Identity and Access Management (IAM) Engineer

Viasat; Carlsbad (CA); On-site; USD 117,000 - 185,000; Full time

Job summary

Viasat is seeking an IAM Engineer to design, implement, and operate identity services across workforce and cloud environments. You will partner with security and IT teams to ensure secure, scalable access management and governance.

The role emphasizes automation, lifecycle management, and continuous improvement of enterprise IAM programs, with opportunities to impact user experience and compliance while working in a fast-paced, engineering-driven environment.

Qualifications

• 3+ years designing, implementing, or supporting IAM solutions.
• Hands-on with Entra ID, Okta, or similar platforms.
• Strong understanding of RBAC, access governance and least-privilege.
• Experience with audits, compliance, and governance activities.
• Ability to work in regulated security environments.

Responsibilities

• Administer and improve joiner/mover/leaver (JML) processes.
• Manage roles, groups, entitlements and privileged access.
• Develop automation to improve IAM service delivery.
• Configure IAM workflows, access requests and approvals.
• Troubleshoot IAM issues and act as Tier 2/3 escalation.
• Collaborate with security, infra, and application teams.

Skills

IAM design and implementation

Entra ID

Okta

RBAC

Access governance

Identity lifecycle management

Audit/compliance

Troubleshooting IAM issues

Tools

SAML

OAuth

OIDC

SCIM

PAM concepts

Job description

About us

One team. Global challenges. Infinite opportunities. At Viasat, we're on a mission to deliver connections with the capacity to change the world. For more than 35 years, Viasat has helped shape how consumers, businesses, governments and militaries around the globe communicate. We're looking for people who think big, act fearlessly, and create an inclusive environment that drives positive impact to join our team.

What you'll do

Job Summary:

Viasat's Identity & Access Management (IAM) program is a critical security and enablement function supporting workforce access, cloud environments, and mission-critical systems. As IAM capabilities continue to mature and expand, including Identity Governance Administration (IGA) and Privileged Access Management (PAM), we are seeking additional members of the team to design, implement, administer, and continuously improve enterprise identity services.

The IAM Engineer will work with other IAM Engineers and be responsible for IAM services and governance processes, owning the execution, quality, and continuous improvement of identity lifecycle management and access functions. This role partners closely with security, infrastructure, application, and business teams to ensure identity services remain secure, scalable, compliant, and aligned to business needs.

The position directly contributes to platform reliability, access governance, automation, user experience, and the long-term maturity of the enterprise IAM program.

The day-to-day

• Administer, automate/improve and oversee joiner, mover, and leaver (JML) processes in accordance with IAM standards and governance requirements
• Manage role, group, entitlement, and privileged access assignments based on approved business requests
• Develop and enhance automation solutions to improve IAM service delivery and reduce manual effort
• Configure and maintain IAM workflows, access request processes, and approval structures
• Troubleshoot access and authentication issues and serve as a Tier 2 escalation point for IAM-related service requests
• Partner with IAM Engineering team to implement and optimize automated workflows and access fulfillment processes
• Build and maintain workflows, connectors, and integrations with enterprise applications and identity sources
• Partner with application teams to onboard systems into IAM governance and provisioning processes
• Identify opportunities to automate recurring administrative tasks and governance activities
• Drive continuous improvement initiatives focused on scalability, efficiency, and user experience
• Serve as a Tier 2/3 escalation point for IAM-related incidents and access issues
• Troubleshoot authentication, provisioning, federation, and access-related problems
• Partner with security and infrastructure teams to resolve complex identity-related issues
• Monitor platform health, service performance, and process effectiveness

What you'll need

• 3+ years of experience designing, implementing, or supporting Identity and Access Management solutions
• Hands-on experience with enterprise IAM platforms such as Entra ID, Okta, or similar solutions
• Strong understanding of:
  • Identity lifecycle management
  • Role-Based Access Control (RBAC)
  • Access governance principles
  • Least-privilege models
  • Privileged access concepts
• Experience supporting audit, compliance, and governance activities
• Strong attention to detail and process discipline
• Ability to work effectively in regulated and security-sensitive environments
• Experience troubleshooting identity, authentication, and access-related issues
• Knowledge of compliance and security frameworks within regulated environments
• Strong analytical, problem-solving, and technical troubleshooting skills
• US Citizenship required
• Ability to obtain US Confidential Clearance

What will help you on the job

• Experience with IAM automation, workflow development, or scripting
• Experience integrating applications with IAM platforms
• Familiarity with SAML, OAuth, OIDC, and SCIM protocols
• Experience supporting cloud and SaaS application onboarding
• Experience leveraging AI to improve processes or develop automations for improvements
• Experience implementing or administering PAM solutions
• Familiarity with identity governance processes including certifications, access reviews, and role management
• Experience working in engineering-driven, automation-first environments
• Strong written and verbal communication skills
• Ability to work effectively with technical and business stakeholders

Salary range

$117,000.00 - $185,000.00 / annually.For specific work locations within San Jose, the San Francisco Bay area and New York City metropolitan area, the base pay range for this role is $145,000.00- $218,000.00/ annually

At Viasat, we consider many factors when it comes to compensation, including the scope of the position as well as your background and experience. Base pay may vary depending on job-related knowledge, skills, and experience. Additional cash or stock incentives may be provided as part of the compensation package, in addition to a range of medical, financial, and/or other benefits, dependent on the position offered. Learn more about Viasat's comprehensive benefit offerings that are focused on your holistic health and wellness at https://careers.viasat.com/benefits.

EEO Statement

Viasat is proud to be an equal opportunity employer, seeking to create a welcoming and diverse environment. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, national origin, ancestry, physical or mental disability, medical condition, marital status, genetics, age, or veteran status or any other applicable legally protected status or characteristic. If you would like to request an accommodation on the basis of disability for completing this on-line application.