IAM Security Engineer - Build Secure Identities & Access

Cloudflare; United States; Hybrid; USD 120,000 - 180,000; Full time

Job summary

United States Digital Space LLC is seeking an Identity and Access Management Security Engineer to design, implement, and scale IAM solutions for the company’s internal workforce and workloads. You will secure authentication, authorization, and access across critical systems, and drive governance with SCIM and access certifications.

You will build SSO integrations (SAML, OIDC, OAuth) and automate RBAC/ABAC-based roles, PAM platforms, and certifications, while leveraging AI-driven tooling to

Qualifications

• Strong knowledge of identity federation (SAML, OAuth, OpenID Connect).
• Experience implementing Identity Governance and Administration (IGA) with lifecycle mgmt, SCIM, and access certifications.
• Hands-on engineering experience with AI/LLMs to solve operational challenges.
• Experience with containerized platforms (Kubernetes) and IaC tools.

Responsibilities

• Design, implement, and scale IAM solutions for internal workforce and workloads.
• Secure user access, authentication, and authorization across systems.
• Build SSO integrations using SAML, OIDC, OAuth, SCIM.
• Develop and manage IAM governance and access certifications.
• Automate roles with RBAC/ABAC and manage PAM platforms.
• Support IAM operations and on-call rotations as needed.

Skills

Identity federation

IGA solutions

Automation scripting

AI/LLMs in ops

Kubernetes

Python

TypeScript

RBAC/ABAC

Zero Trust

ITDR

SAML/OIDC/OAuth/SCIM

Identity governance

IAM policy enforcement

Terraform

Ansible

Tools

Kubernetes

Terraform

Ansible

Job description

United States Digital Space LLC is seeking an Identity and Access Management Security Engineer to design, implement, and scale IAM solutions for the company’s internal workforce and workloads. You will secure authentication, authorization, and access across critical systems, and drive governance with SCIM and access certifications.

You will build SSO integrations (SAML, OIDC, OAuth) and automate RBAC/ABAC-based roles, PAM platforms, and certifications, while leveraging AI-driven tooling to