Senior Security Software Engineer, IAM - Moveworks

ServiceNow•Mountain View, CA

2d•Remote

About The Position

Moveworks is seeking a Senior Identity & Access Management (IAM) Engineer to shape the future of their identity and access strategy. This role is for someone who cares deeply about secure access at scale, ensuring the right people have the right access at the right time without slowing teams down. Moveworks believes great security is an enabler, not a blocker. As a hands-on technical developer, you will be responsible for coding, designing, building, and scaling IAM solutions across cloud infrastructure, SaaS applications, and internal systems. You will own the end-to-end development of IAM initiatives, from untangling ambiguous access challenges to architecting secure, automated solutions and driving them into production. Your work will involve developing robust access models across AWS, Azure, Kubernetes, and beyond; reducing privilege sprawl through thoughtful role design; and building strong observability through logging, metrics, and reporting in their SIEM. You will also modernize access reviews to deliver real security impact with minimal friction, continuously de-risk IAM threats, and partner closely with teams to drive adoption of secure-by-default patterns. Your work will directly protect Moveworks’ most critical systems while enabling engineers to move fast, safely, and confidently. ServiceNow, a global market leader, acquired Moveworks in December 2025, combining ServiceNow’s leading workflow automation with Moveworks’ Reasoning Engine and natural language capabilities to deliver an AI platform for every person and every workflow.

Requirements

5+ years of experience developing and maintaining IAM products/tools.
Automation-first mindset: Experience writing production-ready scalable software, Infrastructure as Code, and using AI coding tools to build reliable automation.
IAM Expertise: Strong grasp of IAM best practices, techniques, and common failure modes (e.g., least privilege, privilege escalation paths, separation of duties, breakglass, auditability). Ability to spot dangerous permissions and identify suitable mitigations and controls.
BS+ in computer science or a related field, or equivalent relevant experience.

Nice To Haves

US Citizenship preferred

Responsibilities

Be the technical developer to drive IAM application development: Code, design, and implement solutions with extensive knowledge in AWS, Azure, Teleport, and Terraform. Enabling robust and reliable solutions to keep our engineering teams active.
Drive IAM projects end-to-end: Take ambiguous access problems, understand and have the ability to define requirements, architect solutions, and own the rollout/operationalization (not just the design).
Develop with secure access models in mind: Continuously develop role design improvements and access assignment patterns across AWS, Kubernetes, SaaS apps, and internal systems to reduce unnecessary privileges, minimize manual grants, and create scalable “safe baseline” access that covers routine work without daily elevation.
Develop on operationalizing logging and metrics: Ensure access changes are observable in our Security Information and Event Management (SIEM) tool; build repeatable reporting that surfaces risky access and drift.
Run and improve user access reviews (UAR): Develop, execute and design a UAR process & solution that meets compliance requirements while improving real security signal—minimizing approver burden through scoping, automation, and clear decision support.
Develop technology to continuously de-risk: Identify high-risk permissions and misuse paths, propose appropriate controls and mitigations, drive adoption with partner teams, and develop solutions to continuously de-risk.
Operate with strong security judgment and high signal: Reliably distinguish meaningful IAM risk from noise, gather context efficiently, and escalate with crisp rationale and actionable mitigations.
Document and standardize the paved road: Write lightweight procedures, runbooks, and automation so access decisions are consistent, scalable, and not dependent on tribal knowledge.