Work Across
Get started
All jobs
Save

Senior Security IAM Engineer

Scopely
Contract type
Ongoing
Work mode
Remote
Experience
Senior · 8+ years

Job description

Senior IAM Security Engineer to build, scale, and secure Scopely's identity and access management ecosystem across cloud, SaaS, AI, and remote access environments, with emphasis on Terraform-based IAM automation, access workflow engineering, least-privilege design, and AI-assisted operational workflows.

At a glance

Employment
Full-time
Work mode
Remote

What you'll do

  • Design and evolve IAM architecture for a high-scale, cloud-first environment across AWS, GCP, SaaS applications, AI tooling, and remote access platforms
  • Lead initiatives around federated identity architecture using SAML, OIDC, OAuth, and SCIM, least-privilege role design, RBAC and ABAC models, centralized access models, secure cross-account and cross-project access, service account and non-human identity governance, and Zero Trust identity and access control design
  • Partner with engineering, infrastructure, and security teams to standardize secure identity and access patterns, reduce identity sprawl and excessive permissions, and improve access visibility and auditability
  • Own and improve Terraform-based IAM and access automation across Scopely's cloud and identity environment
  • Design, build, and maintain reusable Terraform modules for IAM roles, policies, permission sets, group mappings, and access patterns, plus Terraform workflows for Okta app assignments and IAM Identity Center automation
  • Ensure mature Terraform engineering practices around state management, drift detection and remediation, rollback planning, blast-radius awareness, and safe promotion of access changes into production
  • Build scalable automation for identity lifecycle management, access requests, entitlement changes, access reviews, and day-to-day IAM operations
  • Design and implement provisioning and deprovisioning automation, access request and approval workflows, group-based access assignment, Okta app integration automation, IAM Identity Center permission set automation, and self-service identity workflows
  • Lead initiatives to reduce identity-related risk across human and non-human identities, including excessive permissions reduction, service account hardening, long-lived credential reduction, permission boundary enforcement, JIT and time-bound privileged access, and break-glass workflows
  • Use native and third-party tooling such as AWS IAM Access Analyzer, CloudTrail, GuardDuty, GCP-native IAM and audit services, Okta System Log, and CIEM/CSPM platforms to identify and remediate risk
  • Support and enhance Twingate connectors, resources, and access policy design, identity-aware remote access controls, Zero Trust segmentation, privileged access workflows, PAM platform integrations such as Britive, MFA and passwordless adoption, and secure vendor and contractor access patterns
  • Build and enhance IAM troubleshooting runbooks, identity-related detection and triage workflows, access review processes, permission reporting and evidence collection, and IAM logging and monitoring design
  • Support investigations involving suspicious access activity, identity and permission abuse, misconfigured app integrations, broken federation and provisioning flows, risky SaaS integrations, service account misuse, and cross-account access issues
  • Collaborate with compliance and audit stakeholders to ensure SOC 2 and ISO 27001 alignment, access review evidence readiness, and documentation of IAM controls and workflows
  • Design and improve AI-assisted and automation-first workflows, including AI-assisted access review analysis, intelligent triage, security chatops integrations, identity workflow automation using agents, and internal copilots for IAM operations
  • Ensure safe adoption of AI by applying human-in-the-loop approval controls, least-privilege access to tools and data, logging and auditability, prompt and data handling safeguards, and clear separation between recommendations and privileged actions
  • Act as a technical leader, providing expert guidance on modern IAM architecture, federated identity design, least-privilege engineering, Zero Trust access models, non-human identity risk, IAM automation strategy, and Terraform design patterns
  • Influence teams to adopt secure identity patterns, automate IAM safely, reduce reliance on manual access processes, and improve cloud and SaaS access consistency

What we're looking for

  • 8–12+ years in IAM security engineering, cloud security, identity architecture, or related security engineering roles
  • Strong experience operating in cloud-first, high-scale environments
  • Experience partnering directly with engineering, infrastructure, and security teams
  • Experience designing and operating IAM solutions for global organizations with complex access needs
  • Strong track record in identity modernization, least privilege, and access automation
  • Proven experience building automation and reusable engineering patterns, not just handling manual IAM operations
  • Strong hands-on experience with AWS IAM, AWS Organizations, IAM Identity Center, SCPs, IAM roles and policies, CloudTrail, GuardDuty, IAM Access Analyzer, SSM
  • Strong hands-on experience with GCP IAM, service accounts, workload identity patterns, organization/folder/project models, and audit services
  • Okta administration including groups, rules, app integrations, assignments, lifecycle management, and troubleshooting
  • SAML, OIDC, OAuth, SCIM, and federated identity design
  • Cross-account and cross-project access controls
  • Service account and workload identity governance
  • Twingate administration or comparable ZTNA and remote access platforms, including connectors, resources, access policies, and policy troubleshooting
  • Strong hands-on experience with Terraform-based IAM and access automation in production
  • Designing reusable Terraform modules for IAM roles, policies, permission sets, group mappings, and access patterns
  • Terraform state management, drift detection, rollback planning, and safe deployment of IAM changes
  • Git-based workflows, pull requests, and code review for infrastructure and identity changes
  • Python, Bash, PowerShell, or similar scripting languages
  • API integrations and workflow automation
  • Provisioning and deprovisioning automation
  • Access reporting and policy standardization
  • CI/CD integration for identity-related workflows
  • Strong understanding of policy-as-code and automation-first IAM, converting manual IAM processes into reusable code-driven workflows, and safe production change practices
  • Experience or strong interest in Claude Code, Codex, and similar AI-assisted engineering tools
  • Experience or strong interest in MCP integrations and agent-based automation workflows

Your team

Information Security

Apply

Save