Senior IAM Automation Engineer

Apex Fintech Solutions UK Ltd.; Austin (TX); Hybrid; USD 108,800 - 136,000; Full time

Benefits offered by this job

Health and dental benefits

Competitive PTO and 401k match

Parental leave

Paid subscription to Calm app

Tuition reimbursement benefits

Job summary

Apex Fintech Solutions UK Ltd. is seeking a Senior IAM Automation Engineer to transform their management of workforce identity. This role intertwines DevOps practices with IAM expertise, aiming to build self-service, API-driven solutions within a multi-cloud environment.

The ideal candidate will lead the implementation of automation practices, mentor junior engineers, and innovate in the identity space, all while ensuring security and compliance standards are met. A strong background in software development and IAM platforms is crucial.

Qualifications

• 5+ years writing production code with strong API integration experience.
• Deep understanding of SSO protocols and enterprise IAM platforms.
• Experience with Terraform and CI/CD pipelines for automated deployments.
• Ability to implement and govern low-code automation tools.

Responsibilities

• Lead Tines platform implementation for workforce identity management.
• Partner with teams to establish Tines as the automation platform.
• Develop Terraform and Python automation across various identity systems.
• Design API-driven automation and integrations with enterprise applications.
• Build monitoring and automated remediation for identity systems.

Skills

Software development proficiency

IAM architecture skills

Infrastructure‑as‑Code mastery

DevOps/SRE practices

Workflow automation platforms

Problem‑solving ability

Pragmatic engineering

AI‑augmented productivity

Technical communication

Education

Bachelor's degree in Computer Science or related field

Tools

Terraform

PowerShell

Python

Okta

Entra ID

AWS IAM

GCP Cloud Identity

Job description

WHO WE ARE

Apex Fintech Solutions (Apex) powers innovation and the future of digital wealth management by building tech‑forward solutions that simplify, automate, and facilitate access to financial markets for all. Our suite of fintech software supports clients such as Stash, Betterment, SoFi, Webull, and eToro, collectively enabling access to the stock market for over 22 million end customers. At Apex, we digitize and democratize systems so everyone can invest.

ABOUT THIS ROLE

We’re seeking a Senior IAM Automation Engineer to transform how Apex manages workforce identity and access management. This role combines DevOps/SRE practices with deep IAM expertise to eliminate manual, UI‑based processes and build self‑service, API‑driven solutions that scale across our hybrid and multi‑cloud environment. As a senior technical contributor, you’ll mentor junior team members and help elevate the team’s overall automation and engineering capabilities.

WHAT YOU’LL DO

• Lead Tines platform implementation and governance – define technical standards, architect RBAC models, and build workflows that automate employee lifecycle management, access requests, and certification campaigns.
• Partner with cross‑functional teams to establish Tines as the firm‑wide automation platform for workforce identity use cases.
• Build infrastructure‑as‑code for identity systems – develop and maintain Terraform, PowerShell, and Python automation across on‑prem AD/Adaxes, Entra ID, Okta, AWS IAM, and GCP/GCI to enable repeatable, version‑controlled deployments with proper change management.
• Design API‑driven automation and integrations – architect scalable solutions that orchestrate identity workflows across HRIS (Workday), ticketing (ServiceNow), collaboration platforms (Slack, Teams, M365), and enterprise applications, leveraging APIs and SDKs to eliminate manual processes.
• Implement observability and self‑healing capabilities – build monitoring, alerting, and automated remediation for identity systems to reduce operational toil, improve reliability, and enable proactive issue detection across authentication flows and provisioning processes.
• Enable rapid application onboarding – create automation frameworks and integration patterns that allow the business to onboard new SaaS applications with minimal manual intervention while maintaining security and compliance standards.
• Pioneer non‑human identity (NHI) governance – partner with SecOps to develop policies, controls, and automation for managing AI agents, LLM API keys, service accounts, bot identities, and machine‑to‑machine authentication.
• Mentor and develop junior team members – conduct code reviews, pair programming sessions, and knowledge transfer to build automation skills, IAM expertise, and engineering judgment.
• Drive technical innovation in the identity space – evaluate emerging tools and practices, establish CI/CD pipelines for IAM deployments, and leverage AI‑powered development tools responsibly to accelerate automation delivery.

REQUIRED SKILLS & EXPERIENCE

• Software development proficiency – 5+ years writing production code (Python, PowerShell, Go, or similar) with strong API and SDK integration experience.
• IAM architecture skills – deep understanding of SSO protocols (SAML, OIDC), provisioning standards (SCIM), directory services (Active Directory, Entra ID), and enterprise IAM platforms (Okta strongly preferred).
• Infrastructure‑as‑Code mastery – hands‑on experience with Terraform, Ansible or similar tools, plus CI/CD pipelines for automated deployments.
• DevOps/SRE practices – experience building observable, reliable systems with appropriate monitoring, logging, and incident response capabilities.
• Workflow automation platforms – demonstrated ability to implement and govern low‑code/code‑first automation tools (Tines, Workato, n8n or similar).
• Platform experience – hands‑on experience with Okta, Entra ID/Azure AD, Active Directory, Adaxes, AWS IAM, GCP Cloud Identity, Tines, and integrations with HRIS systems (Workday, BambooHR, ADP).
• Problem‑solving ability – experience debugging complex distributed systems, analyzing API integrations, and optimizing automated workflows.
• Pragmatic engineering – balance between perfect and done; build iteratively with continuous improvement.
• AI‑augmented productivity – comfortable leveraging AI tools (LLMs, code assistants, AI pair programming) responsibly to accelerate development while maintaining code quality and security.
• Advocacy for emerging IAM challenges – interest in non‑human identities, AI agent governance, and machine identity management.
• Mentorship and knowledge sharing – genuine interest in developing junior engineers through code reviews, pairing, and transfer of production experience.
• Technical communication – document architecture decisions, create operational runbooks, and explain technical concepts to business stakeholders.
• Employee experience focus – design automation that enables internal users to be productive without friction.

QUALIFICATIONS

• 7–10+ years in DevOps, SRE, or software engineering roles with significant IAM/identity automation focus.
• Demonstrated experience building automation solutions for enterprise IAM platforms using APIs, scripting, and infrastructure‑as‑code.
• Track record of implementing workflow automation or orchestration platforms in production environments.
• Understanding of both technical IAM implementations and business processes (joiner/mover/leaver, access requests, compliance).
• Experience working in hybrid on‑premises and cloud environments.
• Preferred: experience with Tines or similar low‑code automation platforms.
• Background bridging Corporate IT and Engineering teams.
• HRIS integration experience, especially with Workday.
• Familiarity with compliance requirements (SOC1/2, audit trails, access certifications).
• Interest or experience in Non‑Human Identity management.
• Demonstrated use of AI tools to enhance productivity in automation or infrastructure work.
• Active contributions to IAM automation communities or open‑source projects.
• Education: bachelor’s degree in Computer Science, Software Engineering, or related field; degree requirement may be substituted with equivalent years of technical experience.

WHAT SUCCESS LOOKS LIKE

• Established Tines as the automation platform for workforce identity with documented standards and governance.
• Reduced employee onboarding time and access provisioning through automated workflows.
• Implemented infrastructure‑as‑code for critical IAM systems with version control and CI/CD pipelines.
• Built self‑service capabilities that significantly reduce help desk ticket volume.
• Created observability dashboards and automated access certification processes.
• Partnered with SecOps to establish initial NHI governance frameworks for AI agents and service accounts.
• Demonstrated effective and responsible use of AI tools to accelerate automation development.
• Elevated the team’s technical capabilities through mentorship and knowledge sharing.
• Developed strong partnerships with HR, Enterprise Apps, and cross‑functional teams.
• Positioned workforce IAM as a technical enabler rather than a bottleneck for the business.

OUR REWARDS

• Health, dental, and vision benefits; employee assistance program.
• Competitive PTO and 401k match.
• Parental leave and HSA contribution match.
• Paid subscription to Calm app.
• Generous external learning and tuition reimbursement benefits.
• Hybrid work schedule with flexibility to work from home or one of the primary offices.

SALARY RANGE

$108,800–$136,000 (annual base salary range; exact compensation may vary based on location, experience, and skills).

EEO STATEMENT

Apex Fintech Solutions is an equal opportunity employer that does not discriminate on the basis of race, color, religion, sex (including pregnancy, sexual orientation, and gender identity), national origin, age, disability, veteran status, marital status, or any other protected characteristic. Our hiring practices ensure that all qualified applicants receive fair consideration without regard to these characteristics.

DISABILITY STATEMENT

Apex Fintech Solutions is committed to creating an inclusive and accessible workplace for all candidates, including those with disabilities. We provide reasonable accommodations to qualified individuals with disabilities and encourage applicants to submit accommodation requests via the Candidate Accommodation Requests Form.