Staff Engineer, Identity & Access Management (IAM)

Recursion•Salt Lake, UT

2d•Hybrid

About The Position

In this role, you will assess our current state of IAM and revamp our IAM strategy across our products, platforms, cloud/on-premise infrastructure, and corporate applications to accelerate key business outcomes. You will drive IAM implementation as part of our larger zero-trust security strategy, architect and design cloud-based identity governance, access management, and cloud directory solutions. You will implement RBAC/ABAC based IAM workflows for onboarding and ongoing identity lifecycle management. You will act as a key technical and strategic advisor for cross-functional teams including IT, security, and development to ensure that IAM principles are integrated into broader security architecture. You will partner with Engineering and IT teams to ensure our products and applications are developed and implemented with fine-tuned access privileges and are appropriately risk-managed. You will establish well-defined KPIs, KCIs, and KRIs that provide visibility into IAM control effectiveness and support continuous improvement. You will ensure regulatory compliance by partnering with other teams to design IAM solutions that meet standards for SOX, GxP, etc.

Requirements

Bachelor's or Master's degree in Computer Science, Information Security, or a related field.
A minimum of 7 years of experience in Identity & Access Management and other information security related domains.
Deep understanding of security principles and proven track record of successfully leading large-scale IAM projects from strategy to execution, particularly within cloud-first and hybrid environments.
Expertise in one or more programming languages (e.g., Java, C++, Python) as they relate to IAM products.
Expert level experience in one or more of the leading Enterprise Identity Administration & Governance solutions
Expert level Experience in Adaptive Authentication, OAuth, OpenID, SAML etc.
Expert level experience with the identity stack like Enterprise Active Directory as well as experience working with IAM products in the cloud like Okta, AWS, Azure AD, Duo or equivalent
Expert level experience with privileged access management solutions (e.g., Delinea, CyberArk).
Knowledge of operating systems (UNIX/Linux, macOS, Windows) and of database management systems
Excellent communication and leadership skills, capable of driving security initiatives and influencing change across multiple teams and disciplines.
Act as a Business Systems Analyst and articulate and elicit requirements and use-cases in a manner that is technology agnostic
A continuous improvement mindset, staying up to date with the latest IAM trends and technologies to drive innovation within the organization.
Experience with risk management, ensuring that IAM solutions are aligned with organizational risk tolerance and compliance requirements.

Nice To Haves

Relevant security certifications (e.g., CISSP, OSCP, GWAPT) are highly desirable.

Responsibilities

Assess our current state of IAM and revamp our IAM strategy across our products, platforms , cloud/on-premise infrastructure and corporate applications to accelerate key business outcomes.
Drive IAM implementation as part of our larger zero-trust security strategy
Architect and Design cloud-based identity governance, access management and cloud directory solutions
Implement RBAC/ABAC based IAM workflows for onboarding and ongoing identity lifecycle management
Act as a key technical and strategic advisor for cross-functional teams including IT, security, and development to ensure that IAM principles are integrated into broader security architecture.
Partner with Engineering and IT teams to ensure our products and applications are developed and implemented with fine-tuned access privileges and are appropriately risk
Establish well-defined KPIs, KCIs, and KRIs that provide visibility into IAM control effectiveness and support continuous improvement.
Ensure regulatory compliance by partnering with other teams to design IAM solutions that meet standards for SOX, GxP, etc.