IAM Manager

Saragossa; Dallas (TX); Hybrid; USD 270,000 - 330,000; Full time

Job summary

Saragossa is seeking an Engineering Manager, Identity and Access Management in Dallas, TX to build the identity control plane for a new generation of HPC, cloud and distributed infrastructure. You will influence architecture, team design, engineering standards and how the function operates.

This is a hands-on leadership role: write code, automate via APIs and infrastructure as code, hire and grow a software engineering team, and drive maturity of EntraID and workload identity across multi‑cloud

Qualifications

• 6+ years in IAM or security engineering
• Hands-on software engineering background
• Deep expertise with Entra ID or similar platform
• Experience with OAuth and SAML
• Knowledge of mutual TLS and access governance
• Ability to lead and hire engineers

Responsibilities

• Turn identity architecture into a phased roadmap and lead the delivery team
• Mature Entra ID as the governed identity hub and automate workflows
• Roll out phishing-resistant authentication and access governance
• Build resilient privileged-access controls
• Drive workload identity, PKI and certificate lifecycle management
• Collaborate with Platform Engineering across multi-cloud environments
• Develop identity systems and automation through code and IaC

Skills

IAM

Security engineering

Leadership

OAuth/SAML

Mutual TLS

Entra ID

GitOps

Tools

Microsoft Entra ID

SPIFFE/SPIRE

HashiCorp Vault

Teleport

Job description

Identity security isn’t about managing logins. It’s about making sure nobody holds access they don’t need, for longer than they need it.

We’re looking for an Engineering Manager, Identity and Access Management, to build the identity control plane for an organization running a new generation of HPC, cloud and distributed infrastructure. The platform is still being built, so you’ll have real influence over architecture, team design, engineering standards and how the function operates.

This is a hands-on leadership role. You’ll turn a broad identity architecture into a phased roadmap and hire the team that delivers it. Near-term priorities include maturing Microsoft Entra ID as the governed identity hub, automating joiner, mover and leaver workflows, rolling out phishing-resistant authentication and access governance, and building resilient privileged-access controls.

Beyond workforce identity, you’ll set direction for workload identity, PKI, certificate lifecycle management, mutual TLS and multi-cloud federation, working with Platform Engineering and Infrastructure teams across Kubernetes, bare-metal, network and cloud environments. The goal is to replace standing privilege and long-lived credentials with automated, observable controls managed through code and GitOps, not manual console changes.

This role needs a builder. You’ll come from a software engineering background and still think like an engineer: writing code, automating through APIs and infrastructure as code, and building identity systems rather than configuring them. If your IAM experience has mostly been administering tools through a console, this probably isn’t the right fit.

We’re looking for 6+ years in IAM, security engineering or platform security, including ownership of production identity capabilities, and 2+ years leading engineers with a track record of hiring and developing them. You’ll have deep expertise in at least one identity domain, strong experience with Entra ID or a comparable platform, and a practical understanding of OAuth, SAML and mutual TLS. Experience with SPIFFE/SPIRE, HashiCorp Vault, Teleport or cross-cloud workload federation would be highly valued.

If you’ve built identity systems from the ground up and want to do it again on a platform that’s still taking shape, we’d love to hear from you.

The role is unable to offer work authorization sponsorship.

Base salary is up to $300,000 + bonus.

Based in Dallas, TX as a hybrid position.