Senior IAM Architect: Cloud Identity & Automation Lead

Remote; San Francisco (CA); Remote; USD 150,000 - 230,000; Full time

Job summary

Scopely is seeking a Senior IAM Security Engineer to design, build, and scale Scopely’s identity and access management ecosystem across cloud, SaaS, AI, and remote access environments. The role emphasizes Terraform-based automation, least-privilege design, and identity risk reduction.

The engineer will work hands-on across AWS, GCP, Okta, and IAM Identity Center, shaping secure cross-account access, workflow automation, and AI-enabled security engineering practices.

Qualifications

• 8–12+ years in IAM security engineering, cloud security, identity architecture, or related security engineering roles.
• Strong experience operating in cloud-first, high-scale environments.
• Experience partnering with engineering, infrastructure, and security teams.
• Experience designing and operating IAM solutions for global organizations with complex access needs.
• Strong track record in identity modernization, least privilege, and access automation.
• Proven experience building automation and reusable engineering patterns, not just manual IAM operations.

Responsibilities

• Build and evolve IAM architecture to support cloud-first environments across AWS, GCP, SaaS, AI tooling, and remote access platforms.
• Lead federated identity design using SAML, OIDC, OAuth, and SCIM.
• Develop workforce identity and access patterns across internal platforms.
• Design and implement least-privilege RBAC/ABAC models for cloud and SaaS environments.
• Oversee centralized access using Okta, AWS IAM Identity Center, and Google Cloud IAM.
• Create reusable Terraform modules for IAM roles, policies, and access patterns.
• Automate provisioning/deprovisioning and group-based access flows via Terraform and Okta workflows.
• Standardize secure identity patterns and reduce identity sprawl and excessive permissions.
• Improve access visibility, auditability, and reporting pipelines.
• Drive AI-assisted identity security workflows and risk reduction initiatives.
• Collaborate with Security Operations and Compliance for audit readiness and investigations.

Skills

IAM security engineering

Cloud security

Identity architecture

Automation

Terraform

Python scripting

CI/CD

Education

Bachelor's degree in Computer Science or related field

Tools

Okta

AWS IAM Identity Center

GCP IAM

SAML/OIDC/OAuth/SCIM

Terraform

Job description

Scopely is seeking a Senior IAM Security Engineer to design, build, and scale Scopely’s identity and access management ecosystem across cloud, SaaS, AI, and remote access environments. The role emphasizes Terraform-based automation, least-privilege design, and identity risk reduction.

The engineer will work hands-on across AWS, GCP, Okta, and IAM Identity Center, shaping secure cross-account access, workflow automation, and AI-enabled security engineering practices.