Senior IAM & Cloud Security Engineer

IBM; San Jose (CA); On-site; USD 160,000 - 210,000; Full time

Job summary

IBM, a leader in enterprise technology, seeks an experienced security-focused engineer to own identity and access management across large-scale IdP environments. You will govern access reviews, automate complex tasks, and strengthen security controls across cloud platforms and SaaS services.

Responsibilities include implementing SAML/OIDC, managing SailPoint-based governance, and integrating across AWS, Azure, and GCP with Palo Alto Networks security tooling.

Qualifications

• 5+ years in systems, identity, or cloud engineering at a fast-moving tech or SaaS company
• Experience with Okta and/or Microsoft Entra ID (Azure AD)
• Knowledge of SAML 2.0, OAuth 2.0 / OIDC, PKCE, client credentials, SCIM provisioning
• Experience with SailPoint or similar IGA tools (IdentityIQ/IdentityNow)
• Multi-cloud IAM/RBAC across AWS, Azure, GCP; network security controls
• Experience administering Palo Alto Networks VPN/SASE (GlobalProtect, Prisma Access) and HIP policy management
• Automation and scripting (Python, shell) to replace manual work
• Strong communication and root-cause analysis skills

Responsibilities

• Identity & access management across IdP infrastructure
• Lead identity governance processes and quarterly UARs
• Manage multi-cloud IAM, RBAC, service accounts, and network security controls
• Architect and administer Zero Trust & network security tooling
• Administer SaaS platforms (Google Workspace, Microsoft 365) and ensure API security controls
• Support audits & compliance efforts (FedRAMP, SOC 2, ISO 27001)
• Develop automation to reduce repetitive manual work
• Collaborate with security, infra, and network eng to resolve cross-system issues
• Document runbooks and architecture records

Skills

Identity & Access Management

Multi-Cloud Admin

Zero Trust Security

Identity Governance

SAML/OIDC

Security Audits

Education

Bachelor's degree in CS/IT

Tools

Okta & Entra ID

SailPoint

Azure AD

GCP IAM

Job description

IBM, a leader in enterprise technology, seeks an experienced security-focused engineer to own identity and access management across large-scale IdP environments. You will govern access reviews, automate complex tasks, and strengthen security controls across cloud platforms and SaaS services.

Responsibilities include implementing SAML/OIDC, managing SailPoint-based governance, and integrating across AWS, Azure, and GCP with Palo Alto Networks security tooling.