Principal Identity Engineer – Cloud IAM, CIAM

This is a fully remote position, open to applicants in California.

📋 Description

• Take ownership of the enterprise IAM strategy and target-state architecture across Microsoft Entra, AWS, and Google Cloud (OCI experience is a plus).

• Create secure and scalable identity patterns for workforce, partner, and customer access that meet security, risk, and compliance standards.

• Design and implement a Zero Trust identity model featuring continuous verification, risk-based access, and adaptive authentication.

• Minimize standing privileges by employing least privilege design, just-in-time (JIT) access, and standardized entitlement frameworks.

• Engage in hands-on design and implementation of IAM capabilities, including SSO, MFA, identity lifecycle management, federation, and privileged access across cloud and hybrid systems.

• Lead modernization initiatives, which include migrating from hybrid Active Directory to Entra ID-based authentication.

• Develop and enhance customer identity (CIAM) solutions that support web, mobile, and API platforms.

• Maintain a balance between security, privacy, performance, and customer experience while facilitating scalable enterprise integrations.

• Establish IAM governance frameworks that encompass access lifecycle, RBAC/ABAC models, access reviews, and audit evidence.

• Create measurable controls, documentation standards, and ongoing review processes to guarantee audit readiness.

• Define and spearhead an enterprise IAM-as-Code initiative utilizing Terraform and GitHub.

• Build reusable, versioned modules and implement PR-based workflows with auditability, approvals, and security guardrails.

• Engineer secure CI/CD pipelines for IAM deployments, incorporating validation, testing, approvals, drift detection, and rollback strategies.

• Ensure dependable, auditable identity changes with operational monitoring and clear runbooks.

• Develop automation using Python, Bash, and JSON to scale identity operations and mitigate manual risks.

• Assist with policy management, bulk changes, integrations, and identity-related incident response and diagnostics.

⛳️ Requirements

• Extensive hands-on experience in designing and managing identity platforms at scale within complex environments.

• Advanced knowledge of Microsoft Entra ID, AWS IAM, and Google Cloud IAM, with OCI experience being advantageous.

• Proven capability to design cloud-agnostic IAM models and implement them uniformly across platforms.

• Strong expertise in IAM security architecture, governance, and risk-based access controls.

• Practical experience with least privilege design, JIT access, Zero Trust identity, and RBAC/ABAC models.

• In-depth understanding of OAuth 2.0, OpenID Connect, and SAML.

• Proven track record in delivering enterprise-scale SSO and MFA solutions.

• Demonstrated experience in establishing IAM-as-Code using Terraform with GitHub-based change management.

• Strong scripting and automation capabilities in Python, Bash, and JSON, including CI/CD and guardrail design.

• Experience in architecting and managing customer identity platforms for portals, mobile applications, and APIs.

🏝️ Benefits

• Medical insurance

• Dental insurance

• Vision insurance

• 401k

• PTO/paid sick leave

• Employee stock purchase plan