Identity & Access Management (IAM) Engineer

WebHosting; United States; Remoto; USD 155.000 - 195.000; Tempo pieno

Vantaggi offerti da questo lavoro

ESPP program

Descrizione del lavoro

Backblaze is seeking an Identity & Access Management (IAM) Engineer to design, implement, and operate identity and access capabilities for humans, workloads, devices, services, and AI agents. The role emphasizes least privilege, strong authentication, automated lifecycle management, and short-lived credentials within a remote, full-time context.

The engineer will partner across teams to ensure proper mediation of access, minimize privilege, and reduce blast radius while maintaining secure,

Competenze

• Design and operate IAM systems with least privilege and strong authentication.

Mansioni

• Design and operate authentication, authorization, federation, SSO, MFA, RBAC/ABAC, PAM, conditional access, policy-based authorization, just-in-time access, continuous verification, and privileged-access capabilities.
• Engineer roles, groups, entitlements, and privilege assignments around least privilege and separation of duties.
• Automate identity provisioning, access reviews, privilege changes, revocation, and deprovisioning.
• Implement phishing-resistant MFA, cryptographically bound authentication, and strong identity assurance across enrollment, authentication, federation, and recovery.
• Govern service accounts, machine and device identities, workloads, automated processes, APIs, and AI-agent identities.
• Implement short-lived workload and agent identities using federation, certificates, and modern workload-identity approaches while reducing reliance on persistent secrets.
• Partner with architects, engineers, and resource owners to ensure access is efficiently mediated and designs minimize excessive privilege, unnecessary sharing, and cross-domain exposure.
• Monitor identity posture and partner with Security Operations to investigate identity threats and rapidly revoke compromised access.
• ESPP program

Conoscenze

Authentication

Authorization

MFA

RBAC/ABAC

Just-in-time access

Least privilege

Continuous verification

Strumenti

SSO

Certificates

Identity federation

Workload identity

Descrizione del lavoro

Identity & Access Management (IAM) Engineer

Remote Full-time Not specified Security

Job Description

About Backblaze

Backblaze is the object storage leader in the open cloud movement, fueling customersuccess with cloud storage built purposefully to unlock budgets, unburden administrators, and unleash innovators. Together with our partners, we’re helping customers break free from the restrictive, overpriced legacy solutions that hold them back, and blaze forward with the full power of the open cloud in their hands. Founded in 2007, we scaled the business with less than $3 million in outside funding until 2021, when we did a traditional IPO on the Nasdaq stock exchange. Today, Backblaze generates over $100m in revenue and is the leading specialized storage cloud – managing over three billion gigabytes of data storage for 500K+ customers in 175+ countries, including businesses, developers, IT professionals, and individuals.

Role Overview

The Identity & Access Management (IAM) Engineer designs, implements, and operates identity and access capabilities for human users, non-human identities, workloads, devices, services, and AI agents. The role focuses on the subject side of access control-identity, authentication, roles, groups, entitlements, and privileges-with an emphasis on least privilege, separation of duties, strong authentication, automated lifecycle management, and short-lived credentials.

The engineer partners with others across the organization to ensure applications, infrastructure, and services appropriately mediate access, separate security domains, minimize unnecessary sharing, and limit common mechanisms that could increase privilege or blast radius.

Key Responsibilities

• Design and operate authentication, authorization, federation, SSO, MFA, RBAC/ABAC, PAM, conditional access, policy-based authorization, just-in-time access, continuous verification, and privileged-access capabilities.
• Engineer roles, groups, entitlements, and privilege assignments around least privilege and separation of duties.
• Automate identity provisioning, access reviews, privilege changes, revocation, and deprovisioning.
• Implement phishing-resistant MFA, cryptographically bound authentication, and strong identity assurance across enrollment, authentication, federation, and recovery.
• Govern service accounts, machine and device identities, workloads, automated processes, APIs, and AI-agent identities.
• Implement short-lived workload and agent identities using federation, certificates, and modern workload-identity approaches while reducing reliance on persistent secrets.
• Partner with architects, engineers, and resource owners to ensure access is efficiently mediated and designs minimize excessive privilege, unnecessary sharing, and cross-domain exposure.
• Monitor identity posture and partner with Security Operations to investigate identity threats and rapidly revoke compromised access.
• ESPP program

To provide greater transparency to candidates, we share base pay ranges for all US-based job postings regardless of state. We set standard base pay ranges for all roles based on function, level, and country location, benchmarked against similar-stage growth companies. Final offer amounts are determined by multiple factors, including candidate location, skills, depth of work experience, and relevant licenses/credentials, and may vary from the amounts listed below.

The base pay range for this position is $155,000 – $195,000

At Backblaze, we value being fair and good to our customers, partners, and employees. That’s why diversity, equity, and inclusion are at the core of our values. We are committed to fostering a workforce where all employees feel a sense of belonging regardless of race, ethnicity, nationality, gender, sexual orientation, age, religion, socio-economic status, ability, veteran status, and education. We believe that our dedication to cultivating a diverse workspace not only allows us to better serve our customers in over 175 countries, but further reinforces our commitment to doing the right thing.We are proud to be an Equal Opportunity Employer.