Remote IAM Engineer — Identity & Access Steward

Backblaze External Website; United States; Remoto; USD 155.000 - 195.000; Tempo pieno

Vantaggi offerti da questo lavoro

401K

RSU grants

ESPP program

Flexible vacation policy

MacBook Pro with workstation stipend

Childcare bonus

Fertility treatment support

Descrizione del lavoro

Backblaze is seeking an Identity & Access Management (IAM) Engineer for a remote-US role. You will design, implement, and operate identity and access capabilities across human and non-human identities, with a focus on least privilege and automated lifecycle management.

The role collaborates with cross-functional teams to ensure secure access controls, strong authentication, and efficient identity governance across services and platforms.

Competenze

• Hands-on experience engineering enterprise IAM systems and integrations.
• Strong knowledge of authentication, authorization, federation, identity lifecycle management, role/group design, separation of duties, and least privilege.
• Knowledge of phishing-resistant MFA, cryptographic authentication, identity proofing, federation, and modern identity assurance practices.
• Experience managing human and non-human identities, including service, machine, workload, or device identities.
• Experience automating identity processes using APIs, scripting, or Infrastructure-as-Code.
• Understanding of PKI, secrets management, short-lived credentials, workload identity federation, and technologies such as OIDC, OAuth, and SPIFFE/SPIRE.
• Ability to reason about identity and authorization across distributed systems and collaborate with architects and engineers on secure access design.

Mansioni

• Design and operate authentication, authorization, federation, SSO, MFA, RBAC/ABAC, PAM, conditional access, policy-based authorization, just-in-time access, continuous verification, and privileged-access capabilities.
• Engineer roles, groups, entitlements, and privilege assignments around least privilege and separation of duties.
• Automate identity provisioning, access reviews, privilege changes, revocation, and deprovisioning.
• Implement phishing-resistant MFA, cryptographically bound authentication, and strong identity assurance across enrollment, authentication, federation, and recovery.
• Govern service accounts, machine and device identities, workloads, automated processes, APIs, and AI-agent identities.
• Implement short-lived workload and agent identities using federation, certificates, and modern workload-identity approaches while reducing reliance on persistent secrets.
• Partner with architects, engineers, and resource owners to ensure access is efficiently mediated and designs minimize excessive privilege.
• Monitor identity posture and partner with Security Operations to investigate identity threats and rapidly revoke compromised access.

Conoscenze

IAM systems

Authentication

Authorization

Federation

Workload identities

APIs & IaC

PKI & secrets

OIDC/OAuth

Descrizione del lavoro

Backblaze is seeking an Identity & Access Management (IAM) Engineer for a remote-US role. You will design, implement, and operate identity and access capabilities across human and non-human identities, with a focus on least privilege and automated lifecycle management.

The role collaborates with cross-functional teams to ensure secure access controls, strong authentication, and efficient identity governance across services and platforms.