Sr. Identity and Access Management (IAM) Engineer

Prosper•San Francisco, CA

9d•$152,000 - $169,000

About The Position

We're looking for a Sr. Identity and Access Management (IAM) Engineer with a strong passion for security automation, identity governance, and modern infrastructure engineering. Joining Prosper's Corporate IT team, you will partner closely with our InfoSec and Systems Engineering teams, as well as stakeholders across the broader business, to proactively secure, automate, and streamline user access pathways for both our corporate applications and developer systems. Join our expanding team of skilled IT professionals dedicated to innovating and securing Prosper's platforms, utilizing state-of-the-art automation tools for the benefit of our customers, business, and employees. Reporting to the Senior Manager, Corporate IT, you will manage our identity and access management infrastructure, ensuring secure, seamless provisioning for all employees and championing an Identity-as-Code culture through automated workflows. We seek a proactive individual who thrives in a creative, regulated environment, excels at translating complex requirements into actionable objectives, and is passionate about refining modern security automation.

Requirements

5+ years of hands-on experience in information security, cloud operations, or identity engineering, operating within a highly regulated fintech or financial services environment.
Deep structural understanding and practical experience defining, implementing, and maintaining RBAC and ABAC frameworks for comprehensive identity governance.
Active Okta certification (Okta Certified Professional or Okta Certified Administrator) with deep, practical knowledge of managing Okta enterprise platforms, Workflows, and core integration patterns (SCIM, JIT, OAuth, SWA).
Proficiency writing declarative cloud configurations in Terraform, with a clear understanding of branching and deployment strategies in GitHub.
Familiarity with modern deployment lifecycles and CI/CD automated pipeline workflows.
Strong administrative comfort and integration depth spanning enterprise directory systems.
A creative, problem-solving mindset with a demonstrated ability to break high-level projects down into clear, manageable milestone driven tasks.
Familiarity or curiosity surrounding AI agents and productivity tooling, aligning with an approach to secure, forward-thinking AI adoption.
Excellent collaboration and communication skills, with the ability to explain identity risk clearly and coordinate solutions transparently across cross-functional groups.

Responsibilities

Design, build, and maintain low-friction automated identity and lifecycle management solutions natively within Okta Workflows and Lumos to further automate employee lifecycle management.
Take ownership of programmatic identity configurations using Terraform, integrating access policies and group memberships directly into GitHub-driven CI/CD pipelines to ensure controls are consistent and auditable.
Act as a creative problem solver, partnering across Information Security, GRC, and core engineering teams to translate complex technical and regulatory requirements into structured quarterly objective tasks.
Apply continuous Security by Design principles across our primary directories and access points, ensuring identity boundaries align with regulatory frameworks like PCI-DSS, SOC, and NIST without creating additional end-user friction.
Implement and scale robust RBAC (Role-Based Access Control) and ABAC (Attribute-Based Access Control) frameworks to optimize single sign-on (SSO), multi-factor authentication (MFA), and lifecycle access policies across Google Workspace, the Atlassian cloud suite, and internal core business applications using modern federation and auth standards (OAuth, SWA, SAML, JIT).
Securely evaluate and integrate cutting-edge, AI-first developer tools and environments (e.g., Cursor, Antigravity, Claude Code), ensuring compliance guardrails remain airtight while enabling forward-thinking engineering velocity.