Role overview
An internal security engineering role focused on making identity and access management faster, more auditable, and self-service across the organization. The work centers on designing workflows, integrations, and developer-friendly tooling that replace fragmented, manual access processes with a unified experience.
Responsibilities
- Build and maintain access request and approval workflows that let system owners manage access to their own systems.
- Develop self-service capabilities including APIs, command-line tools, and lightweight UIs for provisioning and deprovisioning.
- Design automated user lifecycle pipelines covering onboarding, offboarding, and role changes, integrated with HR systems and identity providers.
- Build audit logging and access review systems that unify visibility across corporate and R&D environments for compliance reporting.
- Integrate with existing security infrastructure rather than building parallel systems.
- Collaborate with security engineering, IT, and platform teams to reduce friction and improve the overall access experience.
Requirements
- 3+ years of software engineering experience with hands-on work on internal tooling, automation, or platform services.
- Proficiency in Python or another backend language, plus experience building APIs and integrations.
- Practical experience with workflow orchestration, approval systems, or business process automation.
- Familiarity with IAM concepts such as SSO, SCIM, RBAC, OIDC, and SAML, along with cloud platforms and infrastructure as code.
Nice to have
- Experience with identity providers such as Okta or Microsoft Entra ID, including API-driven configuration and automation.
- Hands-on experience building developer self-service platforms or internal portals that hide operational complexity.
- Exposure to just-in-time access, time-bound permissions, zero standing privilege, or privileged access management practices.