IAM Engineer - Remote | Identity & Access Control

WebHosting; United States; Remoto; USD 155.000 - 195.000; Tempo pieno

Vantaggi offerti da questo lavoro

ESPP program

Descrizione del lavoro

Backblaze is seeking an Identity & Access Management (IAM) Engineer to design, implement, and operate identity and access capabilities for humans, workloads, devices, services, and AI agents. The role emphasizes least privilege, strong authentication, automated lifecycle management, and short-lived credentials within a remote, full-time context.

The engineer will partner across teams to ensure proper mediation of access, minimize privilege, and reduce blast radius while maintaining secure,

Competenze

• Design and operate IAM systems with least privilege and strong authentication.

Mansioni

• Design and operate authentication, authorization, federation, SSO, MFA, RBAC/ABAC, PAM, conditional access, policy-based authorization, just-in-time access, continuous verification, and privileged-access capabilities.
• Engineer roles, groups, entitlements, and privilege assignments around least privilege and separation of duties.
• Automate identity provisioning, access reviews, privilege changes, revocation, and deprovisioning.
• Implement phishing-resistant MFA, cryptographically bound authentication, and strong identity assurance across enrollment, authentication, federation, and recovery.
• Govern service accounts, machine and device identities, workloads, automated processes, APIs, and AI-agent identities.
• Implement short-lived workload and agent identities using federation, certificates, and modern workload-identity approaches while reducing reliance on persistent secrets.
• Partner with architects, engineers, and resource owners to ensure access is efficiently mediated and designs minimize excessive privilege, unnecessary sharing, and cross-domain exposure.
• Monitor identity posture and partner with Security Operations to investigate identity threats and rapidly revoke compromised access.
• ESPP program

Conoscenze

Authentication

Authorization

MFA

RBAC/ABAC

Just-in-time access

Least privilege

Continuous verification

Strumenti

SSO

Certificates

Identity federation

Workload identity

Descrizione del lavoro

Backblaze is seeking an Identity & Access Management (IAM) Engineer to design, implement, and operate identity and access capabilities for humans, workloads, devices, services, and AI agents. The role emphasizes least privilege, strong authentication, automated lifecycle management, and short-lived credentials within a remote, full-time context.

The engineer will partner across teams to ensure proper mediation of access, minimize privilege, and reduce blast radius while maintaining secure,