Identity and Access Management (IAM) Engineer

In this hands-on IAM Engineer role, you design and mature identity platforms to scale securely across the firm. You bridge security and engineering, turning strategy into practical, capable solutions for developers, researchers, and infrastructure teams. You will implement secure authentication, authorization, and secrets management while promoting secure identity practices. This role offers impact through building scalable IAM capabilities and aligning them with evolving business needs, in a collaborative, security‑driven environment.

• Design and implement scalable, secure IAM platforms
• Deliver secrets management solutions with secure storage, rotation, and auditability
• Build user-to-service and service-to-service authentication using modern standards
• Implement standards-compliant identity providers and federation (OAuth 2.0, OpenID Connect, SAML)
• Develop fine-grained, policy-based access control to support least-privilege and zero-trust
• Promote IAM reference architectures and reusable patterns across teams
• Translate identity and security risks into actionable engineering requirements
• Mature IAM capabilities across the organization and identify improvements across security domains

• 5+ years of hands-on IAM or security engineering in production
• Experience implementing secrets management and modern authentication/authorization systems
• Understanding of IAM architectures, security design principles, and trade-offs
• Strong knowledge of IAM technologies, protocols, and troubleshooting identity flows
• Experience with security best practices, attack vectors, and cloud environments
• Systems knowledge: Linux/Unix, networking, Kubernetes, cloud security concepts
• Ability to translate risks into technical guidance for stakeholders
• Proficiency in Python
• Degree in Engineering, Computer Science, or STEM field

• strong collaboration across cross-functional teams
• proactive and motiv-driven attitude
• clear communication of risks, trade-offs, and mitigations
• IAM platform design and implementation
• secrets management
• OAuth 2.0