access controls across all their AWS environments. We are seeking a software developer engineer to be part of our team to build solutions on a global scale, own their systems end to end, and influence the direction of technology used by all AWS services around the world. In this role, you will have the opportunity to drive mission critical projects, work with senior and principal engineers, and help mentor more junior team members. As an SDE on our team you will: · Create and collaborate in the design, implementation, and deployment of systems and services · Work and grow with talented teams delivering impactful projects · Functionally decompose complex problems into simple, straight-forward solutions while understanding system interdependencies and limitations · Share your knowledge of the most effective performance, scalability, architecture, and engineering patterns and methods AWS has the most services and more features within those services, than any other cloud provider–from infrastructure technologies like compute, storage, and databases–to emerging technologies, such as machine learning and artificial intelligence, data lakes and analytics, and Internet of Things. Whether its Identity features such as access management and sign on, cryptography, console, builder & developer tools, and even projects like automating all of our contractual billing systems, AWS Platform is always innovating with the customer in mind. The AWS Platform team sustains over 750 million transactions per second. Our team also puts a high value on work-life balance. Striking a healthy balance between your personal and professional life is crucial to your happiness and success here, which is why we aren’t focused on how many hours you spend at work or online. Instead, we’re happy to offer a flexible schedule so you can have a more productive and well-balanced life—both in and outside of work. We have a formal mentor search application that lets you find a mentor that works best for you based on location, job family, job level etc. Your manager can also help you find a mentor or two, because two is better than one. In addition to formal mentors, we work and train together so that we are always learning from one another, and we celebrate and support the career progression of our team members. Here at AWS, we embrace our differences. We are committed to furthering our culture of inclusion. We have ten employee-led affinity groups, reaching 40,000 employees in over 190 chapters globally. We have innovative benefit offerings, and we host annual and ongoing learning experiences, including our Conversations on Race and Ethnicity (CORE) and AmazeCon (gender diversity) conferences. Amazon’s culture of inclusion is reinforced within our 14 Leadership Principles, which remind team members to seek diverse perspectives, learn and be curious, and earn trust. Basic Qualifications: - 3+ years of non-internship professional software development experience - 2+ years of non-internship design or architecture (design patterns, reliability and scaling) of new and existing systems experience - Experience programming with at least one software programming language Preferred Qualifications: - 3+ years of full software development life cycle, including coding standards, code reviews, source control management, build processes, testing, and operations experience - Bachelor's degree in computer science or equivalent Amazon is committed to a diverse and inclusive workplace. Amazon is an equal opportunity employer and does not discriminate on the basis of race, national origin, gender, gender identity, sexual orientation, protected veteran status, disability, age, or other legally protected status. For individuals with disabilities who would like to request an accommodation, please visit https://www.amazon.jobs/en/disability/us. The base salary range for this position is listed below. Your Amazon package will include sign-on payments and restricted stock units (RSUs). Final compensation will be determined based on factors including experience, qualifications, and location. Amazon also offers comprehensive benefits including health insurance (medical, dental, vision, prescription, Basic Life & AD&D insurance and option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage), 401(k) matching, paid time off, and parental leave. Learn more about our benefits at https://amazon.jobs/en/benefits . USA, WA, Seattle - 143,700.00 - 194,400.00 USD annually", "summaryDescription" : "Software Development Engineer - AWS Identity Access Management, AWS IAM Propagation Integrity at Amazon Development Center U.S., Inc.. Skills: AWS IAM, System design, Software development. Design systems and services. Implement systems and services", "postedDate" : "2026-06-13T20:01:16.668", "createdAt" : "2026-06-13T20:01:16.668", "lastUpdated" : "2026-06-15T06:43:35.302", "ingestTimestamp" : "2026-06-13T20:01:16.668", "mongoId" : "6a2176d374d8ee00a0c1af9a", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://account.amazon.jobs/jobs/10438697/apply", "salaryAnnualMin" : 143700, "salaryAnnualMax" : 194400, "salaryBand" : "100k-150k", "hasSalary" : true, "allSkills" : [ "Access control", "Identity management", "Authorization", "Mentoring", "AWS IAM", "System design", "Software development", "Performance engineering", "Scalability engineering", "Cloud security" ], "skillCount" : 10, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Mid", "dataQualityScore" : 1.0, "_score" : 888.11707, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.98 }, { "id" : "6a2db1fb74d8ee00a0c86c9a", "title" : "Senior IAM Identity & Access Management (IAM) Engineer", "company" : "Us And Help Shape The", "industry" : "Technology", "salary" : { "min" : 650000.0, "max" : 950000.0, "currency" : "SEK", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Senior IAM Identity & Access Management (IAM) Engineer in Gothenburg, Sweden, adjusted for the technology industry and full-time employment." }, "location" : "Sweden, Gothenburg", "locations" : [ "Sweden, Gothenburg" ], "timestamp" : "2026-06-16T06:34:04.838", "fingerprint" : "d38f12f7830db9bc116175d3b6211c2961af6af9d28f5202324beeb1ad2595db", "source" : "workday", "language" : "en", "applyUrl" : "https://thomsonreuters.wd5.myworkdayjobs.com/External_Career_Site/job/Sweden-Gothenburg/Senior-IAM-Engineer_JREQ198460", "externalId" : "JREQ198460", "industryFunction" : { }, "locationPoint" : "40.92945,-100.16068", "structuredLocations" : [ { "city" : "Gothenburg", "country" : "Sweden", "continent" : "eu", "source" : "llm", "workMode" : "hybrid", "geo" : "57.7072326,11.9670171" } ], "locationText" : "Gothenburg, Sweden", "employmentType" : "FULL_TIME", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "technicalSkills" : "MEMORITY, Microsoft Entra, Active Directory, LDAP, SAML, OAuth, Kerberos, NTLM, OpenID Connect, OAuth 2.0, RADIUS, API security, JWT tokens", "professionalSkills" : [ "Identity domains", "Authentication", "Authorization", "Access Management", "Attestation", "API security concepts" ], "hardSkillsList" : [ "MFA implementation", "Authentication protocols", "Federate adapter configuration", "Service Provider connections", "Identity Provider connections", "Metadata management", "SSL certificate handling", "Token generation", "Certificate-based authentication" ], "hardSkills" : [ { "name" : "MFA implementation", "level" : "intermediate" }, { "name" : "Authentication protocols", "level" : "intermediate" }, { "name" : "Federate adapter configuration", "level" : "intermediate" }, { "name" : "Service Provider connections", "level" : "intermediate" }, { "name" : "Identity Provider connections", "level" : "intermediate" }, { "name" : "Metadata management", "level" : "intermediate" }, { "name" : "SSL certificate handling", "level" : "intermediate" }, { "name" : "Token generation", "level" : "intermediate" }, { "name" : "Certificate-based authentication", "level" : "intermediate" } ], "majorSkills" : "Microsoft Entra, MEMORITY, SSO", "majorSkillsList" : [ "Microsoft Entra", "MEMORITY", "SSO" ], "coreResponsibilities" : "Administer and implement security across IAM technologies, Configure and troubleshoot Single Sign-On (SSO), Implement OpenID Connect (OIDC) and OAuth 2.0 solutions, Manage and maintain MEMORITY Directory Server, Administer and performance-tune MEMORITY/MSFT EntraID, Integrate, develop, and automate MFA, Configure Memority Federate adapters, Manage Memority Federate connections, Handle SSL certificates, Integrate Memority Access with MemorityFederate, Protect applications using Memority Access Tokens, Integrate with Open AM, Integrate with SiteMinder", "domainKnowledge" : "Identity domains; Authentication; Authorization; Access Management; Attestation; API security", "domainList" : [ "identity-domains", "authentication", "authorization", "access-management", "attestation", "api-security" ], "domainSpecificKnowledge" : [ "Identity domains", "Authentication", "Authorization", "Access Management", "Attestation", "API security" ], "toolProficiency" : [ "MEMORITY Directory Server" ], "continuousLearning" : "Continuous learning; Skill development; Grow professionally", "problemSolvingSkills" : "Troubleshoot SSO; Troubleshoot authentication protocols", "specialRequirements" : "Criminal background check, Credit background check", "qualificationsBasic" : "Proven experience integrating, develop Memority, Automating MFA and authentication protocols, Deep understanding of Identity domains, Experience with Memority Federate, Hands-on experience with Memority Access, Demonstrated experience with API security concepts, Successfully pass an extended background check", "qualificationsPreferred" : "Experience with IAM tech stack, Security patch management for IAM platforms, Background in Unix/Linux environments, Familiarity with Microsoft Active Directory Federation Services (ADFS)", "remoteFriendly" : true, "workSiteFlexibility" : "Hybrid", "rawDescription" : "Pagero has recently joined Thomson Reuters. Together, we are building the world’s largest, open business network. With our cloud-based network, customers can reach any business, anywhere in the world – no matter how many borders their operations may cross. We take care of the technical and regulatory requirements across the entire order-to-cash, purchase-to-pay and freight processes, to give customers data accuracy and security, transparency, and real-time visibility. All this through a single connection. **About the Role** In this opportunity as **Senior IAM Identity & Access Management (IAM) Engineer**, you will: * Administer and implement security across IAM technologies including **product** **MEMORITY, Microsoft Entra, Active Directory, Access Governance** , and **LDAP directories** * Configure and troubleshoot **Single Sign-On (SSO)** for enterprise applications using SAML, OAuth, Kerberos, and NTLM * Implement **OpenID Connect (OIDC)** and **OAuth 2.0** solutions using MEMORITY tools * Manage and maintain **MEMORITY Directory Server** , including cluster management and timely replication of configuration changes across Test and Production environments * Administer and performance-tune **MEMORITY/MSFT EntraID** to support high-traffic enterprise workloads * Strong hands-on experience with **SAML 2.0, OAuth 2.0, OpenID Connect (OIDC), Kerberos, NTLM, LDAP,** and **RADIUS** **About You** You’re a fit for the role of **Senior IAM Identity & Access Management (IAM) Engineer** if you have the following required qualifications: * Proven experience integrating, develop Memority, and automating **MFA and authentication protocols** * Deep understanding of Identity domains: Authentication, Authorization, Access Management, and Attestation * Experience with **Memority Federate** including adapter configuration, Service Provider/Identity Provider connections, metadata management, and SSL certificate handling * Hands-on experience with **Memority Access** integration with MemorityFederate to protect applications using Memority Access Tokens * Demonstrated experience with **API security** concepts, including integration with Open AM, SiteMinder, OAuth 2.0, JWT tokens, and certificate-based * Successfully pass an extended background check (criminal and credit). Additional preferred qualifications include: * Experience with IAM tech stack and the security patch management for IAM platforms * Background in Unix/Linux environments * Familiarity with Microsoft Active Directory Federation Services (ADFS) #LI-LT1 **What’s in it For You?** * **Hybrid Work Model:** We’ve adopted a flexible hybrid working environment (2-3 days a week in the office depending on the role) for our office-based roles while delivering a seamless experience that is digitally and physically connected. * **Flexibility & Work-Life Balance:** Flex My Way is a set of supportive workplace policies designed to help manage personal and professional responsibilities, whether caring for family, giving back to the community, or finding time to refresh and reset. This builds upon our flexible work arrangements, including work from anywhere for up to 8 weeks per year, empowering employees to achieve a better work-life balance. * **Career Development and Growth:** By fostering a culture of continuous learning and skill development, we prepare our talent to tackle tomorrow’s challenges and deliver real-world solutions. Our Grow My Way programming and skills-first approach ensures you have the tools and knowledge to grow, lead, and thrive in an AI-enabled future. * **Industry Competitive Benefits:** We offer comprehensive benefit plans to include flexible vacation, two company-wide Mental Health Days off, access to the Headspace app, retirement savings, tuition reimbursement, employee incentive programs, and resources for mental, physical, and financial wellbeing. * **Culture:** Globally recognized, award-winning reputation for inclusion and belonging, flexibility, work-life balance, and more. We live by our values: Obsess over our Customers, Compete to Win, Challenge (Y)our Thinking, Act Fast / Learn Fast, and Stronger Together. * **Social Impact:** Make an impact in your community with our Social Impact Institute. We offer employees two paid volunteer days off annually and opportunities to get involved with pro-bono consulting projects and Environmental, Social, and Governance (ESG) initiatives. * **Making a Real-World Impact:** We are one of the few companies globally that helps its customers pursue justice, truth, and transparency. Together, with the professionals and institutions we serve, we help uphold the rule of law, turn the wheels of commerce, catch bad actors, report the facts, and provide trusted, unbiased information to people all over the world. **About Us** Thomson Reuters informs the way forward by bringing together the trusted content and technology that people and organizations need to make the right decisions. We serve professionals across legal, tax, accounting, compliance, government, and media. Our products combine highly specialized software and insights to empower professionals with the data, intelligence, and solutions needed to make informed decisions, and to help institutions in their pursuit of justice, truth, and transparency. Reuters, part of Thomson Reuters, is a world leading provider of trusted journalism and news. We are powered by the talents of 26,000 employees across more than 70 countries, where everyone has a chance to contribute and grow professionally in flexible work environments. At a time when objectivity, accuracy, fairness, and transparency are under attack, we consider it our duty to pursue them. Sound exciting? Join us and help shape the industries that move society forward. As a global business, we rely on the unique backgrounds, perspectives, and experiences of all employees to deliver on our business goals. To ensure we can do that, we seek talented, qualified employees in all our operations around the world regardless of race, color, sex/gender, including pregnancy, gender identity and expression, national origin, religion, sexual orientation, disability, age, marital status, citizen status, veteran status, or any other protected classification under applicable law. Thomson Reuters is proud to be an Equal Employment Opportunity Employer providing a drug-free workplace. We also make reasonable accommodations for qualified individuals with disabilities and for sincerely held religious beliefs in accordance with applicable law. More information on requesting an accommodation [_here_](https://www.thomsonreuters.com/en/careers/our-commitment-to-candidates). Learn more on how to protect yourself from fraudulent job postings [_here_](https://www.thomsonreuters.com/en/careers/protect-yourself-from-fraudulent-job-postings). More information about Thomson Reuters can be found on [_thomsonreuters.com._](https://www.thomsonreuters.com/en)", "summaryDescription" : "Senior IAM Identity & Access Management (IAM) Engineer at Us And Help Shape The. Skills: Microsoft Entra, MEMORITY, SSO. Administer and implement security across IAM technologies. Configure and troubleshoot Single Sign-On (SSO)", "postedDate" : "2026-06-10T19:02:10.194", "createdAt" : "2026-06-14T19:02:10.139", "lastUpdated" : "2026-06-16T06:34:04.838", "ingestTimestamp" : "2026-06-14T19:02:10.139", "mongoId" : "6a2db1fb74d8ee00a0c86c9a", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://thomsonreuters.wd5.myworkdayjobs.com/External_Career_Site/job/Sweden-Gothenburg/Senior-IAM-Engineer_JREQ198460", "salaryBand" : "200k+", "hasSalary" : false, "allSkills" : [ "MFA implementation", "Authentication protocols", "Federate adapter configuration", "Service Provider connections", "Identity Provider connections", "Metadata management", "SSL certificate handling", "Token generation", "Certificate-based authentication", "Microsoft Entra", "MEMORITY", "SSO", "Identity domains", "Authentication", "Authorization", "Access Management", "Attestation", "API security concepts", "API security", "MEMORITY Directory Server" ], "skillCount" : 20, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "senior", "dataQualityScore" : 1.0, "_score" : 883.96027, "daysOld" : 5, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.98 }, { "id" : "69fda4e24c40e2acd1b9972f", "title" : "Systems Development Engineer, Cryptography and Identity Management", "company" : "Amazon Development Center U.S., Inc.", "industry" : "Operations, IT, Support Engineering, System Development Engineering, Cloud Computing", "salary" : { "min" : 151000.0, "max" : 204600.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "Seattle, Washington, USA", "locations" : [ "Seattle, Washington, USA" ], "certifications" : [ "CSSLP" ], "timestamp" : "2026-06-15T06:29:35.718", "fingerprint" : "762a3c24a2e100e1850c6df6f50185871e2d14e9922f67fe22f531fc86c55c7b", "source" : "amazon", "language" : "en", "applyUrl" : "https://account.amazon.jobs/jobs/10413714/apply", "externalId" : "c4830754-769e-44d1-b37d-230bf900f4bc", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Seattle", "state" : "Washington", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "47.6038321,-122.3300620" } ], "locationText" : "Seattle, Washington, United States", "employmentType" : "FULL_TIME", "technicalSkills" : "C++, C#, Java, Python, Golang, PowerShell, Ruby, Unix, Linux, Windows, NoSQL", "professionalSkills" : [ "Systems design", "Identity management", "Web services security", "Service engineering" ], "hardSkillsList" : [ "Cryptography", "Federation" ], "softSkillsList" : [ "Ownership bias", "Curiosity" ], "hardSkills" : [ { "name" : "Cryptography", "level" : "intermediate" }, { "name" : "Federation", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Ownership bias" }, { "name" : "Curiosity" } ], "majorSkills" : "Cryptography, Identity management, Systems development", "majorSkillsList" : [ "Cryptography", "Identity management", "Systems development" ], "coreResponsibilities" : "Execute projects, Resolve customer issues, Run operations, Work with engineers, Improve processes, Build security systems, Deliver security systems, Operate security systems, Address customer needs, Dive into technical issues, Improve customer experience", "teamCollaboration" : "Internal customers; External customers; World-class engineers; Highly talented engineers; Smartest people; Best engineers; Brightest engineers", "domainKnowledge" : "Cloud computing security; Distributed security systems; Massively scalable systems; Cloud platform", "domainList" : [ "cloud-computing-security", "distributed-security-systems", "massively-scalable-systems", "cloud-platform" ], "domainSpecificKnowledge" : [ "Cloud computing security", "Distributed security systems", "Massively scalable systems", "Cloud platform" ], "continuousLearning" : "Learning experiences; Career development", "innovationCreativity" : "Innovating new ways", "problemSolvingSkills" : "Triage problems", "specialRequirements" : "Maintain TS/SCI clearance, Obtain polygraph clearance", "qualificationsBasic" : "Bachelor's degree or CSSLP, Experience programming modern language, 2+ years designing systems, Knowledge of networking fundamentals, Knowledge of security fundamentals, Knowledge of database fundamentals, Knowledge of operating systems fundamentals, Active TS/SCI security clearance", "qualificationsPreferred" : "1+ years development/programming/scripting experience, Knowledge of engineering practices, Experience leading complex software build", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "We are currently looking for a Systems Development Engineer to join our systems organization. You love to work with internal and external customers to execute projects and resolve issues. You are a believer in the dev-ops model of service engineering, and you are excited to run operations in an environment where developers don’t toss problems over the wall. You are happiest when you are working with empowered, world-class engineers to meet world-class challenges. Finally, with your strong ownership bias, you have an infectious desire to continually improve how things are done. AWS Cryptography and Identity are building and delivering the next generation of cloud computing security. We are innovating new ways of building massively scalable distributed security systems involving identity management, federation, web services security, and much more. We enable our customers to control some of the most sensitive secrets on the Internet. In this role, you will join a team of highly talented engineers operating Cryptography and Identity systems. This is a great opportunity to have direct impact to some of the largest-scaled systems in the world and work with some of the smartest people in the industry, while having a huge impact. A successful systems development engineer joining the team will do much more than write code and triage problems. You will work with Amazon's largest and most demanding customers to address specific needs across a full suite of services. You will dive deep into technical issues and work diligently to improve the customer experience. This is an excellent opportunity to join Amazon's world class technical team in Seattle. You will work with some of the best and brightest engineers and technical managers while also developing your skills and furthering your career within one of the most innovative and progressive technology companies anywhere. Working together on behalf of our customers, we are building the future one innovative product, service, and idea at a time. Are you ready to embrace the challenge? Come build the future with us. This position requires that the candidate selected must currently possess and maintain an active TS/SCI security clearance. The position further requires that, after start, the selected candidate obtain and maintain an active TS/SCI security clearance with polygraph or commensurate clearance for each government agency for which they perform AWS work. About the team Why AWS Amazon Web Services (AWS) is the world’s most comprehensive and broadly adopted cloud platform. We pioneered cloud computing and never stopped innovating — that’s why customers from the most successful startups to Global 500 companies trust our robust suite of products and services to power their businesses. AWS Infrastructure Services (AIS) AWS Infrastructure Services owns the design, planning, delivery, and operation of all AWS global infrastructure. In other words, we’re the people who keep the cloud running. We support all AWS data centers and all of the servers, storage, networking, power, and cooling equipment that ensure our customers have continual access to the innovation they rely on. We work on the most challenging problems, with thousands of variables impacting the supply chain — and we’re looking for talented people who want to help. Inclusive Team Culture Here at AWS, it’s in our nature to learn and be curious. Our employee-led affinity groups foster a culture of inclusion that empower us to be proud of our differences. Ongoing events and learning experiences, including our Conversations on Race and Ethnicity (CORE) and AmazeCon conferences, inspire us to never stop embracing our uniqueness. Work/Life Balance We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why we strive for flexibility as part of our working culture. When we feel supported in the workplace and at home, there’s nothing we can’t achieve in the cloud. Mentorship and Career Growth We’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge-sharing, mentorship and other career-advancing resources here to help you develop into a better-rounded professional. Diverse Experiences Amazon values diverse experiences. Even if you do not meet all of the preferred qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences, don’t let it stop you from applying. Basic Qualifications: - Bachelor's degree, or CSSLP (Certified Secure Software Lifecycle Professional) - Experience programming with at least one modern language such as C++, C#, Java, Python, Golang, PowerShell, Ruby - 2+ years of designing or architecting (design patterns, reliability and scaling) of new and existing systems experience - Knowledge of fundamentals of networking, security, databases (relational or NoSQL), operating systems (Unix, Linux, and/or Windows) - Current, active US Government Security Clearance of Top Secret with SCI eligibility or above Preferred Qualifications: - 1+ years of development/programming/scripting language (Python/Java/Bash/Perl) experience - Knowledge of engineering practices and patterns for the full software/hardware/networks development life cycle, including coding standards, code reviews, source control management, build processes, testing, certification, and livesite operations - Experience taking a leading role in building complex software or computing infrastructure that has been successfully delivered to customers Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status. Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner. The base salary range for this position is listed below. Your Amazon package will include sign-on payments and restricted stock units (RSUs). Final compensation will be determined based on factors including experience, qualifications, and location. Amazon also offers comprehensive benefits including health insurance (medical, dental, vision, prescription, Basic Life & AD&D insurance and option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage), 401(k) matching, paid time off, and parental leave. Learn more about our benefits at https://amazon.jobs/en/benefits . USA, WA, Seattle - 151,200.00 - 204,600.00 USD annually", "summaryDescription" : "Systems Development Engineer, Cryptography and Identity Management at Amazon Development Center U.S., Inc.. Skills: Cryptography, Identity management, Systems development. Execute projects. Resolve customer issues", "postedDate" : "2026-06-13T15:54:38.784", "createdAt" : "2026-06-13T15:54:38.784", "lastUpdated" : "2026-06-15T06:29:35.718", "ingestTimestamp" : "2026-06-13T15:54:38.784", "mongoId" : "69fda4e24c40e2acd1b9972f", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://account.amazon.jobs/jobs/10413714/apply", "salaryAnnualMin" : 151000, "salaryAnnualMax" : 204600, "salaryBand" : "150k-200k", "hasSalary" : true, "allSkills" : [ "Cryptography", "Federation", "Ownership bias", "Curiosity", "Identity management", "Systems development", "Systems design", "Web services security", "Service engineering", "Cloud computing security", "Distributed security systems", "Massively scalable systems", "Cloud platform", "CSSLP" ], "skillCount" : 14, "jobCategory" : "operations", "dataQualityScore" : 0.8888889, "_score" : 864.1929, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology" }, { "id" : "69fda4e24c40e2acd1b99728", "title" : "Systems Development Engineer, Cryptography and Identity Management", "company" : "Amazon Development Center U.S., Inc.", "industry" : "Operations, IT, Support Engineering, System Development Engineering, Cloud Computing", "salary" : { "min" : 129000.0, "max" : 174800.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "Seattle, Washington, USA", "locations" : [ "Seattle, Washington, USA" ], "certifications" : [ "CSSLP" ], "timestamp" : "2026-06-15T05:50:08.138", "fingerprint" : "dffc6d1dbd6b53f0cc6dc4ac554cf470d8f4b63880c05b87fac65c4f93a897f2", "source" : "amazon", "language" : "en", "applyUrl" : "https://account.amazon.jobs/jobs/10413723/apply", "externalId" : "d5706870-5c8b-484c-977b-ca87e8e94bd6", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Seattle", "state" : "Washington", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "47.6038321,-122.3300620" } ], "locationText" : "Seattle, Washington, United States", "employmentType" : "FULL_TIME", "technicalSkills" : "C++, C#, Java, Python, Golang, PowerShell, Ruby, Unix, Linux, Windows, NoSQL", "professionalSkills" : [ "Systems development", "Identity management", "Web services security", "DevOps model", "Service engineering" ], "hardSkillsList" : [ "Cryptography", "Federation" ], "softSkillsList" : [ "Ownership bias" ], "hardSkills" : [ { "name" : "Cryptography", "level" : "intermediate" }, { "name" : "Federation", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Ownership bias" } ], "majorSkills" : "Cryptography, Identity Management, Distributed Systems", "majorSkillsList" : [ "Cryptography", "Identity Management", "Distributed Systems" ], "coreResponsibilities" : "Execute projects, Resolve customer issues, Run operations, Work with engineers, Improve processes, Build security systems, Deliver security systems, Operate systems, Dive into technical issues, Improve customer experience", "teamCollaboration" : "Internal customers; External customers; World-class engineers; Technical managers", "projectManagementSkills" : [ "Agile", "Scrum" ], "domainKnowledge" : "Cloud computing security; Massively scalable systems; Relational databases; NoSQL databases; Unix operating systems; Linux operating systems; Windows operating systems", "domainList" : [ "cloud-computing-security", "massively-scalable-systems", "relational-databases", "nosql-databases", "unix-operating-systems", "linux-operating-systems", "windows-operating-systems" ], "domainSpecificKnowledge" : [ "Cloud computing security", "Massively scalable systems", "Relational databases", "NoSQL databases", "Unix operating systems", "Linux operating systems", "Windows operating systems" ], "continuousLearning" : "Mentorship; Career growth", "innovationCreativity" : "Innovating new ways", "problemSolvingSkills" : "Triage problems", "specialRequirements" : "TS/SCI security clearance, SCI clearance with polygraph", "qualificationsBasic" : "Bachelor's degree or CSSLP, 2+ years system design/architecture, Knowledge of networking fundamentals, Knowledge of security fundamentals, Knowledge of database fundamentals, Knowledge of OS fundamentals, Active US Government Security Clearance, Top Secret with SCI eligibility", "qualificationsPreferred" : "Experience in Agile or Scrum, 1+ years development/programming/scripting, Knowledge of full SDLC engineering practices, Experience leading complex software builds", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "We are currently looking for a Systems Development Engineer to join our systems organization. You love to work with internal and external customers to execute projects and resolve issues. You are a believer in the dev-ops model of service engineering, and you are excited to run operations in an environment where developers don’t toss problems over the wall. You are happiest when you are working with empowered, world-class engineers to meet world-class challenges. Finally, with your strong ownership bias, you have an infectious desire to continually improve how things are done. AWS Cryptography and Identity are building and delivering the next generation of cloud computing security. We are innovating new ways of building massively scalable distributed security systems involving identity management, federation, web services security, and much more. We enable our customers to control some of the most sensitive secrets on the Internet. In this role, you will join a team of highly talented engineers operating Cryptography and Identity systems. This is a great opportunity to have direct impact to some of the largest-scaled systems in the world and work with some of the smartest people in the industry, while having a huge impact. A successful systems development engineer joining the team will do much more than write code and triage problems. You will work with Amazon's largest and most demanding customers to address specific needs across a full suite of services. You will dive deep into technical issues and work diligently to improve the customer experience. This is an excellent opportunity to join Amazon's world class technical team in Seattle. You will work with some of the best and brightest engineers and technical managers while also developing your skills and furthering your career within one of the most innovative and progressive technology companies anywhere. Working together on behalf of our customers, we are building the future one innovative product, service, and idea at a time. Are you ready to embrace the challenge? Come build the future with us. This position requires that the candidate selected must currently possess and maintain an active TS/SCI security clearance. The position further requires that, after start, the selected candidate obtain and maintain an active TS/SCI security clearance with polygraph or commensurate clearance for each government agency for which they perform AWS work. About the team Why AWS Amazon Web Services (AWS) is the world’s most comprehensive and broadly adopted cloud platform. We pioneered cloud computing and never stopped innovating — that’s why customers from the most successful startups to Global 500 companies trust our robust suite of products and services to power their businesses. AWS Infrastructure Services (AIS) AWS Infrastructure Services owns the design, planning, delivery, and operation of all AWS global infrastructure. In other words, we’re the people who keep the cloud running. We support all AWS data centers and all of the servers, storage, networking, power, and cooling equipment that ensure our customers have continual access to the innovation they rely on. We work on the most challenging problems, with thousands of variables impacting the supply chain — and we’re looking for talented people who want to help. Inclusive Team Culture Here at AWS, it’s in our nature to learn and be curious. Our employee-led affinity groups foster a culture of inclusion that empower us to be proud of our differences. Ongoing events and learning experiences, including our Conversations on Race and Ethnicity (CORE) and AmazeCon conferences, inspire us to never stop embracing our uniqueness. Work/Life Balance We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why we strive for flexibility as part of our working culture. When we feel supported in the workplace and at home, there’s nothing we can’t achieve in the cloud. Mentorship and Career Growth We’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge-sharing, mentorship and other career-advancing resources here to help you develop into a better-rounded professional. Diverse Experiences Amazon values diverse experiences. Even if you do not meet all of the preferred qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences, don’t let it stop you from applying. Basic Qualifications: - Bachelor's degree, or CSSLP (Certified Secure Software Lifecycle Professional) - Experience programming with at least one modern language such as C++, C#, Java, Python, Golang, PowerShell, Ruby - 2+ years of designing or architecting (design patterns, reliability and scaling) of new and existing systems experience - Knowledge of fundamentals of networking, security, databases (relational or NoSQL), operating systems (Unix, Linux, and/or Windows) - Current, active US Government Security Clearance of Top Secret with SCI eligibility or above Preferred Qualifications: - Experience working in an Agile or Scrum environment - 1+ years of development/programming/scripting language (Python/Java/Bash/Perl) experience - Knowledge of engineering practices and patterns for the full software/hardware/networks development life cycle, including coding standards, code reviews, source control management, build processes, testing, certification, and livesite operations - Experience taking a leading role in building complex software or computing infrastructure that has been successfully delivered to customers Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status. Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner. The base salary range for this position is listed below. Your Amazon package will include sign-on payments and restricted stock units (RSUs). Final compensation will be determined based on factors including experience, qualifications, and location. Amazon also offers comprehensive benefits including health insurance (medical, dental, vision, prescription, Basic Life & AD&D insurance and option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage), 401(k) matching, paid time off, and parental leave. Learn more about our benefits at https://amazon.jobs/en/benefits . USA, WA, Seattle - 129,200.00 - 174,800.00 USD annually", "summaryDescription" : "Systems Development Engineer, Cryptography and Identity Management at Amazon Development Center U.S., Inc.. Skills: Cryptography, Identity Management, Distributed Systems. Execute projects. Resolve customer issues", "postedDate" : "2026-06-13T15:01:01.881", "createdAt" : "2026-06-13T15:01:01.881", "lastUpdated" : "2026-06-15T05:50:08.138", "ingestTimestamp" : "2026-06-13T15:01:01.881", "mongoId" : "69fda4e24c40e2acd1b99728", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://account.amazon.jobs/jobs/10413723/apply", "salaryAnnualMin" : 129000, "salaryAnnualMax" : 174800, "salaryBand" : "100k-150k", "hasSalary" : true, "allSkills" : [ "Cryptography", "Federation", "Ownership bias", "Identity Management", "Distributed Systems", "Systems development", "Identity management", "Web services security", "DevOps model", "Service engineering", "Agile", "Scrum", "Cloud computing security", "Massively scalable systems", "Relational databases", "NoSQL databases", "Unix operating systems", "Linux operating systems", "Windows operating systems", "CSSLP" ], "skillCount" : 20, "jobCategory" : "operations", "dataQualityScore" : 0.8888889, "_score" : 862.4979, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Cloud Computing" }, { "id" : "6a2cb21174d8ee00a09dfd7b", "title" : "Senior Staff Software Engineer – Identity & Access Management Platform", "industry" : "IT", "salary" : { "min" : 120000.0, "max" : 180000.0, "currency" : "EUR", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market data for a Senior Staff Software Engineer in Bulgaria, adjusted for executive seniority and the technology industry." }, "location" : "US", "locations" : [ "US" ], "timestamp" : "2026-06-15T23:27:54.708", "fingerprint" : "2d012376e5495f85540495fab68eec7868ca359aed61718e7c26ec7df8a40ab3", "source" : "lever", "language" : "en", "applyUrl" : "https://jobs.lever.co/jobgether/56902a58-7b35-4391-ab69-e409deea3eb3/apply", "externalId" : "56902a58-7b35-4391-ab69-e409deea3eb3", "industryFunction" : { }, "structuredLocations" : [ { "country" : "Bulgaria", "continent" : "eu", "workMode" : "remote" } ], "locationText" : "Bulgaria", "employmentType" : "FULL_TIME", "experienceMinYears" : 10, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "technicalSkills" : "OAuth 2.0, OpenID Connect, SAML, JWT, SSO, MFA, Okta, Auth0, Keycloak, Zitadel, Authentik, Ping Identity, Microsoft Entra ID, Google Workspace, Active Directory, RBAC, ABAC", "professionalSkills" : [ "System design", "Technical direction", "Architectural guidance" ], "hardSkillsList" : [ "Identity governance", "Access control systems" ], "softSkillsList" : [ "Leadership" ], "hardSkills" : [ { "name" : "Identity governance", "level" : "intermediate" }, { "name" : "Access control systems", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Leadership" } ], "majorSkills" : "Platform engineering, Distributed systems", "majorSkillsList" : [ "Platform engineering", "Distributed systems" ], "coreResponsibilities" : "Define platform architecture, Define technical direction, Define long-term evolution, Lead design of authentication systems, Lead implementation of authentication systems, Lead design of authorization systems, Lead implementation of authorization systems, Lead design of identity governance systems, Lead implementation of identity governance systems, Lead design of access control systems, Lead implementation of access control systems, Build core IAM services, Maintain core IAM services, Build core IAM APIs, Maintain core IAM APIs, Build IAM integrations, Maintain IAM integrations, Drive platform adoption, Drive migration strategies, Drive standardization, Design secure identity models, Implement secure identity models, Design RBAC models, Implement RBAC models, Design ABAC models, Implement ABAC models, Design multi-tenant architectures, Implement multi-tenant architectures, Design delegated administration, Implement delegated administration, Partner with Security teams, Partner with Compliance teams, Partner with Product teams, Lead technical design reviews, Provide architectural guidance, Mentor engineers, Define engineering standards", "teamCollaboration" : "Partner with Security; Partner with Compliance; Partner with Product", "domainKnowledge" : "Identity protocols; Enterprise IAM platforms; Cloud architectures; SaaS architectures; Multi-tenant systems; Policy-based authorization; Identity governance models; Identity providers; Compliance frameworks; RBAC; ABAC; Delegated administration", "domainList" : [ "identity-protocols", "enterprise-iam-platforms", "cloud-architectures", "saas-architectures", "multi-tenant-systems", "policy-based-authorization", "identity-governance-models", "identity-providers", "compliance-frameworks", "rbac", "abac", "delegated-administration" ], "domainSpecificKnowledge" : [ "Identity protocols", "Enterprise IAM platforms", "Cloud architectures", "SaaS architectures", "Multi-tenant systems", "Policy-based authorization", "Identity governance models", "Identity providers", "Compliance frameworks", "RBAC", "ABAC", "Delegated administration" ], "communicationSkills" : "Influence stakeholders", "continuousLearning" : "Career growth opportunities; Exposure to modern technologies", "innovationCreativity" : "Focus on innovation", "qualificationsBasic" : "10+ years software engineering experience, Experience building distributed systems, Experience building large-scale platform services, Hands-on IAM solutions design, Hands-on IAM solutions implementation, Deep knowledge of identity protocols, Experience with enterprise IAM platforms, Expertise in secure cloud architectures, Expertise in scalable cloud architectures, Expertise in SaaS-based architectures, Experience with multi-tenant systems, Experience with policy-based authorization, Experience with identity governance models, Familiarity with identity providers, Communication skills", "qualificationsPreferred" : "Experience with compliance frameworks, Platform modernization experience, Large-scale migration initiatives experience", "remoteFriendly" : true, "workSiteFlexibility" : "Remote", "rawDescription" : "## Accountabilities Define the architecture, technical direction, and long-term evolution of the IAM platform across multiple products and engineering teams Lead the design and implementation of authentication, authorization, identity governance, and access control systems at scale Build and maintain core IAM services, APIs, and integrations supporting both human and machine identities Drive platform adoption, migration strategies, and standardization across engineering organizations Design and implement secure identity models including RBAC, ABAC, multi-tenant architectures, and delegated administration Partner with Security, Compliance, and Product teams to ensure regulatory, governance, and enterprise security requirements are met Lead technical design reviews and provide architectural guidance for identity-related initiatives Mentor engineers and help define engineering standards for identity and platform development Requirements: 10+ years of software engineering experience building distributed systems or large-scale platform services Strong hands-on experience designing and implementing IAM solutions, including authentication and authorization systems Deep knowledge of identity protocols such as OAuth 2.0, OpenID Connect, SAML, JWT, SSO, and MFA Experience with enterprise IAM platforms such as Okta, Auth0, Keycloak, Zitadel, Authentik, or Ping Identity Strong expertise in building secure, scalable cloud or SaaS-based architectures Experience with multi-tenant systems, policy-based authorization, and identity governance models Familiarity with identity providers such as Microsoft Entra ID, Google Workspace, or Active Directory Experience with compliance frameworks such as SOC 2, ISO 27001, HIPAA, PCI-DSS, or NIST is highly valued Strong communication skills with ability to influence technical and non-technical stakeholders Experience with platform modernization or large-scale migration initiatives is a strong plus Benefits: Competitive compensation package aligned with senior-level engineering roles Remote-first flexibility within the United States Comprehensive healthcare coverage (medical, dental, and vision) Opportunities to work on large-scale, mission-critical identity platforms Career growth in a high-performance, fast-scaling engineering environment Exposure to modern cloud, security, and identity technologies Collaborative engineering culture with strong focus on innovation and ownership Equal opportunity workplace with inclusive hiring practices ## Additional Information How Jobgether works: We use an AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team. We appreciate your interest and wish you the best! Why Apply Through Jobgether? Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time. #LI-CL1", "summaryDescription" : "Senior Staff Software Engineer – Identity & Access Management Platform. Skills: Platform engineering, Distributed systems. Define platform architecture. Define technical direction", "postedDate" : "2026-06-11T04:43:26.153", "createdAt" : "2026-06-11T04:43:26.153", "lastUpdated" : "2026-06-15T23:27:54.708", "ingestTimestamp" : "2026-06-14T22:05:43.209", "mongoId" : "6a2cb21174d8ee00a09dfd7b", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "100k-150k", "hasSalary" : false, "allSkills" : [ "Identity governance", "Access control systems", "Leadership", "Platform engineering", "Distributed systems", "System design", "Technical direction", "Architectural guidance", "Identity protocols", "Enterprise IAM platforms", "Cloud architectures", "SaaS architectures", "Multi-tenant systems", "Policy-based authorization", "Identity governance models", "Identity providers", "Compliance frameworks", "RBAC", "ABAC", "Delegated administration" ], "skillCount" : 20, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Executive", "dataQualityScore" : 0.8888889, "_score" : 857.2319, "daysOld" : 4, "hasLocation" : true, "hasGeo" : false, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.98 }, { "id" : "6a2acaa274d8ee00a070c49f", "title" : "Member of Technical Staff (MTS), Software Engineer, Identity & Access Management", "company" : "Salesforce", "salary" : { "min" : 117200.0, "max" : 176700.0, "currency" : "USD", "frequency" : "yearly" }, "location" : "United States of America", "locations" : [ "United States of America" ], "timestamp" : "2026-06-14T23:22:06.481", "fingerprint" : "8bd14169650cb39ca9085e0fe3f83be294a024ae6346965a32f717ac7f8baad5", "source" : "workday", "language" : "en", "applyUrl" : "https://salesforce.wd12.myworkdayjobs.com/External_Career_Site/job/Washington---Bellevue/Member-of-Technical-Staff--MTS---Software-Engineer--Identity---Access-Management_JR344942", "externalId" : "JR344942", "locationPoint" : "51.43667,5.97917", "structuredLocations" : [ { "country" : "United States", "continent" : "na", "workMode" : "onsite" } ], "locationText" : "United States", "employmentType" : "FULL_TIME", "technicalSkills" : "Golang, Python, Java, AI, Kubernetes, Docker, Terraform, REST, JSON, Git", "professionalSkills" : [ "System design", "Enterprise security", "Security operations", "Service integration", "Agile environment" ], "hardSkillsList" : [ "Software engineering", "Distributed systems", "Microservices architecture", "Cloud-native services", "Debugging", "Testing", "Version control", "REST APIs", "Service integration", "CI/CD pipelines", "Linux system development", "Identity management", "Access management", "Device trust", "Attestation capabilities", "Certificate-based trust", "Hardware-backed trust", "Public Key Infrastructure", "Secure transport", "Access enforcement", "Containerized workloads", "Infrastructure-as-code", "Automated testing", "Code quality checks", "Security checks", "Vulnerability remediation", "Incident response", "Operational investigations", "Platform reliability", "AI agents", "Prompt engineering" ], "softSkillsList" : [ "Communication skills" ], "hardSkills" : [ { "name" : "Software engineering", "level" : "intermediate" }, { "name" : "Distributed systems", "level" : "intermediate" }, { "name" : "Microservices architecture", "level" : "intermediate" }, { "name" : "Cloud-native services", "level" : "intermediate" }, { "name" : "Debugging", "level" : "intermediate" }, { "name" : "Testing", "level" : "intermediate" }, { "name" : "Version control", "level" : "intermediate" }, { "name" : "REST APIs", "level" : "intermediate" }, { "name" : "Service integration", "level" : "intermediate" }, { "name" : "CI/CD pipelines", "level" : "intermediate" }, { "name" : "Linux system development", "level" : "intermediate" }, { "name" : "Identity management", "level" : "intermediate" }, { "name" : "Access management", "level" : "intermediate" }, { "name" : "Device trust", "level" : "intermediate" }, { "name" : "Attestation capabilities", "level" : "intermediate" }, { "name" : "Certificate-based trust", "level" : "intermediate" }, { "name" : "Hardware-backed trust", "level" : "intermediate" }, { "name" : "Public Key Infrastructure", "level" : "intermediate" }, { "name" : "Secure transport", "level" : "intermediate" }, { "name" : "Access enforcement", "level" : "intermediate" }, { "name" : "Containerized workloads", "level" : "intermediate" }, { "name" : "Infrastructure-as-code", "level" : "intermediate" }, { "name" : "Automated testing", "level" : "intermediate" }, { "name" : "Code quality checks", "level" : "intermediate" }, { "name" : "Security checks", "level" : "intermediate" }, { "name" : "Vulnerability remediation", "level" : "intermediate" }, { "name" : "Incident response", "level" : "intermediate" }, { "name" : "Operational investigations", "level" : "intermediate" }, { "name" : "Platform reliability", "level" : "intermediate" }, { "name" : "AI agents", "level" : "intermediate" }, { "name" : "Prompt engineering", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Communication skills" } ], "majorSkills" : "Distributed systems, Enterprise security, AI-enabled security", "majorSkillsList" : [ "Distributed systems", "Enterprise security", "AI-enabled security" ], "coreResponsibilities" : "Build high-quality software, Ship production-grade software, Design systems with AI agents, Integrate AI agents, Evaluate code, Implement device trust, Implement attestation capabilities, Contribute to identity platform components, Contribute to security platform components, Deploy containerized workloads, Maintain containerized workloads, Contribute to secure development workflows, Support vulnerability remediation efforts, Triage findings, Validate fixes, Partner with teammates, Participate in incident response, Participate in operational investigations, Collect data, Analyze system behavior, Support remediation, Partner with security teams, Partner with infrastructure teams, Partner with engineering teams, Support platform reliability, Support trust", "teamCollaboration" : "Agile environment; Partner with teammates; Partner with security teams; Partner with infrastructure teams; Partner with engineering teams", "projectManagementSkills" : [ "Agile" ], "domainKnowledge" : "Identity and Access Management; Distributed systems; Enterprise security; Cloud-native services; Device trust; Public Key Infrastructure; Zero Trust architecture; Transport Layer Security; OAuth; SAML; Multi-factor authentication; Passkeys; Trusted Platform Module", "domainList" : [ "identity-and-access-management", "distributed-systems", "enterprise-security", "cloud-native-services", "device-trust", "public-key-infrastructure", "zero-trust-architecture", "transport-layer-security", "oauth", "saml", "multi-factor-authentication", "passkeys", "trusted-platform-module" ], "domainSpecificKnowledge" : [ "Identity and Access Management", "Distributed systems", "Enterprise security", "Cloud-native services", "Device trust", "Public Key Infrastructure", "Zero Trust architecture", "Transport Layer Security", "OAuth", "SAML", "Multi-factor authentication", "Passkeys", "Trusted Platform Module" ], "toolProficiency" : [ "Claude Code", "GitHub Copilot", "Codex", "Cursor", "Git", "Kubernetes", "Docker", "Terraform" ], "communicationSkills" : "Communication skills", "continuousLearning" : "Willingness to learn", "innovationCreativity" : "AI-first approach", "problemSolvingSkills" : "Debugging; Troubleshooting", "qualificationsBasic" : "1–3 years software engineering experience, Experience building software in Golang, Python, Java, or similar, Demonstrated AI-first approach to engineering, Understanding of distributed systems, Understanding of microservices architecture, Understanding of cloud-native services, Familiarity with debugging, Familiarity with testing, Familiarity with version control using Git, Familiarity with REST/JSON APIs, Familiarity with service integration concepts, Understanding of CI/CD pipelines, Understanding of developer workflows, Understanding of Linux system development, Interest in enterprise security, Interest in identity, Interest in authentication, Interest in access management, Willingness to collaborate, Willingness to learn, Related technical degree required", "qualificationsPreferred" : "Exposure to deploying Kubernetes workloads, Exposure to troubleshooting Kubernetes workloads, Familiarity with infrastructure-as-code tools, Experience with observability platforms, Understanding of service reliability concepts, Interest in security concepts, Interest in identity concepts, Curiosity about Zero Trust architecture, Curiosity about device trust, Curiosity about TPM/T2-based attestation, Awareness of secure coding practices, Awareness of input validation, Awareness of secrets exposure, Awareness of security tooling, Working knowledge of SQL, Working knowledge of NoSQL databases, Familiarity with testing frameworks, Advanced prompt engineering skills, Coursework in distributed systems, Coursework in cloud infrastructure, Coursework in cybersecurity, Coursework in security automation, Degree in distributed systems, Degree in cloud infrastructure, Degree in cybersecurity, Degree in security automation, Project experience in distributed systems, Project experience in cloud infrastructure, Project experience in cybersecurity, Project experience in security automation", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "_To get the best candidate experience, please consider applying for a maximum of 3 roles within 12 months to ensure you are not duplicating efforts._ Job Category Software Engineering Job Details ****About Salesforce**** Salesforce is the #1 AI CRM, where humans with agents drive customer success together. Here, ambition meets action. Tech meets trust. And innovation isn’t a buzzword — it’s a way of life. The world of work as we know it is changing and we're looking for Trailblazers who are passionate about bettering business and the world through AI, driving innovation, and keeping Salesforce's core values at the heart of it all. Ready to level-up your career at the company leading workforce transformation in the agentic era? You’re in the right place! Agentforce is the future of AI, and you are the future of Salesforce. The Experience Salesforce Enterprise Security is hiring a Software Engineer to join our Identity and Access Management (IAM) team. In this role, you will help design and build foundational IAM platform services that protect customer trust across Salesforce's products and infrastructure. With Agentforce woven into every layer of our platform, our engineers build intelligent systems that automate the repetitive, elevate the strategic, and power better decisions at scale. This is a strong opportunity for an early-career engineer to work at the intersection of distributed systems, enterprise security, and modern software engineering while building foundational skills in identity, device trust, and AI-enabled security operations. What You'll Actually Be Doing * Build and ship high-quality, production-grade software across Linux, macOS, and Windows platforms using modern engineering practices, with AI as a core part of your development workflow * Design and orchestrate systems where AI agents integrate seamlessly into human workflows; critically evaluate code — human or AI-generated — for correctness, quality, security, and performance * Implement device trust and attestation capabilities including certificate-based and hardware-backed trust mechanisms, and contribute to identity and security platform components involving certificates, Public Key Infrastructure (PKI), secure transport, and access enforcement * Deploy and maintain containerized workloads using Kubernetes, Docker, and infrastructure-as-code tools such as Terraform * Contribute to secure development workflows including automated testing, Continuous Integration/Continuous Delivery (CI/CD) pipelines, and code quality and security checks * Support vulnerability remediation efforts by triaging findings, validating fixes, and partnering with teammates to close security gaps quickly * Participate in incident response and operational investigations by collecting data, analyzing system behavior, and supporting remediation * Partner with security, infrastructure, and engineering teams to support platform reliability and trust in an Agile environment You're Our Person If... * 1–3 years of software engineering experience * Experience building software in one or more languages such as Golang, Python, Java, or similar * A demonstrated, genuine AI-first approach to engineering — using AI tools such as Claude Code, GitHub Copilot, Codex, or Cursor to move faster and build fluency across the stack * Understanding of distributed systems, microservices architecture, and cloud-native services * Familiarity with software development fundamentals including debugging, testing, and version control using Git * Familiarity with Representational State Transfer (REST)/JSON APIs and service integration concepts * Understanding of Continuous Integration/Continuous Delivery (CI/CD) pipelines and developer workflows * Understanding of Linux or system-level development fundamentals * Interest in enterprise security, identity, authentication, and access management * Strong communication skills and willingness to collaborate and learn in a team environment * A related technical degree required Even Better If... * Exposure to deploying or troubleshooting Kubernetes workloads and familiarity with infrastructure-as-code tools such as Terraform or CloudFormation * Experience with observability platforms — logging, metrics, or distributed tracing — and understanding of service reliability concepts such as Service Level Objectives (SLOs) and Service Level Indicators (SLIs) * Interest in security and identity concepts such as Transport Layer Security (TLS), OAuth, Security Assertion Markup Language (SAML), multi-factor authentication (MFA), passkeys, or certificates; curiosity about Zero Trust architecture, device trust, or Trusted Platform Module (TPM)/T2-based attestation * Awareness of secure coding practices including OWASP Top 10, input validation, and secrets management; exposure to security tooling such as vulnerability scanning, static analysis, or dependency scanning * Working knowledge of SQL and/or NoSQL databases and familiarity with testing frameworks * Advanced prompt engineering skills and the ability to write precise, structured prompts that make AI outputs reliable, secure, and production-ready * Relevant coursework, degree, or project experience in distributed systems, cloud infrastructure, cybersecurity, or security automation Unleash Your Potential When you join Salesforce, you’ll be limitless in all areas of your life. Our benefits and resources support you to find balance and _be your best_ , and our AI agents accelerate your impact so you can _do your best_. Together, we’ll bring the power of Agentforce to organizations of all sizes and deliver amazing experiences that customers love. Apply today to not only shape the future — but to redefine what’s possible — for yourself, for AI, and the world. Accommodations If you need a reasonable accommodation during the application or the recruiting process, please submit a request via this [_Accommodations Request Form_](https://careers.mail.salesforce.com/accommodations-request-form?_ga=2.139086459.912759425.1690463420-976932181.1684251251). Please note that Salesforce uses artificial intelligence (AI) tools to help our recruiters assess and evaluate candidates’ resumes and qualifications throughout the recruiting process. Humans will always make any candidate selection and hiring decisions. Please see our [_Candidate Privacy Statement_](https://www.salesforce.com/en-us/wp-content/uploads/sites/4/documents/legal/Privacy/salesforce-candidate-privacy-statement-december-2024.pdf) for more information about how we use your personal data and your rights, including with regard to use of AI tools and opt out options. Posting Statement Salesforce is an equal opportunity employer and maintains a policy of non-discrimination with all employees and applicants for employment. What does that mean exactly? It means that at Salesforce, we believe in equality for all. And we believe we can lead the path to equality in part by creating a workplace that’s inclusive, and free from discrimination. [Know your rights: workplace discrimination is illegal.](https://www.eeoc.gov/know-your-rights-workplace-discrimination-illegal) Any employee or potential employee will be assessed on the basis of merit, competence and qualifications – without regard to race, religion, color, national origin, sex, sexual orientation, gender expression or identity, transgender status, age, disability, veteran or marital status, political viewpoint, or other classifications protected by law. This policy applies to current and prospective employees, no matter where they are in their Salesforce employment journey. It also applies to recruiting, hiring, job assignment, compensation, promotion, benefits, training, assessment of job performance, discipline, termination, and everything in between. Recruiting, hiring, and promotion decisions at Salesforce are fair and based on merit. The same goes for compensation, benefits, promotions, transfers, reduction in workforce, recall, training, and education. In the United States, compensation offered will be determined by factors such as location, job level, job-related knowledge, skills, and experience. Certain roles may be eligible for incentive compensation, equity, and benefits. Salesforce offers a variety of benefits to help you live well including: time off programs, medical, dental, vision, mental health support, paid parental leave, life and disability insurance, 401(k), and an employee stock purchasing program. More details about company benefits can be found at the following link: https://www.salesforcebenefits.com.Pursuant to the San Francisco Fair Chance Ordinance and the Los Angeles Fair Chance Initiative for Hiring, Salesforce will consider for employment qualified applicants with arrest and conviction records. ### ### ### ### At Salesforce, we believe in equitable compensation practices that reflect the dynamic nature of labor markets across various regions.The typical base salary range for this position is $117,200 - $176,700 annually. In select cities within the San Francisco and New York City metropolitan area, the base salary range for this role is $141,200 - $194,200 annually.The range represents base salary only, and does not include company bonus, incentive for sales roles, equity or benefits, as applicable. ### ### ### ###", "summaryDescription" : "Member of Technical Staff (MTS), Software Engineer, Identity & Access Management at Salesforce. Skills: Distributed systems, Enterprise security, AI-enabled security. Build high-quality software. Ship production-grade software", "postedDate" : "2026-06-11T05:01:35.891", "createdAt" : "2026-06-12T05:01:35.827", "lastUpdated" : "2026-06-14T23:22:06.481", "ingestTimestamp" : "2026-06-12T05:01:35.827", "mongoId" : "6a2acaa274d8ee00a070c49f", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://salesforce.wd12.myworkdayjobs.com/External_Career_Site/job/Washington---Bellevue/Member-of-Technical-Staff--MTS---Software-Engineer--Identity---Access-Management_JR344942", "salaryAnnualMin" : 117200, "salaryAnnualMax" : 176700, "salaryBand" : "100k-150k", "hasSalary" : true, "allSkills" : [ "Software engineering", "Distributed systems", "Microservices architecture", "Cloud-native services", "Debugging", "Testing", "Version control", "REST APIs", "Service integration", "CI/CD pipelines", "Linux system development", "Identity management", "Access management", "Device trust", "Attestation capabilities", "Certificate-based trust", "Hardware-backed trust", "Public Key Infrastructure", "Secure transport", "Access enforcement", "Containerized workloads", "Infrastructure-as-code", "Automated testing", "Code quality checks", "Security checks", "Vulnerability remediation", "Incident response", "Operational investigations", "Platform reliability", "AI agents", "Prompt engineering", "Communication skills", "Enterprise security", "AI-enabled security", "System design", "Security operations", "Agile environment", "Agile", "Identity and Access Management", "Zero Trust architecture", "Transport Layer Security", "OAuth", "SAML", "Multi-factor authentication", "Passkeys", "Trusted Platform Module", "Claude Code", "GitHub Copilot", "Codex", "Cursor", "Git", "Kubernetes", "Docker", "Terraform" ], "skillCount" : 54, "jobCategory" : "engineering", "seniorityLevel" : "senior", "dataQualityScore" : 0.8888889, "_score" : 774.4243, "daysOld" : 3, "hasLocation" : true, "hasGeo" : false }, { "id" : "6a2c9ff474d8ee00a09a0ea7", "title" : "Solutions Consultant", "company" : "Trulioo", "industry" : "Sales", "salary" : { "min" : 75000.0, "max" : 95000.0, "currency" : "CAD", "frequency" : "Yearly" }, "location" : "Vancouver", "locations" : [ "Vancouver" ], "timestamp" : "2026-06-15T04:59:10.457", "fingerprint" : "59874fada5691332cb540a81bf6539d950a366d927c21fc1139fbe1f7dbdb144", "source" : "ashby", "language" : "en", "applyUrl" : "https://jobs.ashbyhq.com/trulioo/bb7a1e51-45d4-4302-9df4-9f138badc7e2/application", "externalId" : "bb7a1e51-45d4-4302-9df4-9f138badc7e2", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Vancouver", "state" : "British Columbia", "country" : "Canada", "continent" : "na", "source" : "llm", "workMode" : "hybrid", "geo" : "49.2608724,-123.1139520" } ], "locationText" : "Vancouver, British Columbia, Canada", "employmentType" : "FULL_TIME", "technicalSkills" : "APIs", "professionalSkills" : [ "Solution design", "Value-driven recommendations", "Customer engagement", "Presales execution", "Technical support", "Consulting" ], "hardSkillsList" : [ "Identity verification", "Solutioning", "Product demonstrations", "Proof of concepts", "Technical questions", "Customer Success", "Service Delivery", "Product", "Engineering", "Trulioo Identity Platform", "Internal knowledge sharing", "Demo assets", "FAQs", "Presales process" ], "hardSkills" : [ { "name" : "Identity verification", "level" : "intermediate" }, { "name" : "Solutioning", "level" : "intermediate" }, { "name" : "Product demonstrations", "level" : "intermediate" }, { "name" : "Proof of concepts", "level" : "intermediate" }, { "name" : "Technical questions", "level" : "intermediate" }, { "name" : "Customer Success", "level" : "intermediate" }, { "name" : "Service Delivery", "level" : "intermediate" }, { "name" : "Product", "level" : "intermediate" }, { "name" : "Engineering", "level" : "intermediate" }, { "name" : "Trulioo Identity Platform", "level" : "intermediate" }, { "name" : "Internal knowledge sharing", "level" : "intermediate" }, { "name" : "Demo assets", "level" : "intermediate" }, { "name" : "FAQs", "level" : "intermediate" }, { "name" : "Presales process", "level" : "intermediate" } ], "majorSkills" : "Solutions Consulting, Identity Verification, Presales", "majorSkillsList" : [ "Solutions Consulting", "Identity Verification", "Presales" ], "coreResponsibilities" : "Partner with Account Executives, Lead discovery conversations, Identify customer business goals, Identify technical requirements, Identify constraints, Own solution design, Translate discovery insights, Lead product demonstrations, Improve master templates, Own setup and execution, Partner with Account Executives, Address technical questions, Progress opportunities, Collaborate with Customer Success, Collaborate with Service Delivery, Collaborate with Product, Collaborate with Engineering, Build working knowledge, Maintain working knowledge, Contribute to internal knowledge sharing, Contribute to best practices, Deliver customer experience", "teamCollaboration" : "Revenue organization; Account Executives; Customer Success; Service Delivery; Product; Engineering", "domainKnowledge" : "Digital identity verification; Identity verification; Trulioo Identity Platform", "domainList" : [ "digital-identity-verification", "identity-verification", "trulioo-identity-platform" ], "domainSpecificKnowledge" : [ "Digital identity verification", "Identity verification", "Trulioo Identity Platform" ], "communicationSkills" : "Explain technical concepts", "continuousLearning" : "Annual education stipend", "problemSolvingSkills" : "Analytical thinking; Problem-solving capability", "qualificationsBasic" : "2-5 years presales experience, 2-5 years technical support experience, 2-5 years consulting experience, 2-5 years customer-facing role experience, Ability to participate in structured discovery, Independently translate requirements into solutions, Demonstrated ability to learn new technologies, Analytical thinking, Problem-solving capability, Own and drive trade-off conversations", "qualificationsPreferred" : "Experience with identity verification, Experience with presales execution, Experience with customer engagement", "remoteFriendly" : true, "workSiteFlexibility" : "Hybrid", "rawDescription" : "Are you ready to embark on a career that truly affects people around the world? Trulioo invites you to be a catalyst for change in the dynamic realm of digital identity verification. As the global front-runner in our industry, we are redefining how businesses grow, innovate and comply online. Picture yourself at the forefront of innovation, contributing to our award-winning platform that enables organizations worldwide to quickly onboard customers, optimize costs and combat fraud. Fueled by Silicon Valley support, Trulioo stands as the trusted platform that can verify more than 5 billion people and 700 million business entities spanning 195 countries. But Trulioo is more than a tech company. We are a united force of dedicated experts committed to establishing trust online - and we’re proud to be recognized as a BC Top Employer for the second consecutive year, reflecting our commitment to an inclusive, collaborative, and people-first workplace. Headquartered in Vancouver and with strategic hubs in San Diego and Dublin, we foster a culture of collaboration and open communication. Our offices support a hybrid model and staff typically work three days per week at a hub location. Join us where excitement meets innovation and contribute to a world where trust and technology unite. What We Offer - Comprehensive Benefits: We provide a robust benefits package for full-time, permanent employees, including health, dental, and vision coverage, retirement plans with company match, paid time off, parental leave, and an annual education & training stipend (equivalent to $1,000 in local currency). Specific benefits may vary by location and will be discussed further during the interview process. - Flexible Hybrid Working Environment: Our offices are designed to support both collaboration and flexibility. Enjoy weekly lunches, quality coffee, and regular social events. Many locations also feature parent rooms, on-site gyms, comfortable lounges, and adaptable workstations to support your comfort and productivity. - Wellness: We care about your well-being. Team members have access to wellness workshops and events, as well as a complimentary Headspace subscription to help you stay focused, grounded, and energized. - Employee Resource Groups: Belonging is an important part of doing your best work. Our ERGs provide an inclusive space, support and community for employees of diverse backgrounds and allies. We host informative, fun sessions and celebrations that are often open to the entire organization. Position Summary: Reporting to the Manager, Solutions Consulting, the Solutions Consultant partners with the revenue organization to understand customer requirements and design effective solutions using Trulioo’s platform. You will work closely with Account Executives with discovery and own solutioning and evaluations for mid-market customers. This includes translating business and technical requirements into clear, value-driven recommendations. This role builds foundational expertise in identity verification, presales execution, and customer engagement, with a path toward more complex opportunities. This will be a full-time, permanent position working out of the Vancouver office on a hybrid model (3-days per week in the office). What You Will Do: - Partner with Account Executives to lead discovery conversations, identifying customer business goals, technical requirements, and constraints - Own solution design, translating discovery insights into standardized recommendations and verification strategies - Lead product demonstrations aligned to customer use cases, improve our master templates over time with learnings - Own the setup and execution of proof of concepts and evaluations for mid-market opportunities - Partner with Account Executives to address technical questions and progress opportunities through the sales cycle - Collaborate with Customer Success, Service Delivery, Product, and Engineering to ensure solutions are feasible and aligned - Build and maintain working knowledge of Trulioo’s Identity Platform, APIs, and key differentiators - Contribute to internal knowledge sharing and approach best practices through documentation, demo assets, and FAQs - Deliver a consistent, high-quality customer experience throughout the presales process What You Bring: - 2-5 years of experience in presales, technical support, consulting, or a similar customer-facing role - Ability to participate in structured discovery and independently translate requirements into solutions - Strong communication skills with the ability to explain technical concepts to non-technical audiences - Demonstrated ability to learn new technologies quickly - Analytical thinking and problem-solving capability - Own and drive trade-off conversations using defined operating parameters Technical Familiarity: - Understanding of APIs and integrations, including RESTful APIs and JSON - Exposure to tools like Postman or similar API clients is an asset - Familiarity with LLM/AI prompting techniques and best practices - General understanding of how systems integrate and exchange data Nice to Have: - Interest or exposure to identity verification, fintech, or compliance - Experience working in a SaaS environment - Comfort working with both technical and business stakeholders Pay Transparency: We take a market-based, data-driven approach to compensation, leveraging trusted third-party data to assess the value of each role based on function, level, location, and scope. The base salary range for this role is $75,000–$95,000 CAD, with on-target earnings (OTE) of $93,750–$118,750 CAD. Final compensation may vary based on factors such as experience, skills, qualifications, and location. For more details on the full compensation package, please review the job posting on our careers page. Thriving at Trulioo At Trulioo, you’re not just an employee. You’re a valued member of our Trulicrew on a journey of professional and personal growth with a world-class organization. With Trulioo, you have the power to revolutionize the intersection of technology, digital trust and online identity to open the global economy to everyone. Together, we can shape the digital future. We’re on the lookout for exceptional people to empower with trust, autonomy and the freedom to cultivate their potential. Your curiosity, meticulous attention to detail and passion to contribute are highly valued. If that resonates with you, apply today to become a part of our team. Join us in shaping a future where your career isn’t just a journey but also a boundless exploration into the possibilities of technology and digital identity verification. Get an inside look at life at Trulioo by following us on LinkedIn https://ca.linkedin.com/company/trulioo, or learn more about us at www.trulioo.com http://www.trulioo.com If you don’t see yourself fully reflected in every job requirement listed on the posting above, we still encourage you to reach out and apply. Research has shown that minorities and underrepresented groups often only apply when they feel 100% qualified. We are committed to creating a more equitable, inclusive and diverse company and we strongly encourage applicants of all genders, ages, ethnicities, cultures, abilities, sexual orientations, and life experiences to apply. Trulioo welcomes applications from people with disabilities. Support is available upon request for candidates taking part in all aspects of the selection process. Finally, we know from time-to-time emergencies happen and you may need to reschedule an interview - we understand and encourage you to be in communication without worrying about losing the opportunity or your credibility. Privacy Notice As part of our job application process, Trulioo collects, processes, and discloses personal data for the purpose of identifying suitable candidates for our job openings. For more detail, please visit Trulioo’s Website Privacy Policy https://www.trulioo.com/website-privacy-policy in the section “When you apply for a job”.", "summaryDescription" : "Solutions Consultant at Trulioo. Skills: Solutions Consulting, Identity Verification, Presales. Partner with Account Executives. Lead discovery conversations", "createdAt" : "2026-06-14T04:03:01.987", "lastUpdated" : "2026-06-15T04:59:10.457", "ingestTimestamp" : "2026-06-14T04:03:01.987", "mongoId" : "6a2c9ff474d8ee00a09a0ea7", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "75k-100k", "hasSalary" : false, "allSkills" : [ "Identity verification", "Solutioning", "Product demonstrations", "Proof of concepts", "Technical questions", "Customer Success", "Service Delivery", "Product", "Engineering", "Trulioo Identity Platform", "Internal knowledge sharing", "Demo assets", "FAQs", "Presales process", "Solutions Consulting", "Identity Verification", "Presales", "Solution design", "Value-driven recommendations", "Customer engagement", "Presales execution", "Technical support", "Consulting", "Digital identity verification" ], "skillCount" : 24, "jobCategory" : "sales", "jobSubcategory" : "revenue", "seniorityLevel" : "Mid", "dataQualityScore" : 0.7777778, "_score" : 772.95337, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.95 }, { "id" : "6a2a486d74d8ee00a05df62d", "title" : "Director of Market Access Solutions", "company" : "Harrow, Inc.", "industry" : "Healthcare", "salary" : { "min" : 1.2E7, "max" : 1.8E7, "currency" : "INR", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for Director of Market Access Solutions in the Pharma industry, adjusted for seniority and remote work." }, "location" : "United States ", "locations" : [ "United States" ], "timestamp" : "2026-06-14T20:14:29.444", "fingerprint" : "73335ceabb046fd548585e40e1b89ba67565063d95001aaa7afcf2e6e5d9a707", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://job-boards.greenhouse.io/harrowhealth/jobs/4688435006", "externalId" : "4688435006", "industryFunction" : { }, "structuredLocations" : [ { "workMode" : "remote" } ], "locationText" : "", "experienceMinYears" : 10, "experienceLevel" : "Director", "professionalSkills" : [ "Market access", "Patient services", "Specialty pharmacy", "Contracting", "Performance management", "Optimization", "Reimbursement strategy", "Payer strategy", "Coverage improvement" ], "hardSkillsList" : [ "KPI development", "Program data interpretation", "Data-informed decisions" ], "softSkillsList" : [ "Leadership", "Analytical mindset", "Cross-functional collaboration" ], "hardSkills" : [ { "name" : "KPI development", "level" : "intermediate" }, { "name" : "Program data interpretation", "level" : "intermediate" }, { "name" : "Data-informed decisions", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Leadership" }, { "name" : "Analytical mindset" }, { "name" : "Cross-functional collaboration" } ], "majorSkills" : "Market Access, Patient Access Programs, Specialty Pharmacy Operations", "majorSkillsList" : [ "Market Access", "Patient Access Programs", "Specialty Pharmacy Operations" ], "coreResponsibilities" : "Lead specialty pharmacy operations, Design specialty pharmacy network, Contract specialty pharmacy network, Manage specialty pharmacy performance, Monitor specialty pharmacy KPIs, Hold partners accountable, Ensure seamless product flow, Ensure specialty pharmacy compliance, Resolve specialty pharmacy issues, Own HUB services platform, Manage HUB services vendor, Develop patient support programs, Develop benefits investigation, Develop prior authorization support, Develop appeals assistance, Develop adherence programs, Develop patient-facing materials, Develop nurse educator programs, Develop support resources, Monitor HUB performance metrics, Drive operational improvements, Design regional pharmacy program, Build regional pharmacy program, Manage regional pharmacy program, Contract regional pharmacy partners, Develop account plans, Develop support resources, Monitor regional pharmacy metrics, Optimize network coverage, Optimize patient access, Optimize pharmacy engagement, Align regional strategies, Lead prior authorization strategy, Minimize PA burden, Reduce time-to-therapy, Develop PA landscape analysis, Identify coverage gaps, Identify restrictive criteria, Identify appeal opportunities, Create PA support tools, Update PA support tools, Implement PA tracking systems, Implement PA reporting systems, Design copay assistance programs, Launch copay assistance programs, Manage copay assistance programs, Establish copay program parameters, Establish eligibility criteria, Establish benefit caps, Select copay program vendors, Manage copay program vendors, Negotiate copay program contracts, Establish copay performance standards, Conduct copay business reviews, Monitor copay program utilization, Monitor copay cost-effectiveness, Adjust copay program design, Develop copay strategies, Develop market access communications, Create market access messaging, Develop payer dossiers, Develop reimbursement guides, Develop access toolkits, Develop field training content, Develop educational content, Develop communication strategies, Address payer coverage dynamics, Address PA requirements, Address access program availability, Serve as subject matter expert, Serve as strategic communications resource, Translate reimbursement issues, Provide actionable guidance", "teamCollaboration" : "Cross-functional collaboration; Align Commercial stakeholders; Align Medical Affairs stakeholders; Align Legal/Compliance stakeholders; Align Finance stakeholders; Partner with Marketing; Partner with Medical Affairs; Partner with Legal/Compliance; Partner with Finance; Work with payer teams; Work with field market access; Work with commercial teams; Work with medical teams", "domainKnowledge" : "Ophthalmology; Ophthalmic pharmaceuticals; Ophthalmic disease management; Specialty pharmacy; Patient access programs; HUB services; Prior authorization; Copay assistance; Reimbursement dynamics; Buy-and-bill; J-Code reimbursement; Commercial payer dynamics; Medicare dynamics; Medicaid dynamics; OIG guidance; CMS requirements; Copay accumulator; Copay maximizer", "domainList" : [ "ophthalmology", "ophthalmic-pharmaceuticals", "ophthalmic-disease-management", "specialty-pharmacy", "patient-access-programs", "hub-services", "prior-authorization", "copay-assistance", "reimbursement-dynamics", "buy-and-bill", "j-code-reimbursement", "commercial-payer-dynamics", "medicare-dynamics", "medicaid-dynamics", "oig-guidance", "cms-requirements", "copay-accumulator", "copay-maximizer" ], "domainSpecificKnowledge" : [ "Ophthalmology", "Ophthalmic pharmaceuticals", "Ophthalmic disease management", "Specialty pharmacy", "Patient access programs", "HUB services", "Prior authorization", "Copay assistance", "Reimbursement dynamics", "Buy-and-bill", "J-Code reimbursement", "Commercial payer dynamics", "Medicare dynamics", "Medicaid dynamics", "OIG guidance", "CMS requirements", "Copay accumulator", "Copay maximizer" ], "communicationSkills" : "Written communication; Verbal communication; Messaging; Communications strategy", "problemSolvingSkills" : "Resolve barriers; Drive operational improvements; Optimize network coverage; Optimize patient access; Optimize pharmacy engagement; Minimize PA burden; Reduce time-to-therapy; Identify coverage gaps; Identify restrictive criteria; Identify appeal opportunities; Protect program value; Protect patient access", "specialRequirements" : "Up to 50% travel", "outcomesObjectives" : "Maximize brand performance; Improve affordability; Ensure seamless access; Drive therapy initiation; Drive therapy adherence; Optimize network coverage; Optimize patient access; Optimize pharmacy engagement; Minimize PA burden; Reduce time-to-therapy; Maximize patient affordability; Maximize market access impact; Safeguard program integrity; Protect program value; Protect patient access", "qualificationsBasic" : "10+ years market access experience, 10+ years patient services experience, 10+ years specialty pharmacy experience, Experience designing access programs, Experience managing access programs, Experience with vendor selection, Experience with contracting, Experience with performance management, Experience with optimization", "qualificationsPreferred" : "Advanced degree (MBA, PharmD) preferred, Understanding of ophthalmology reimbursement dynamics, Experience with buy-and-bill, Experience with specialty pharmacy-dispensed products, Experience with J-Code reimbursement, Experience with Commercial payer dynamics, Experience with Medicare dynamics, Experience with Medicaid dynamics", "remoteFriendly" : true, "workSiteFlexibility" : "Remote", "rawDescription" : "Before reading the job post, we encourage you to watch this video about our company. It gives you an inside look at how we started, the team and culture that made us successful, and where we're going. It's easy to read a job post and apply, but people often wonder about the culture and whether they would fit in. If you want to call Harrow your home and genuinely want to be part of a family and something big, then we encourage you to click this link and get to know us. Who is Harrow? Harrow (Nasdaq: HROW) is a leading provider of ophthalmic disease management solutions in North America. Harrow is an incredible entrepreneurial company – where we celebrate the ability of every member of the Harrow Family to be the CEO of their job. Harrow’s values have driven interest over the past decade in attracting high-performing professionals in a variety of disciplines. Members of our Harrow Family often express their pride in being a part of our commitment to (1) innovation, (2) patient access to affordable medicines, and (3) our track record of having never turned down an ophthalmologist doing mission work around the world – providing free medicines in support of mission work aimed at giving or maintaining the gift of sight to those most in need. We encourage you to learn more about Harrow and its unique culture to see if you’re the right person to help contribute as we build a truly exceptional company, one we are all so proud of! Harrow’s ophthalmic pharmaceutical portfolio is one of the most comprehensive in the industry, including: An expanding Retina Portfolio including IHEEZO®, TRIESENCE®, BYOOVIZTM, and OPUVIZTM A broad Dry Eye Disease product line, led by VEVYE® and bolstered by well-known adjacent ocular surface disease products such as FLAREX® and FRESHKOTE® A peri-operative Surgical product line, led by TRIESENCE®, and BYQLOVITM A Rare and Specialty product line, which includes various high-need and utility products such as ILEVRO®, NATACYN®, and VERKAZIA® A robust internal development pipeline with multiple late-stage candidates, including MELT-300, MELT-210, H-N08, and CR-01 Position Summary The Director, Market Access Solutions, will serve as a critical strategic and operational leader within Harrow's market access organization. This role is responsible for designing, implementing, and optimizing the full spectrum of patient and provider access programs. The Director will work cross-functionally with Commercial, Medical Affairs, Marketing, and Legal/Compliance to ensure patients have seamless access to Harrow's ophthalmology portfolio while maximizing brand performance and improving affordability. Core Responsibilities Specialty Pharmacy Operations and Management Lead the strategic design, contracting, and ongoing performance management of Harrow's specialty pharmacy network, including national and regional specialty pharmacy partners. Establish and monitor specialty pharmacy KPIs (fill rates, time-to-therapy, patient satisfaction, adherence metrics) and hold partners accountable to contractual service-level agreements. Collaborate with Trade and Distribution leadership to ensure seamless product flow from wholesaler to specialty pharmacy to patient. Ensure all specialty pharmacy operations are fully compliant with applicable federal and state regulations, company policies, and FDA guidelines. Serve as the primary point of escalation for specialty pharmacy operational issues, resolving barriers to patient access quickly and effectively. HUB Services and Patient Support Programs Own the design, vendor selection, contracting, and ongoing management of Harrow's HUB services platform, including patient support programs, benefits investigation, prior authorization support, appeals assistance, and adherence programs. Partner with Marketing and Medical Affairs to develop patient-facing materials, nurse educator programs, and support resources that enhance the patient experience and drive therapy initiation and adherence. Establish and monitor HUB performance metrics (case turnaround times, PA approval rates, patient enrollment, abandonment rates) and drive operational improvements with the HUB vendor. Ensure HUB programs are designed to address the unique access and reimbursement dynamics of ophthalmology, including in-office administered products and specialty pharmacy-dispensed therapies. Regional Pharmacy Program Build and manage a regional pharmacy program tailored to local market dynamics, ensuring patients in geographically diverse markets have access to Harrow's products through preferred local and regional pharmacy partners. Identify, evaluate, and contract with high-value regional pharmacy partners; develop customized account plans and support resources to drive program performance. Monitor regional pharmacy program metrics and trends; leverage data insights to optimize network coverage, patient access, and pharmacy engagement. Work closely with field-based market access and sales teams to align regional pharmacy strategies with local commercial priorities and payer environments. Prior Authorization Improvement Lead enterprise-wide prior authorization strategy, working with payer teams, HUB vendors, and field market access to minimize PA burden on providers and reduce time-to-therapy for patients. Develop and maintain a comprehensive PA landscape analysis across commercial and government payers, identifying coverage gaps, restrictive criteria, and appeal opportunities. Create and continuously update PA support tools for physicians and office staff (step edit guides, clinical summary letters, appeal templates, and medical exception forms) in close partnership with Medical Affairs. Implement PA tracking and reporting systems that provide real-time visibility into approval rates, denial trends, and appeal outcomes; use data to inform payer strategy and coverage improvement initiatives. Copay Program Management and Optimization Design, launch, and manage patient copay assistance programs across Harrow's portfolio, ensuring programs are structured to maximize patient affordability and market access impact. Partner with Finance and Legal/Compliance to establish copay program parameters, eligibility criteria, and benefit caps that are both commercially effective and compliant with all applicable regulations (including OIG guidance and CMS requirements), with clear business rules that safeguard program integrity against fraud, waste, and abuse. Select and manage copay program vendors and third-party administrators; negotiate contracts, establish performance standards, and conduct regular business reviews. Monitor copay program utilization, cost-effectiveness, and patient outcomes; adjust program design to capture optimization opportunities. Stay current on the copay accumulator and maximizer landscape; proactively develop strategies to protect program value and patient access as payer policies evolve. Market Access Communications Develop and lead market access communications strategy, creating clear, compelling, and compliant messaging that articulates Harrow's access solutions to payers, providers, pharmacy partners, and patients. Partner with Marketing, Medical Affairs, and Legal/Regulatory to develop and review market access materials including payer dossiers, reimbursement guides, access toolkits, and field training content. Develop educational content and communication strategies that proactively address payer coverage dynamics, PA requirements, and access program availability with healthcare professionals. Serve as a subject matter expert and strategic communications resource for cross-functional teams navigating complex reimbursement environments; translate technical reimbursement and policy issues into actionable guidance for commercial and medical teams. Qualifications advanced degree (MBA, PharmD) preferred. 10+ years of progressive market access, patient services, or specialty pharmacy experience within pharmaceutical, biotech, or ophthalmology companies. Demonstrated experience designing and managing end-to-end access programs from vendor selection and contracting through performance management and optimization. Strong understanding of the complex reimbursement landscape for ophthalmology, including buy-and-bill, specialty pharmacy-dispensed products, J-Code reimbursement, and Commercial/Medicare/Medicaid dynamics (strongly preferred). Exceptional cross-functional collaboration skills; able to influence and align Commercial, Medical Affairs, Legal/Compliance, and Finance stakeholders. Analytical mindset with experience developing and monitoring KPIs, interpreting program data, and driving data-informed decisions. Outstanding written and verbal communication skills; demonstrated ability to translate complex market access concepts into clear, actionable messaging for diverse audiences. Position Details Position Type: Remote Travel: Up to 50%", "summaryDescription" : "Director of Market Access Solutions at Harrow, Inc.. Skills: Market Access, Patient Access Programs, Specialty Pharmacy Operations. Lead specialty pharmacy operations. Design specialty pharmacy network", "postedDate" : "2026-06-11T18:48:09.760", "createdAt" : "2026-06-11T18:48:09.760", "lastUpdated" : "2026-06-14T20:14:29.444", "ingestTimestamp" : "2026-06-11T18:48:09.760", "mongoId" : "6a2a486d74d8ee00a05df62d", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryBand" : "200k+", "hasSalary" : false, "allSkills" : [ "KPI development", "Program data interpretation", "Data-informed decisions", "Leadership", "Analytical mindset", "Cross-functional collaboration", "Market Access", "Patient Access Programs", "Specialty Pharmacy Operations", "Market access", "Patient services", "Specialty pharmacy", "Contracting", "Performance management", "Optimization", "Reimbursement strategy", "Payer strategy", "Coverage improvement", "Ophthalmology", "Ophthalmic pharmaceuticals", "Ophthalmic disease management", "Patient access programs", "HUB services", "Prior authorization", "Copay assistance", "Reimbursement dynamics", "Buy-and-bill", "J-Code reimbursement", "Commercial payer dynamics", "Medicare dynamics", "Medicaid dynamics", "OIG guidance", "CMS requirements", "Copay accumulator", "Copay maximizer" ], "skillCount" : 35, "jobCategory" : "marketing", "jobSubcategory" : "market-access", "dataQualityScore" : 0.8888889, "_score" : 755.7205, "daysOld" : 3, "hasLocation" : true, "hasGeo" : false, "llmIndustry" : "Healthcare" }, { "id" : "6a265b2d74d8ee00a021f712", "title" : "Information Security Engineering Manager", "company" : "Wells Fargo", "industry" : "Financial Services", "salary" : { "min" : 119000.0, "max" : 187000.0, "currency" : "USD", "frequency" : "yearly" }, "location" : "CHARLOTTE, NC", "locations" : [ "CHARLOTTE, NC", "United States of America" ], "timestamp" : "2026-06-12T19:56:46.878", "fingerprint" : "6d44aaf99e578632b4fc16a15bfdcc301b98c1ded3f77537b9bf14778ded575e", "source" : "workday", "language" : "en", "applyUrl" : "https://wd1.myworkdaysite.com/recruiting/wf/WellsFargoJobs/job/CHARLOTTE-NC/Information-Security-Engineering-Manager_R-524895", "externalId" : "R-524895", "industryFunction" : { }, "locationPoint" : "44.30977,-73.26096", "structuredLocations" : [ { "city" : "Charlotte", "state" : "North Carolina", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "hybrid", "geo" : "35.2272086,-80.8430827" } ], "locationText" : "Charlotte, North Carolina, United States", "employmentType" : "FULL_TIME", "experienceLevel" : "Manager", "technicalSkills" : "CyberArk, Cloud IAM, Kubernetes, Service accounts, Secrets distribution, Container access", "professionalSkills" : [ "Privileged Access Management", "Secrets management", "Least-privilege enforcement", "Zero Trust principles", "DevSecOps integration", "Infrastructure-as-code", "Information security policy", "Regulatory requirements", "Audit expectations", "Platform architecture", "Access governance", "Developer productivity", "Financial stewardship", "Technical depth" ], "hardSkillsList" : [ "Credential vaulting", "Session management", "Policy enforcement", "Root cause analysis", "Remediation recommendations" ], "softSkillsList" : [ "Leadership", "Mentoring" ], "hardSkills" : [ { "name" : "Credential vaulting", "level" : "intermediate" }, { "name" : "Session management", "level" : "intermediate" }, { "name" : "Policy enforcement", "level" : "intermediate" }, { "name" : "Root cause analysis", "level" : "intermediate" }, { "name" : "Remediation recommendations", "level" : "intermediate" } ], "softSkills" : [ { "name" : "Leadership" }, { "name" : "Mentoring" } ], "majorSkills" : "Privileged Access Management, DevSecOps, Cloud Security, Identity Management", "majorSkillsList" : [ "Privileged Access Management", "DevSecOps", "Cloud Security", "Identity Management" ], "coreResponsibilities" : "Provide strategic leadership for PAM platform, Define vision, roadmaps, and evolution, Lead teams securing privileged credentials, Drive modernization of PAM capabilities, Transition from legacy access models, Guide adoption of DevSecOps and automation, Oversee vulnerability reduction, Mitigate risks related to privileged access, Partner with security architecture teams, Embed privileged access controls, Manage engineers designing PAM solutions, Provide security consulting, Ensure privileged access conforms to policy, Serve as subject matter expert, Stay current on emerging threats, Lead technical investigation for incidents, Provide remediation recommendations, Ensure PAM controls support availability, Enable business agility, Manage resource planning, Manage financial stewardship, Mentor engineering talent, Develop engineering talent, Retain engineering talent, Build technical depth, Build leadership capability", "teamCollaboration" : "Security architecture; IAM teams; Cloud teams; Infrastructure teams; Application teams", "projectManagementSkills" : [ "Roadmap planning" ], "domainKnowledge" : "Privileged Access Management; Zero Trust; Cloud-native environments; Hybrid environments", "domainList" : [ "privileged-access-management", "zero-trust", "cloud-native-environments", "hybrid-environments" ], "domainSpecificKnowledge" : [ "Privileged Access Management", "Zero Trust", "Cloud-native environments", "Hybrid environments" ], "toolProficiency" : [ "CyberArk", "Kubernetes" ], "problemSolvingSkills" : "Root cause analysis", "specialRequirements" : "On-site hybrid environment, No visa sponsorship", "qualificationsBasic" : "5+ years Information Security Engineering experience, 2+ years Leadership experience", "qualificationsPreferred" : "Experience with CyberArk, Experience with Agentic AI identity frameworks, Experience managing high-performing Agile teams, Knowledge of DevSecOps patterns, Hands-on understanding of Kubernetes, Proficiency with cloud and hybrid architectures, Ability to drive engineering excellence, Proven collaboration skills, Demonstrated leadership in PAM platform engineering, Experience leading modernization of privileged access, Track record of transformation leadership, Expertise in automation and CI/CD enablement, Ability to define and execute roadmap", "remoteFriendly" : true, "workSiteFlexibility" : "Hybrid", "rawDescription" : "**About this role:** Wells Fargo is seeking an Information Security Engineering Manager to lead a Privileged Access Management (PAM) engineering organization. This role is responsible for securing, modernizing, and evolving enterprise privileged access capabilities, including credential vaulting, secrets management, session control, and least‑privilege enforcement. The manager will oversee risk reduction related to privileged identities while driving automation, DevSecOps integration, and standardized access patterns. This position will guide the team through PAM modernization initiatives, including retiring legacy access models, improving platform architecture, and enabling scalable, cloud‑ready privileged access solutions across hybrid environments. ****In this role, you will:**** * Provide strategic leadership for the Privileged Access Management (PAM) platform, defining vision, roadmaps, and long‑term evolution for credential vaulting, session management, secrets management, and least‑privilege access across the enterprise * Lead teams responsible for securing privileged credentials and access paths, including account onboarding, rotation, session isolation, and policy enforcement for human and non‑human identities * Drive modernization of PAM capabilities, transitioning from legacy, manually managed access models to automated, policy‑driven, and API‑integrated solutions aligned with Zero Trust principles * Guide adoption of DevSecOps and automation patterns for privileged access, including CI/CD integrations, secrets delivery, ephemeral credentials, and infrastructure‑as‑code enablement * Oversee vulnerability reduction and risk mitigation related to privileged access, including elimination of hard‑coded credentials, shared accounts, excessive entitlements, and standing access * Partner closely with security architecture, IAM, cloud, infrastructure, and application teams to embed privileged access controls into platforms, pipelines, and operating models * Manage a team of engineers designing, implementing, documenting, and supporting highly complex PAM solutions spanning CyberArk, secrets management platforms, directory services, cloud IAM, and hybrid environments * Provide security consulting and design oversight for large enterprise initiatives to ensure privileged access patterns conform to information security policy, regulatory requirements, and audit expectations * Serve as a subject matter expert in PAM technologies and best practices, staying current on emerging threats, access models, and platform capabilities * Lead technical investigation and response for privileged access–related incidents, including root cause analysis and remediation recommendations to prevent recurrence * Ensure PAM controls support availability, confidentiality, integrity, access governance, monitoring, and incident response, while enabling business agility and developer productivity * Manage resource planning, prioritization, and financial stewardship for PAM engineering and platform investments * Mentor, develop, and retain engineering talent, building strong technical depth and leadership capability within the PAM organization ****Required Qualifications:**** * 5+ years of Information Security Engineering experience, or equivalent demonstrated through one or a combination of the following: work experience, training, military experience, education 2+ years of Leadership experience ****Desired Qualifications:**** * Experience with CyberArk credential management system * Experience with Agentic AI identity frameworks like SPIFFE and SPIRE * Experience managing and developing high‑performing Agile teams focused on Privileged Access Management, identity platforms, and security engineering solutions * Strong knowledge of DevSecOps patterns as they relate to privileged access, including secure CI/CD integration, automated credential delivery, secrets injection, and control enforcement * Hands‑on understanding of Kubernetes and cloud‑native environments from a privileged access perspective, including workload identity, service accounts, secrets distribution, and container access controls * Proficiency with cloud and hybrid architectures requiring secure privileged access, including integration with cloud IAM, secrets management platforms, and enterprise PAM tooling * Ability to drive engineering excellence in PAM through automation, policy‑driven access, observability, and standardized onboarding patterns * Proven collaboration skills with IAM, security architecture, infrastructure, cloud, and application teams to deliver resilient, compliant, and scalable privileged access solutions * Demonstrated leadership in PAM platform engineering, building and operating centralized vaulting, session management, secrets services, and self‑service access models * Experience leading modernization of privileged access for legacy and home‑grown systems, including removal of hard‑coded credentials, reduction of shared accounts, and elimination of standing access * Track record of transformation leadership to establish new privileged access patterns, operating models, and Zero Trust–aligned controls across the enterprise * Expertise in automation and CI/CD enablement for PAM, including policy‑as‑code, secrets management, credential rotation, and integration across on‑prem and cloud environments * Ability to define and execute a cloud and platform readiness roadmap for privileged access, guiding teams through staged adoption or hybrid models while maintaining uptime, auditability, and compliance ****Job Expectations:**** * Ability to work on-site in one of the listed locations in a hybrid environment. There is no option for fully remote work * This position is not available for visa sponsorship **Pay Range** Reflected is the base pay range offered for this position. Pay may vary depending on factors including but not limited to demonstrated examples of prior performance, skills, experience, or work location. Employees may also be eligible for incentive opportunities. $119,000.00 - $187,000.00 **Benefits** Wells Fargo provides eligible employees with a comprehensive set of benefits, many of which are listed below. Visit [Benefits - Wells Fargo Jobs](https://www.wellsfargojobs.com/en/life-at-wells-fargo/benefits) for an overview of the following benefit plans and programs offered to employees. * Health benefits * 401(k) Plan * Paid time off * Disability benefits * Life insurance, critical illness insurance, and accident insurance * Parental leave * Critical caregiving leave * Discounts and savings * Commuter benefits * Tuition reimbursement * Scholarships for dependent children * Adoption reimbursement **Posting End Date:** 19 Jun 2026 ***_Job posting may come down early due to volume of applicants._** **We Value Equal Opportunity** Wells Fargo is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, status as a protected veteran, or any other legally protected characteristic. Employees support our focus on building strong customer relationships balanced with a strong risk mitigating and compliance-driven culture which firmly establishes those disciplines as critical to the success of our customers and company. They are accountable for execution of all applicable risk programs (Credit, Market, Financial Crimes, Operational, Regulatory Compliance), which includes effectively following and adhering to applicable Wells Fargo policies and procedures, appropriately fulfilling risk and compliance obligations, timely and effective escalation and remediation of issues, and making sound risk decisions. There is emphasis on proactive monitoring, governance, risk identification and escalation, as well as making sound risk decisions commensurate with the business unit’s risk appetite and all risk and compliance program requirements. **Applicants with Disabilities** To request a medical accommodation during the application or interview process, visit [Disability Inclusion at Wells Fargo](https://www.wellsfargojobs.com/en/diversity/disability-inclusion/). **Drug and Alcohol Policy** **** Wells Fargo maintains a drug free workplace. Please see our [Drug and Alcohol Policy](https://www.wellsfargojobs.com/en/wells-fargo-drug-and-alcohol-policy) to learn more. **Wells Fargo Recruitment and Hiring Requirements:** a. Third-Party recordings are prohibited unless authorized by Wells Fargo. b. Wells Fargo requires you to directly represent your own experiences during the recruiting and hiring process.", "summaryDescription" : "Information Security Engineering Manager at Wells Fargo. Skills: Privileged Access Management, DevSecOps, Cloud Security, Identity Management. Provide strategic leadership for PAM platform. Define vision, roadmaps, and evolution", "postedDate" : "2026-06-09T12:12:07.340", "createdAt" : "2026-06-11T12:12:07.283", "lastUpdated" : "2026-06-12T19:56:46.878", "ingestTimestamp" : "2026-06-11T12:12:07.283", "mongoId" : "6a265b2d74d8ee00a021f712", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "sourceUrl" : "https://wd1.myworkdaysite.com/recruiting/wf/WellsFargoJobs/job/CHARLOTTE-NC/Information-Security-Engineering-Manager_R-524895", "salaryAnnualMin" : 119000, "salaryAnnualMax" : 187000, "salaryBand" : "100k-150k", "hasSalary" : true, "allSkills" : [ "Credential vaulting", "Session management", "Policy enforcement", "Root cause analysis", "Remediation recommendations", "Leadership", "Mentoring", "Privileged Access Management", "DevSecOps", "Cloud Security", "Identity Management", "Secrets management", "Least-privilege enforcement", "Zero Trust principles", "DevSecOps integration", "Infrastructure-as-code", "Information security policy", "Regulatory requirements", "Audit expectations", "Platform architecture", "Access governance", "Developer productivity", "Financial stewardship", "Technical depth", "Roadmap planning", "Zero Trust", "Cloud-native environments", "Hybrid environments", "CyberArk", "Kubernetes" ], "skillCount" : 30, "jobCategory" : "engineering", "seniorityLevel" : "manager", "dataQualityScore" : 1.0, "_score" : 747.30444, "daysOld" : 3, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Financial Services" }, { "id" : "6a2c924674d8ee00a0985558", "title" : "Senior Sales Executive - Digital Identity & Authentication", "company" : "Incognia", "industry" : "Cybersecurity", "salary" : { "min" : 165000.0, "max" : 245000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : true, "estimation_basis" : "Market baseline for a Senior Sales Executive in San Jose, United States, adjusted for the technology industry and company size." }, "location" : "San Jose, California, United States", "locations" : [ "San Jose", "California", "United States" ], "timestamp" : "2026-06-16T02:06:50.896", "fingerprint" : "51f05dcf65de895990cb8bf7f13e008f8ca2dd443146fddb507edf569f0a5bad", "source" : "greenhouse", "language" : "en", "applyUrl" : "https://boards.greenhouse.io/incognia/jobs/4184051009?gh_jid=4184051009", "externalId" : "4184051009", "industryFunction" : { }, "structuredLocations" : [ { "city" : "San Jose", "state" : "California", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "37.3361663,-121.8905910" } ], "locationText" : "San Jose, California, United States", "experienceMinYears" : 5, "experienceMaxYears" : 10, "experienceLevel" : "Senior", "technicalSkills" : "HubSpot", "professionalSkills" : [ "Account management", "Pipeline management", "Value-based selling", "Relationship building" ], "hardSkillsList" : [ "Sales cycle management", "Prospecting", "Negotiation", "Closing deals" ], "hardSkills" : [ { "name" : "Sales cycle management", "level" : "intermediate" }, { "name" : "Prospecting", "level" : "intermediate" }, { "name" : "Negotiation", "level" : "intermediate" }, { "name" : "Closing deals", "level" : "intermediate" } ], "majorSkills" : "Digital identity, Fraud prevention, Authentication solutions, Sales pipeline generation", "majorSkillsList" : [ "Digital identity", "Fraud prevention", "Authentication solutions", "Sales pipeline generation" ], "coreResponsibilities" : "Develop account plans, Execute account plans, Identify opportunities, Generate pipeline, Conduct proactive prospecting, Conduct networking, Conduct targeted outreach, Lead sales cycle, Deliver presentations, Deliver demonstrations, Tailor solutions, Build relationships, Maintain pipeline management, Collaborate cross-functionally, Keep up with industry trends, Keep up with competitive landscape, Keep up with product updates, Attend market events", "teamCollaboration" : "Cross-functionally with presales; Cross-functionally with product; Cross-functionally with customer success; Cross-functionally with legal; Cross-functionally with finance; Cross-functionally with leadership", "domainKnowledge" : "Digital identity; Authentication; Fraud prevention; Device recognition; Location analysis; Tamper detection; Risk assessment", "domainList" : [ "digital-identity", "authentication", "fraud-prevention", "device-recognition", "location-analysis", "tamper-detection", "risk-assessment" ], "domainSpecificKnowledge" : [ "Digital identity", "Authentication", "Fraud prevention", "Device recognition", "Location analysis", "Tamper detection", "Risk assessment" ], "toolProficiency" : [ "HubSpot", "LinkedIn Sales" ], "communicationSkills" : "Value-based presentations; Demonstrations", "continuousLearning" : "Attend market events", "outcomesObjectives" : "Expand Incognia's footprint; Win new business; Improve digital onboarding; Protect reputation; Protect retention; Protect revenue", "qualificationsBasic" : "Proven track record in hunter sales, Experience in fraud prevention, Experience in authentication, Experience in digital identity, Communication skills, Discovery skills, Presentation skills, Ability to translate technical solutions into business value, Solid organizational skills, Time management skills, Experience with HubSpot or similar CRM, Familiarity with sales and productivity tools, Startup company experience, High-growth company experience", "qualificationsPreferred" : "Europe sales experience", "remoteFriendly" : false, "workSiteFlexibility" : "Remote", "rawDescription" : "Careers Check out how you can participate in our journey to create a world with safe digital experiences. Incognia is the innovator of next-generation identity solutions that enable secure and seamless digital experiences. With its persistent device fingerprint solution, Incognia combines best-in-class device recognition signals, location analysis, and tamper detection for frictionless user verification and fraud prevention. Incognia’s customizable risk assessment and actionable insights empower companies in food delivery, ride-sharing, marketplace, and financial services to protect their reputation, retention, and revenue. The opportunity: We are looking for a driven Sales Executive with a hunter mindset to expand Incognia’s footprint in the United States and Europe. This role is focused on helping companies fight fraud and improve digital onboarding through Incognia’s cutting-edge identity verification and authentication solutions. As part of our growing sales team, you’ll be responsible for building and managing a pipeline of new opportunities, driving end-to-end sales cycles, and winning new business in a fast-moving and competitive market. Day-to-day responsibilities: Develop and execute account plans to identify opportunities in fraud prevention, authentication, and digital onboarding. Generate pipeline through proactive prospecting, networking, and targeted outreach at multiple levels of the customer organization. Lead the full sales cycle: discovery, qualification, proposal, negotiation, and closing. Deliver compelling value-based presentations and demonstrations, tailoring Incognia’s solutions to customer business challenges. Build strong, trusted relationships with key decision-makers and influencers within assigned accounts. Maintain accurate and up-to-date pipeline management in the CRM (HubSpot). Collaborate cross-functionally with presales, product, customer success, legal, finance, and leadership teams to ensure seamless execution and customer success. Keep up with industry trends, the competitive landscape, and Incognia’s product updates, while attending key market events. Requirements: Proven track record in a hunter sales role; Experience in fraud prevention, authentication, or digital identity solutions; Strong communication, discovery, and presentation skills; Ability to translate technical solutions into business value for non-technical stakeholders; Solid organizational and time management skills; Experience with HubSpot or similar CRM systems; Familiarity with sales and productivity tools such as LinkedIn Sales Navigator; Startup or high-growth company experience preferred. Salary and benefits: Annual Salary - up to 380k OTE (50/50) Medical, dental, vision and life insurance Remote work stipend - Remote-first Culture 4% matching in 401(K) 22 business days PTO per year and Year-end break Paid sick leave Employee Stock Options Program (ESOP) An opportunity to grow and make an impact at a fast-scaling company with a strong, collaborative culture Recruitment process: People interview Team interview Take home Business Case Business Case Presentation Cultural Fit with CTO and CEO Incognia is committed to providing an environment of mutual respect where equal employment opportunities are available to all applicants and teammates. All applicants are encouraged to apply and won't be discriminated against because of race, color, creed, sex, sexual orientation, gender identity or expression, age, religion, national origin, citizenship status, disability, ancestry, marital status, veteran status, medical condition or any protected category prohibited by local, state or federal laws. Join us and be part of a team that values and promotes equal employment opportunities. Our Vision A world where digital trust is unseen yet part of everyday life “The most profound technologies are those that disappear. They weave themselves into the fabric of everyday life until they are indistinguishable from it.” — Mark Weiser Mark Weiser's vision, as told on the paper \"21st century computer\" was the inspiration for our founders to start building our technology. The values that moves us Ambition We don’t set limits to our achievements We improve the lives of users worldwide We solve meaningful problems for our customers We are passionate learners and idea-sharing enthusiasts Excellence We deliver excellence through consistency We feed intuition with data to drive impactful decisions We hold each other accountable to deliver outstanding results to our customers We are proactive in our collaboration and provide valuable feedback Trust We build trust by empowering users, customers and team members We are committed to privacy and user identity protection We are trusted advisors to our customers We foster a culture of ethics, inclusion and respect", "summaryDescription" : "Senior Sales Executive - Digital Identity & Authentication at Incognia. Skills: Digital identity, Fraud prevention, Authentication solutions, Sales pipeline generation. Develop account plans. Execute account plans", "postedDate" : "2026-06-14T19:04:56.801", "createdAt" : "2026-06-14T19:04:56.801", "lastUpdated" : "2026-06-16T02:06:50.896", "ingestTimestamp" : "2026-06-14T19:04:56.801", "mongoId" : "6a2c924674d8ee00a0985558", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 165000, "salaryAnnualMax" : 245000, "salaryBand" : "150k-200k", "hasSalary" : true, "allSkills" : [ "Sales cycle management", "Prospecting", "Negotiation", "Closing deals", "Digital identity", "Fraud prevention", "Authentication solutions", "Sales pipeline generation", "Account management", "Pipeline management", "Value-based selling", "Relationship building", "Authentication", "Device recognition", "Location analysis", "Tamper detection", "Risk assessment", "HubSpot", "LinkedIn Sales" ], "skillCount" : 19, "jobCategory" : "sales", "jobSubcategory" : "revenue", "seniorityLevel" : "Senior", "dataQualityScore" : 0.8888889, "_score" : 742.8128, "daysOld" : 1, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Technology", "llmIndustryConfidence" : 0.98 }, { "id" : "694ae71c70f0b99d589b58ff", "title" : "Development & Access Management Engineer II-V", "company" : "TxDOT", "industry" : "Government", "salary" : { "min" : 69572.0, "max" : 123000.0, "currency" : "USD", "frequency" : "yearly", "is_estimated" : false }, "location" : "UST-Texas-Austin-North Austin Area Engr Office", "locations" : [ "UST-Texas-Austin-North Austin Area Engr Office", "Yearly", "Exempt,
North Austin Area Engr Office (14NAUSTNAE)
1001 EAST PARMER LANE, STE B
Austin, 78753

, North Austin Area Engr Office" ], "timestamp" : "2026-06-15T22:29:14.479", "fingerprint" : "fa892a3e1374af0695e574ccae0b03ac1f0798d751c9b6ad06b3c7a45b1e6c88", "source" : "taleo", "language" : "en", "applyUrl" : "https://fa009.taleo.net/careersection/ex/jobdetail.ftl?job=42519", "externalId" : "42519", "industryFunction" : { }, "structuredLocations" : [ { "city" : "Austin", "state" : "Texas", "country" : "United States", "continent" : "na", "source" : "llm", "workMode" : "onsite", "geo" : "30.2711286,-97.7436995" } ], "locationText" : "Austin, Texas, United States", "employmentType" : "FULL_TIME", "professionalSkills" : [ "Permit application review", "Traffic impact analysis", "Construction phasing evaluation", "Proposed improvements evaluation" ], "hardSkillsList" : [ "Access management standards", "Permitting processes" ], "hardSkills" : [ { "name" : "Access management standards", "level" : "intermediate" }, { "name" : "Permitting processes", "level" : "intermediate" } ], "majorSkills" : "Development permitting, Access management, Transportation engineering", "majorSkillsList" : [ "Development permitting", "Access management", "Transportation engineering" ], "coreResponsibilities" : "Review development and access permit applications, Coordinate development and access permit applications, Assemble complete permit packages, Evaluate traffic control plans, Evaluate traffic impact analyses, Evaluate construction phasing, Evaluate proposed improvements, Deliver clear review comments, Deliver accurate review comments, Manage multiple permit applications, Maintain up-to-date tracking, Ensure submittals meet requirements, Ensure submittals include documentation, Resolve comments with stakeholders, Clarify requirements with stakeholders, Ensure consistent policy application, Provide technical guidance on permitting, Provide technical guidance on access management", "teamCollaboration" : "Work with applicants; Work with consultants; Work with TxDOT divisions; Internal stakeholders; External stakeholders", "domainKnowledge" : "State highway system; TxDOT access management", "domainList" : [ "state-highway-system", "txdot-access-management" ], "domainSpecificKnowledge" : [ "State highway system", "TxDOT access management" ], "communicationSkills" : "Review comments", "qualificationsBasic" : "Transportation Engineer II, III, IV or V experience, TxDOT access management requirements knowledge, Necessary forms and documentation submission", "remoteFriendly" : false, "workSiteFlexibility" : "Onsite", "rawDescription" : "TxDOT's Austin District North Travis Area Office is looking for a Development & Access Management Engineer (Transportation Engineer) II, III, IV or V located in Austin, Texas . The Development & Access Permitting Engineer assists with the review and coordination of development and access permit applications impacting the state highway system in Austin, Texas. This role assembles complete permit packages, evaluates traffic control plans, traffic impact analyses, construction phasing, and proposed improvements, and delivers clear, accurate review comments. The Engineer manages multiple permit applications at once, maintains up‑to‑date tracking, and ensures all submittals meet TxDOT access management requirements and include the necessary forms and documentation. The position works closely with applicants, consultants, and TxDOT divisions—such as Hydraulics, Traffic, and Environmental—to resolve comments, clarify requirements, and ensure consistent application of policies. The Engineer also provides technical guidance on TxDOT permitting processes and access management standards to both internal and external stakeholders. If you want to build an exciting career, apply for this position! This position is for ONE Development Engineer (Transportation Engineer) II, III, IV or V. The Texas Department of Transportation reserves the sole right in determining the level of position based on the applicant's work experience, education, skill level, and all other appropriate factors, and based on business needs. Salary Plan/Grade: Development & Access Management Engineer (Transportation Engineer) II: B25 ($69,572.00 - $95,000.00/yearly) Development & Access Management Engineer (Transportation Engineer) III: B26 ($76,530.00 - $101,000.00/yearly) Development & Access Management Engineer (Transportation Engineer) IV: B27 ($84,182.00 - $115,000.00/yearly) Development & Access Management Engineer (Transportation Engineer) V: B28 ($92,600.00 - $123,000.00/yearly) 69,572.00 123,000.00", "summaryDescription" : "Development & Access Management Engineer II-V at TxDOT. Skills: Development permitting, Access management, Transportation engineering. Review development and access permit applications. Coordinate development and access permit applications", "createdAt" : "2026-06-14T21:15:23.922", "lastUpdated" : "2026-06-15T22:29:14.479", "ingestTimestamp" : "2026-06-14T21:15:23.922", "mongoId" : "694ae71c70f0b99d589b58ff", "processingStatus" : "llm_updated", "llmProcessingStatus" : true, "salaryAnnualMin" : 69572, "salaryAnnualMax" : 123000, "salaryBand" : "50k-75k", "hasSalary" : true, "allSkills" : [ "Access management standards", "Permitting processes", "Development permitting", "Access management", "Transportation engineering", "Permit application review", "Traffic impact analysis", "Construction phasing evaluation", "Proposed improvements evaluation", "State highway system", "TxDOT access management" ], "skillCount" : 11, "jobCategory" : "engineering", "jobSubcategory" : "software", "seniorityLevel" : "Mid", "dataQualityScore" : 0.7777778, "_score" : 713.82684, "hasLocation" : true, "hasGeo" : true, "llmIndustry" : "Government", "llmIndustryConfidence" : 0.95 } ], "status" : 200, "message" : "OK", "pagination" : { "page" : 0, "limit" : 50, "totalCount" : 127221, "totalPages" : 2545, "hasNext" : true, "hasPrevious" : false } }

Identity And Privileged Access Management Solutions Jobs in Pune

Staff Security Engineer, Privileged Access (PAM)

Privileged Access Management(PAM) Engineer

Director, Identity & Access Management

Identity & Access Management (IAM) Apprentice

Manager, Identity & Access Management (IAM)

Identity and Access Management Engineer

Senior Identity and Access Management (IAM) Engineer

Senior Professional System Platform Engineer (w/m/d) Privileged Access Management

Professional System Platform Engineer (w/m/d) Privileged Access Management

Senior Security Engineer, Identity & Access Management

Identity & Access Management Analyst

Product Owner (w/m/d) System Engineering / Privileged Access Management

Identity Access Management (IAM) Engineer

Software Development Engineer - AWS Identity & Access Management, AWS Identity

Systems Development Engineer - Identity, Cryptography and Identity Management

Cybersecurity Consultant (Access & Identity)

Identity & PAM Security Engineer

Identity and Access Management Engineer

Identity and Access Management Engineer

Identity & Access Management Specialist - AI Trainer - Freelance

Identity & PAM Security Engineer

Senior Engineer - Privileged Access Management

Senior Identity and Access Management Engineer

Identity Senior Solution Specialist -On-Premises & Hybrid Access

Senior Software Development Engineer, AWS Identity and Access Management

Cybersecurity Analyst - Privileged Access Management

Senior Software Dev Engineer - AWS Identity Access Management, AWS IAM Propagation

Software Development Manager - AWS Identity & Access, AWS IAM Identity Center

Software Development Engineer - AWS Identity Access Management, AWS IAM Propagation Org Propagation & Integrity

Identity & PAM Security Engineer

Identity & PAM Security Engineer

Staff Software Engineer – Identity & Access Management Platform

Senior PMT, Ads Agent Identity and Authorization Infrastructure

Identity & PAM Security Engineer

Officer-Identity & Access Management Infrastructure Analyst

Senior Staff Software Engineer – Identity & Access Management Platform

Senior Manager, Value and Access Solutions

Senior Staff Software Engineer – Identity & Access Management Platform

Staff Engineer (Identity Team)

Software Development Engineer - AWS Identity Access Management, AWS IAM Propagation Integrity

Senior IAM Identity & Access Management (IAM) Engineer

Systems Development Engineer, Cryptography and Identity Management

Systems Development Engineer, Cryptography and Identity Management

Senior Staff Software Engineer – Identity & Access Management Platform

Member of Technical Staff (MTS), Software Engineer, Identity & Access Management

Solutions Consultant

Director of Market Access Solutions

Information Security Engineering Manager

Senior Sales Executive - Digital Identity & Authentication

Development & Access Management Engineer II-V

Common Questions