Identity & Access Management (IAM) Engineer

Backblaze; Stati Uniti; Remoto; USD 155.000 - 195.000; Tempo pieno

Vantaggi offerti da questo lavoro

Health insurance

401(k) with employer match

Flexible vacation

Learning funds

Commuter benefits

Descrizione del lavoro

Backblaze is seeking an IAM Engineer to design and run identity and access controls for employees, services, devices, workloads, and automated agents. You will manage authentication, authorization, identity lifecycles, and privileged access with a focus on minimal access and rapid risk response.

Responsibilities include building SSO and MFA capabilities, defining roles and permissions with least privilege, automating provisioning and offboarding, and improving identity posture across distributed

Competenze

• Experience engineering enterprise identity systems and integrations.
• Strong understanding of authentication, authorization, federation, identity lifecycle management, role design, and least privilege.
• Experience automating identity processes with APIs, scripts, or infrastructure as code.

Mansioni

• Build and operate SSO, federation, MFA, RBAC, ABAC, conditional access, and PAM.
• Define roles, groups, entitlements, and permissions using least privilege.
• Automate account provisioning, access reviews, permission changes, and offboarding.
• Strengthen identity assurance with phishing-resistant, cryptographically bound authentication.
• Govern non-human identities and develop short-lived credentials for workloads and agents.
• Collaborate with engineering and security teams to improve access design and monitor identity posture.

Conoscenze

Enterprise identity systems

Authentication & authorization

Identity lifecycle management

APIs, scripting, IaC

OIDC/OAuth/SPIFFE

Least privilege design

Descrizione del lavoro

Role overview

The IAM Engineer designs and runs identity and access controls for employees, services, devices, workloads, and automated agents. The work spans authentication, authorization, identity lifecycles, and privileged access, with a focus on limiting access to what is needed and responding quickly when identities are at risk.

Responsibilities

• Build and operate capabilities such as single sign-on, federation, multifactor authentication, role or attribute based access, conditional access, and privileged access management.
• Define roles, groups, entitlements, and permissions using least privilege and separation of duties.
• Automate account provisioning, access reviews, permission changes, and offboarding.
• Strengthen identity assurance with phishing resistant and cryptographically bound authentication.
• Govern non-human identities and develop short-lived credentials for workloads and agents, reducing reliance on persistent secrets.
• Work with engineering and security teams to improve access design, monitor identity posture, investigate threats, and revoke compromised access.

Requirements

• Practical experience engineering enterprise identity systems and integrations.
• Strong understanding of authentication, authorization, federation, identity lifecycle management, role design, and least privilege.
• Experience managing human and non-human identities and automating identity processes with APIs, scripts, or infrastructure as code.
• Knowledge of modern identity assurance, PKI, secrets management, short-lived credentials, and workload identity federation.
• Familiarity with standards or technologies such as OIDC, OAuth, and SPIFFE/SPIRE.
• Ability to reason about access across distributed systems and work with technical teams on secure designs.

Benefits and work setup

• The listed benefits include family health, dental, and vision coverage; retirement and employee stock programs; flexible vacation; parental and fertility support; learning funds; commuter benefits; and work equipment support.
• The listing gives a US base salary range of $155,000–$195,000; final pay may vary based on location, experience, and qualifications.