Security Engineer, IAM

Talent Systems•,

3d•Onsite

About The Position

The Security Engineer, IAM will design, implement, and manage Identity and Access Management systems across Talent Systems' global technology stack. This role sits within the Corporate IT team and is critical to ensuring that the right people have the right access to the right resources and that unauthorized access is proactively detected and prevented. You will work cross-functionally with Engineering, Product, Security, and HR teams to build scalable, secure, and compliance-aligned identity infrastructure that supports our global platforms and workforce.

Requirements

4+ years of hands-on experience in IAM engineering, identity security, or a closely related field
Proficiency with IAM protocols: SAML, OAuth 2.0, OpenID Connect, LDAP, SCIM
Experience administering an enterprise identity provider (e.g., Okta, Azure AD / Entra ID, Google Workspace Identity, or equivalent)
Solid understanding of RBAC, least-privilege, and zero-trust principles
Familiarity with compliance frameworks including SOC 2 Type II, GDPR, and ISO 27001
Excellent written and verbal communication skills; able to explain complex identity concepts to non-technical stakeholders

Nice To Haves

Experience with Privileged Access Management (PAM) tools (e.g., CyberArk, BeyondTrust, HashiCorp Vault)
Demonstrated ability to script and automate IAM workflows using Python, PowerShell, Bash, or similar
Hands-on experience with cloud IAM (AWS IAM, GCP IAM, or Azure RBAC)
Background in SaaS or multi-tenant platform environments with complex user hierarchy management
Exposure to entertainment, media, or marketplace platform security
Experience working in a globally distributed team across multiple time zones

Responsibilities

Design, deploy, and maintain IAM solutions including SSO, MFA, RBAC, and PAM across cloud and on-premise environments
Architect and manage identity federation using protocols such as SAML, OAuth 2.0, and OpenID Connect
Build and maintain lifecycle management processes for user provisioning, de-provisioning, and access reviews
Integrate IAM systems with SaaS platforms (Google Workspace, Slack, GitHub, Zendesk, and others) and internal applications
Develop and maintain automation for access request workflows and entitlement management
Conduct periodic access reviews and certification campaigns to ensure least-privilege principles are enforced
Monitor IAM systems for anomalous activity, access violations, and policy drift; respond to and remediate incidents
Support audit and compliance activities related to SOC 2, PCI-DSS, GDPR, and other applicable frameworks
Define and enforce IAM policies, standards, and procedures in alignment with industry best practices
Collaborate with the Information Security Office to evaluate and close identity-related vulnerabilities
Partner with Engineering and DevOps teams to embed IAM controls into CI/CD pipelines and cloud infrastructure
Work with IT Team to align identity processes with endpoint and network security policies
Support onboarding, offboarding, and role-change workflows in coordination with People Operations
Participate in cross-functional planning to surface IAM-related risks, roadmap items, and quarterly priorities