Senior Security Software Engineer, IAM - Moveworks

ServiceNow • Mountain View, CA

12h

About The Position

Moveworks is seeking a hands-on Senior Identity & Access Management Engineer to help shape its identity and access strategy. The engineer will code, design, build, and scale IAM solutions across cloud infrastructure, SaaS applications, and internal systems, owning initiatives end-to-end from ambiguous access challenges through architecture, implementation, rollout, and operationalization.

The role develops secure access models across AWS, Azure, Kubernetes, and other systems; improves role design to reduce unnecessary privileges; and builds observability through SIEM logging, metrics, and reporting. It also modernizes user access reviews, continuously addresses IAM threats, and partners with teams to encourage secure-by-default practices. The work protects critical systems while enabling engineering teams to operate efficiently and safely.

Requirements

• At least 5 years of experience developing and maintaining IAM products or tools.
• Experience writing production-ready, scalable software.
• Experience with Infrastructure as Code.
• Experience using AI coding tools to build reliable automation.
• Strong understanding of IAM best practices, techniques, and common failure modes, including least privilege, privilege escalation paths, separation of duties, break-glass access, and auditability.
• Ability to identify dangerous permissions and suitable mitigations and controls.
• Bachelor of Science or higher in computer science or a related field, or equivalent relevant experience.

Nice To Haves

• U.S. citizenship is preferred.

Responsibilities

• Code, design, and implement IAM application solutions using AWS, Azure, Teleport, and Terraform.
• Own IAM projects end-to-end, including defining requirements, architecting solutions, and managing rollout and operationalization.
• Improve role design and access assignment patterns across AWS, Kubernetes, SaaS applications, and internal systems to reduce unnecessary privileges and manual grants.
• Create scalable baseline access for routine work while limiting the need for daily elevation.
• Make access changes observable in the SIEM and build repeatable reporting to identify risky access and access drift.
• Design, develop, and execute user access review processes and solutions that meet compliance requirements and improve security signal while reducing approver burden.
• Identify high-risk permissions and misuse paths, recommend controls and mitigations, and drive adoption with partner teams.
• Apply sound security judgment to distinguish meaningful IAM risks from noise, gather relevant context, and escalate with clear rationale and actionable mitigations.
• Document and standardize access practices through lightweight procedures, runbooks, and automation.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior