Staff IAM Engineer

CLEAR - Corporate•New York, NY

3h•$200,000 - $240,000•Onsite

About The Position

As a Staff IAM Engineer on the Enterprise Security team, you will design, build, and scale our core identity infrastructure. You take ownership of complex technical challenges and adapt to constraints to deliver reliable access controls. We are looking for an engineer who combines independent execution with the ability to partner closely across the security organization to build secure, frictionless identity solutions. In this role, you will be instrumental in maturing our Identity and Access Management posture, acting as a key technical driver and subject matter expert for our core identity platforms.

Requirements

8+ years of hands-on experience in Identity and Access Management and Security Engineering.
Deep administrative and architectural proficiency with Okta (SSO, lifecycle management, advanced workflows) and SailPoint (identity governance, access certifications).
Strong background securing AWS access (IAM policies, roles, SCPs, AWS IAM Identity Center).
Solid coding/scripting abilities (Python, Bash, etc.) to build automations and work with REST APIs.
Relentless perseverance and a self-starter attitude. You push through obstacles, drive issues to resolution despite setbacks, and don't wait for instructions to find vulnerabilities or solve operational inefficiencies.

Nice To Haves

Hands-on experience with Terraform is a strong plus.

Responsibilities

Lead the engineering, architecture, and scaling of our core identity platforms, specifically Okta and SailPoint.
Design and implement robust, least-privilege access controls across our AWS environments, FedRAMP boundaries, and corporate infrastructure.
Drive automation across the IAM lifecycle by writing custom scripts and integrating APIs to eliminate manual toil.
Leverage Infrastructure as Code (Terraform) to deploy and manage security configurations consistently.
Take the technical lead on major IAM initiatives, navigating roadblocks and driving projects from design through deployment.
Troubleshoot complex identity workflows, federation issues, and access anomalies.