Senior Security Software Engineer, IAM - Moveworks

ServiceNow • Mountain View, CA

1d

About The Position

Moveworks is seeking a hands-on IAM technical developer to shape its identity and access strategy. The engineer will design, build, and scale identity and access management solutions across cloud infrastructure, SaaS applications, and internal systems, owning initiatives from ambiguous access challenges through architecture, implementation, rollout, and operationalization. The role focuses on secure access across AWS, Azure, Kubernetes, and other environments; reducing unnecessary privileges through improved role design; and making access activity observable through SIEM logging, metrics, and reporting. The engineer will improve user access reviews, identify and mitigate IAM threats, and collaborate with partner teams to promote secure-by-default patterns. The work protects critical systems while enabling engineers to work safely and efficiently. The role also includes documenting procedures, runbooks, and automation to make access decisions consistent and scalable.

Requirements

• At least 5 years of experience developing and maintaining IAM products or tools.
• Experience writing production-ready, scalable software.
• Experience with Infrastructure as Code.
• Strong understanding of IAM best practices, techniques, and common failure modes, including least privilege, privilege escalation paths, separation of duties, breakglass, and auditability.
• Ability to identify dangerous permissions and appropriate mitigations and controls.
• BS or higher in computer science or a related field, or equivalent relevant experience.

Nice To Haves

• U.S. citizenship is preferred.
• Experience using AI coding tools to build reliable automation.

Responsibilities

• Drive IAM application development by coding, designing, and implementing solutions using AWS, Azure, Teleport, and Terraform.
• Own IAM projects end-to-end, from defining requirements for ambiguous access problems through solution architecture, rollout, and operationalization.
• Develop role designs and access assignment patterns across AWS, Kubernetes, SaaS applications, and internal systems to reduce unnecessary privileges, manual grants, and routine access friction.
• Operationalize access logging and metrics in the SIEM and build repeatable reporting to surface risky access and access drift.
• Design, develop, and execute a user access review process and solution that meets compliance requirements and improves security signal while reducing approver burden through scoping, automation, and decision support.
• Identify high-risk permissions and misuse paths, propose controls and mitigations, drive adoption with partner teams, and develop solutions for continuous risk reduction.
• Assess IAM risk, gather context, distinguish meaningful risk from noise, and escalate with clear rationale and actionable mitigations.
• Document and standardize access processes by creating lightweight procedures, runbooks, and automation.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior