Senior IAM and SaaS Engineer

Radost Solutions; United States; Remote; USD 76,000 - 103,000; Full time

Benefits offered by this job

401(k)

Health insurance stipend

Paid time off

Paid holidays

Professional development

Job summary

Radost Solutions is recruiting a Senior IAM & SaaS Engineer to build an IAM and SaaS administration function for a large Los Angeles startup. Remote role with travel to LA and on-site as needed; W2 contract, 7 months, with potential conversion.

You will audit, fix high-risk gaps, and establish the operating model for ongoing administration. You will own Okta administration, joiner/mover/leaver workflows, and access reviews, while also handling Google Workspace and Jira/Confluence/JSM

Qualifications

• 4+ years in IT systems, IAM, or SaaS administration with hands-on ownership.
• Hands-on Okta administration: SSO, SCIM, app integrations, groups and rules, lifecycle management.
• Working knowledge of IAM fundamentals: least privilege, joiner/mover/leaver, deprovisioning, access reviews.
• Google Workspace administration: Admin Console, groups, provisioning, security settings.
• Atlassian administration: Jira, Confluence, JSM.
• Documentation habits that hold up to audit.
• Experience working independently where no playbook exists.

Responsibilities

• Audit the current Okta environment and identify risk; own administration and provisioning.
• Design joiner/mover/leaver processes across the SaaS portfolio.
• Establish access review cadence and least-privilege standards with Security.
• Document configurations, processes, and policies for audits and long-term use.
• Administer Google Workspace and Atlassian suite; build integrations and automation.
• Serve as escalation point for SaaS issues and manage application configuration.

Skills

IAM and SaaS administration

Identity and access management

Independent work

Audit and process design

Tools

Okta

Google Workspace

Jira/Confluence/JSM

Job description

Senior IAM & SaaS Engineer (Build the Function)

Radost Solutions is a consulting firm based in Portland, Oregon. We place consultants with clients to lead and deliver critical projects. Learn more at www.radost.us.

About the Client

Our client is a large startup eCommerce and consumer products company in Los Angeles, known for machine-washable home goods. The company has corporate offices and fulfillment and manufacturing facilities, and runs on a modern SaaS stack. Identity and access management has grown with the company rather than been designed. Okta is in place, but provisioning, access reviews, and documentation are limited or missing.

The Role

This is a W2 contract role for someone who wants to build an IAM and SaaS administration function, not maintain one. You will report to the Director of TechOps and Enablement and work alongside the Security Team.

This is not a ticket queue. You will audit what exists, fix the highest-risk gaps, and put in place the processes, documentation, and ownership model the company will run on after you. If you have wanted to set up IAM the right way from the start, this role gives you that chance.

What You Will Do

Identity and Access Management

• Audit the current Okta environment and identify risk: orphaned accounts, excess permissions, and unmanaged apps
• Own Okta administration: app integrations, SSO and SCIM, groups, and rules
• Design and run joiner, mover, and leaver processes across the SaaS portfolio
• Establish access review cadence and least-privilege standards with the Security Team
• Document configurations, processes, and policies so they support audits and outlast your contract

SaaS Administration

• Administer Google Workspace and Atlassian (Jira, Confluence, JSM)
• Own application configuration, licensing, and provisioning workflows
• Build integrations and automation across the stack
• Serve as the escalation point for SaaS technical issues
• Set up the application intake, configuration, and decommission process

First 90 Days

• 30 days: Okta and IAM environment audited, SaaS integrations mapped, top risks agreed with the team
• 60 days: Orphaned accounts and provisioning gaps resolved, Okta configuration documented, first access review underway
• 90 days: Highest-risk gaps closed, operating model and review cadence documented, clear ownership for ongoing administration

Required

• 4+ years in IT systems, IAM, or SaaS administration with hands-on ownership
• Hands-on Okta administration: SSO, SCIM, app integrations, groups and rules, and lifecycle management
• Working knowledge of IAM fundamentals: least privilege, joiner/mover/leaver processes, deprovisioning, and access reviews
• Google Workspace administration: Admin Console, groups, provisioning, and security settings
• Atlassian administration: Jira, Confluence, and JSM
• Documentation habits that hold up to audit
• Experience working independently where no playbook exists

Preferred

• Led an IAM cleanup, audit, or access governance effort
• Workflow automation tools such as Zapier or Workato
• DTC, eCommerce, or high-growth company experience
• Data classification, vendor risk, or security fundamentals
• Interest in AI tools and AI governance

Location and Travel

• Remote, with a preference for candidates in the Los Angeles area
• Regular travel to the client's Los Angeles offices is required
• Candidates must reside in the United States
• W2 contract, 7 months, with potential to convert to a full-time role
• Not open to C2C or third-party arrangements
• Pay: $55 to $75/hour, based on experience and location
• Benefits: 401(k), health insurance stipend, paid time off, paid holidays, and professional development

Our Hiring Process

To protect candidates and our client, we use the following steps:

• All interviews are conducted on camera
• Offers are contingent on identity verification, I-9 completion, and a background check
• Equipment ships only to a verified US address
• Radost will only contact you from an @radost.us email address. We will never ask for payment or banking information before an offer.

Radost Solutions is an equal opportunity employer. We do not discriminate based on any protected characteristic.