Enterprise IAM Software Engineer II

What You’ll Do

• Support the daily operations of our enterprise IAM program, including intake, triage, and execution of access lifecycle work
• Run and improve core IAM processes (joiner/mover/leaver, access requests, certifications, and break-glass patterns)
• Partner with Security, IT, and Engineering stakeholders to coordinate changes with clear ownership, approvals, and auditability
• Troubleshoot and resolve IAM-related issues, including access failures, provisioning bugs, and workflow errors
• Write and maintain scripts and small services that automate repetitive IAM tasks and reduce manual effort
• Contribute backend code and bug fixes in our IAM automation codebase (including tests and safe rollout practices)
• Help document runbooks, standard operating procedures, and operational metrics for the program
• Participate in on-call or escalation rotations as needed for IAM-owned systems

Example problems you may work on:

• Debugging a provisioning workflow that intermittently fails and adding monitoring + automated retries
• Writing a script to reconcile access between source systems and SailPoint
• Improving a Jira intake workflow so requests are validated and routed correctly before execution
• Building a small API integration to connect an internal system to identity lifecycle events

What We’re Looking For

• 2+ years of professional software engineering experience (or equivalent internship/co-op experience with strong projects)
• Ability to write production-quality code in Python or a similar backend language
• Comfort working with operational processes, tickets/requests, and cross-functional stakeholders
• Experience with APIs, scripting, and debugging distributed systems issues
• Familiarity with CI/CD and GitHub-based workflows
• Familiarity with cloud environments (AWS preferred)
• Strong written communication and documentation habits

Nice to Have

• Any exposure to IAM/IGA/SSO concepts (e.g., SAML/OIDC, SCIM, RBAC)
• Experience with SailPoint, Auth0, Okta, OneLogin, or similar identity platforms
• Experience with infrastructure as code (Terraform or similar)
• Familiarity with compliance/audit-driven environments (SOC 2, SOX, ISO, PCI)