Systems Engineer - IAM

Replit•Foster City, CA

1d•Hybrid

About The Position

We are looking for a Senior/Staff Systems Engineer - IAM to secure identities including end user accounts, service accounts, application identities, APIs, AI agents, and automated workloads across Replit’s IT environment. The successful candidate will assess our current state of IAM and design a modern and scalable access strategy across our cloud-first infrastructure. The ideal candidate combines deep technical expertise, operational rigor, and a customer first mindset.

Requirements

8+ years experience in identity and access management tools and platforms with at least 5 years of hands on Okta experience
Expert in authentication and federation technologies (SSO, SAML, OAuth/OIDC, SCIM)
Deep knowledge of identity lifecycle management and access governance within HRIS and SaaS platforms
Proficient in one or more workflow automation platforms such as Workato, Zapier, Okta Workflows, or equivalent
Experience deploying Infrastructure as Code with tools such as Terraform, Google Cloud Deployment Manager, AWS Cloud Formation
Strong communications skills with the ability to convey IAM concepts to a non-technical audience
Demonstrated experience serving as a technical advisor for cross functional teams to ensure IAM integrates into a wider security strategy

Nice To Haves

Active Replit user and passionate about making software creation more accessible
Strong understanding of networking and networking concepts
Been part of a rapid growth SaaS startup

Responsibilities

Serve as the technical owner of Replit’s corporate IT identity architecture
Design and implement scalable authentication and authorization solutions (SSO, phishing resistant MFA, passwordless, tokens, device trust, zero trust).
Architect lifecycle management workflows to support a rapid growth corporate IT environment
Evaluate technologies to protect against current and emerging threats
Partner with internal teams to implement and maintain provisioning/deprovisioning workflows via SCIM, APIs, and custom automations
Support SOC 2, ISO 27001 and SOX controls related to identity governance.
Serve as the enterprisewide subject matter expert and escalation point for complex authentication and authorization inquiries and issues.
Mentor IT and security engineers on identity best practices
Additional duties as assigned