Engineer III, Global Technology - Identity and Access Management
Expeditors
A complete application in a minute
Tailored resume and cover letter, ready to send.
Benefits offered by this job
Job summary
Expeditors is seeking an Engineer III in Global Technology – Identity and Access Management to design, implement, and maintain IAM solutions that ensure secure access across the organization.
You will work with SailPoint IIQ, SailPoint ISC, Auth0, Entra ID, Java, REST APIs, and other security technologies while aligning with SOX, GDPR, and CMMC compliance requirements. This is an on-site position in the Seattle area.
Qualifications
- Bachelor’s degree in Computer Science, Information Systems, Engineering, Business, or a related field, or equivalent combination of education and experience in identity management, information security, systems engineering, application development, or infrastructure architecture.
- Demonstrated experience designing, implementing, supporting, or administering enterprise IAM solutions such as SailPoint IIQ, SailPoint ISC, Auth0, and Entra ID.
- Experience working with complex applications, data integrations, and automated provisioning processes.
- Working knowledge of security and compliance principles, including least privilege, separation of duties, and access governance.
- Experience contributing to technical design discussions and solution architecture decisions.
- Experience supporting production systems and participating in operational support activities.
- Experience collaborating across teams to deliver technology solutions and business outcomes.
- Experience working with agile delivery practices, source control, testing methodologies, and modern engineering workflows.
- Experience with Agentic AI development processes and practices.
Responsibilities
- Lead IAM modernization efforts and design sessions.
- Mentor other engineers and drive knowledge sharing.
- Configure SSO, MFA, provisioning, and directory services.
- Collaborate with cross-functional teams to meet access requirements.
- Help manage incidents and continuously improve the IAM program with new technologies.
Skills
Education
Tools
Job description
- Full-time
“We’re not in the shipping business; we’re in the information business” -Peter Rose, Expeditors Founder
Global supply chain management is what we do, but at the heart of Expeditors you will find professionalism, leadership, and a friendly environment, all of which foster an innovative, customer service-based approach to logistics.
- 18,000 trained professionals
- 350+ locations worldwide across 60+ countries
- Globally unified systems
This Engineer III designs, implements, and maintains identity and access management solutions that support secure access across the organization. This role contributes to IAM modernization efforts while improving authentication, authorization, automated provisioning, access governance, and compliance.
As an experienced individual contributor, you will help shape technical decisions, deliver high-quality solutions, and continuously improve the IAM program by evaluating emerging identity threats, technologies, and best practices.
You will work across SailPoint IIQ, SailPoint ISC, Auth0, Microsoft Entra ID, Java, REST APIs, GraphQL, SAML, OAuth 2.0, OpenID Connect, SCIM, LDAP, and Active Directory. You will partner with application, infrastructure, security, audit, and business teams to define and implement access requirements. The role supports complex applications, data integrations, automated provisioning processes, and compliance with organizational policies and frameworks such as SOX, TISAX, GDPR, and CMMC.
- Serve as a lead contributor for identity and access management modernization efforts.
- Lead design sessions for the team.
- Identify, manage, and resolve incidents for applications owned by the team.
- Become established as a mentor for other engineers.
- Continuously improve the IAM program through emerging technologies and best practices.
- Design, implement, maintain, and support identity and access management solutions while automating identity-management processes using PowerShell, APIs, Java, AI, and other development tools.
- Configure and support SSO, MFA, conditional access, passwordless authentication, provisioning, federation, and directory services while contributing to operational excellence, incident response, and continuous improvement.
- Develop role-based and attribute-based access controls, integrate enterprise applications with IAM platforms, and evaluate system dependencies, operational impacts, and design tradeoffs.
- Design and implement scalable IAM solutions using SailPoint IIQ, SailPoint ISC, Auth0, Microsoft Entra ID, REST APIs, GraphQL, SAML, OAuth 2.0, OpenID Connect, SCIM, LDAP, and Active Directory.
- Partner with application, infrastructure, security, audit, and business teams to define and implement access requirements while supporting planning, coordination, and alignment across initiatives.
- Collaborate across engineering teams, provide technical feedback, support the growth of less experienced engineers, and contribute to a culture of knowledge sharing and continuous improvement.
- Lead design sessions, share technical recommendations, communicate risks and tradeoffs, and advocate for solutions that improve security, delivery, quality, and customer outcomes.
- Evaluate emerging identity threats, technologies, and best practices to continuously improve the IAM program and strengthen access governance capabilities.
- Contribute to IAM modernization efforts by translating business and technical priorities into actionable plans and technology solutions with a near- to mid-term planning horizon.
- Support compliance with organizational policies and frameworks, including SOX, TISAX, GDPR, and CMMC, while balancing technical quality, operational effectiveness, and business needs.
- Conduct access certifications, entitlement reviews, and privileged-access assessments to strengthen security controls and improve customer and business outcomes.
This position is on-site and will reside in the greater Seattle, WA. area at one of the following locations depending on availability. Candidates must be local or willing to relocate. Relocation assistance is not offered for this position.
- Downtown Seattle
- Lynnwood
- Bellevue (Factoria)
- Bachelor’s degree in Computer Science, Information Systems, Engineering, Business, or a related field, or equivalent combination of education and experience in identity management, information security, systems engineering, application development, or infrastructure architecture.
- Demonstrated experience designing, implementing, supporting, or administering enterprise IAM solutions such as SailPoint IIQ, SailPoint ISC, Auth0, and Entra ID.
- Experience working with complex applications, data integrations, and automated provisioning processes.
- Working knowledge of security and compliance principles, including least privilege, separation of duties, and access governance.
- Experience contributing to technical design discussions and solution architecture decisions.
- Experience supporting production systems and participating in operational support activities.
- Experience collaborating across teams to deliver technology solutions and business outcomes.
- Experience working with agile delivery practices, source control, testing methodologies, and modern engineering workflows.
- Experience with Agentic AI development processes and practices.
- Five or more years of professional experience in a technical engineering or IAM-focused position.
- Experience with SailPoint IIQ or ISC, Entra ID, and Auth0 solutions.
- Relevant certifications, such as Microsoft Certified: Identity and Access Administrator Associate, Azure Security Engineer Associate, SailPoint certification, CISSP, or CISM.
Applicants are required to be eligible to lawfully work in the U.S. immediately; employer will not transfer or sponsor applicants for U.S. work authorization (such as an H-1B visa) for this opportunity.
Benefits: Expeditors offers competitive benefits to all full-time employees including:
- Paid vacation
- Holidays (10)
- Flexible Days (2)
- Paid Sick Time (accrual rate of 1 hour of sick time per 30 hours paid)
- 401(k) Retirement Savings Plan with employer match
- Employee Stock Purchase Plan (ESPP)
- Health Savings Account (HSA)
- Life and Disability Insurance
- Paid Parental Leave (additional eligibility criteria)
- Dependent Care Flexible Spending Account (DC FSA)
- Employee Assistance Program (EAP)
- Training and Personnel Development Program
- Educational Assistance and Reimbursement
- Position is full time (40 hours per week) Monday through Friday
All your information will be kept confidential according to EEO guidelines.
'/%3e%3cpath%20d='M101.744%2012.4726L102.894%2016.1947L99.0021%2013.2201L101.744%2012.4726ZM105.3%208.40937H100.488L99.0026%203.59473L97.5116%208.41047L92.7%208.40385L96.5965%2011.3834L95.1055%2016.1942L99.0021%2013.2196L101.408%2011.3834L105.3%208.40992V8.40937Z'%20fill='white'/%3e%3cdefs%3e%3clinearGradient%20id='paint0_linear_5593_1381'%20x1='90'%20y1='9.44471'%20x2='99'%20y2='9.44471'%20gradientUnits='userSpaceOnUse'%3e%3cstop%20stop-color='%2300AD70'/%3e%3cstop%20offset='0.998594'%20stop-color='%2300B67A'/%3e%3cstop%20offset='1'%20stop-color='%23DCDCE6'/%3e%3c/linearGradient%3e%3c/defs%3e%3c/svg%3e){kind=small}
