Intern, Identity and Access Management Engineer

SoFi University • San Francisco, CA

4h • Hybrid

About The Position

We are seeking an IAM Engineering Intern to join SoFi’s Identity and Access Management (IAM) Engineering team and gain hands-on experience helping secure and scale SoFi’s workforce identity infrastructure. This internship offers the opportunity to work within a security-focused engineering team, helping protect SoFi’s members and data while learning from experienced IAM engineers.
The IAM Engineering team is responsible for scaling the identity security of our workforce through automating authentication (SSO) and authorization processes. As an IAM Intern, you will work closely with IAM Engineers as well as cross-functional partners in IT and Business Application administration to gather requirements, automate manual processes, and improve operational effectiveness.
In this role, you’ll be exposed to modern security principles where identity is the new perimeter that secures cloud applications. You will learn how a modern fintech organization implements Zero Trust principles at scale to protect SoFi's members and data. This is a hands-on, learning-focused role designed to build foundational skills in identity engineering, automation, and secure authentication.

Requirements

• Enrolled in an accredited US-based university (working towards a Bachelor’s or Master’s degree) with an expected graduation date of December 2026 or Spring 2027
• Must be returning to school for at least one quarter or semester after the internship
• Have no more than 12 months of professional full-time work experience (excluding internships and research assistant roles)
• Must be willing to relocate to San Francisco Bay Area and be available to work in the San Francisco HQ office at a hybrid capacity (2-3x a week)
• Foundational understanding of cybersecurity concepts related to Authentication, Authorization, and Accounting.
• Experience or coursework involving REST APIs (ability to understand and interact with API endpoints).
• Familiarity with Multifactor authentication types, such as Passkeys and Time-based One Time Passcodes (TOTP)
• Interest in low code and/or pro-code automation tools
• Ability to analyze and interpret logs and alerts to identify success and failures in automated workflows
• Good written and verbal communication skills, with the ability to document findings clearly.
• Ability to work collaboratively as part of a team while taking ownership of assigned tasks.

Nice To Haves

• Hands-on experience through labs, coursework, personal projects, or internships related to Identity Providers (IdP) such as Okta, Azure AD/Entra ID, or Google Workspace.
• Familiarity with low-code/no-code automation or SOAR tools (e.g., Okta Workflows, Tines, Zapier).
• Basic understanding of authentication protocols like SAML, OIDC, and OAuth.
• Exposure to cloud platforms (AWS, Azure, or GCP).
• Basic scripting or programming exposure (e.g., Python, Java, or Bash).
• Knowledge of Information Systems and how security integrates with business operations.
• Relevant entry-level certifications or coursework (e.g., Security+, CCNA, cloud fundamentals).

Responsibilities

• Assist with connecting business applications to Okta using standards-based protocols such as SAML and OIDC for secure, seamless authentication.
• Support the implementation of User Lifecycle Management by connecting applications to Okta via the SCIM protocol.
• Help build and maintain direct API connections to various SaaS applications to automate user management using low-code platforms like Okta Workflows.
• Partner with cross-functional teams in IT and Business Application administration to gather requirements for new integrations.
• Contribute to troubleshooting and optimizing existing identity workflows to improve operational efficiency.
• Learn to apply Role-Based Access Control (RBAC) and Least Privilege principles across a complex, enterprise-scale environment.
• Document technical configurations and workflow processes to support IAM governance and compliance.

Benefits

• Access to senior leadership, including exclusive Q&A sessions with executives across all functions of SoFi
• Exclusive opportunities to deliver a case study to SoFi leaders
• Development sessions for career, financial, and professional growth
• Opportunities to participate in company wide events like All-Hands and SoFi circles programming
• Networking socials to connect with fellow interns
• SoFi swag giveaways
• Personalized Mentorship Program
• Fully stocked kitchen (snacks & drinks)

What This Job Offers

• Career Level: Intern