Senior IAM Engineer

VulnU; United States; Remote; USD 150,000 - 210,000; Full time

Benefits offered by this job

Equity

Job summary

Better is seeking a Senior IAM Engineer to own and advance our identity and access management program. You will be the subject matter expert for Okta, administering the platform end to end, integrating it with the systems our teams rely on daily, and partnering with Security to enforce strong, scalable access controls.

This hands-on role drives lifecycle automation, hardens application integrations, and serves as the senior escalation point for complex identity issues, continually improving

Qualifications

• 5+ years in Identity and Access Management or security roles.
• Hands-on Okta administration across users, groups, apps, and Workflows.
• Experience integrating Okta with Microsoft Entra ID/AD and Workday.

Responsibilities

• Administer Okta end to end across users, groups, apps, policies, and Workflows.
• Configure OAuth/OIDC, SAML, SCIM, and device-bound SSO policies.
• Integrate third-party SaaS apps with Okta including provisioning and de-provisioning.
• Partner with Security to implement IAM controls, policies, and risk-based access rules.
• Provide tier 2/3 support for IAM-related issues and triage.

Skills

Okta administration

IAM policy design

Troubleshooting

Security collaboration

REST API scripting

Tools

Okta Workflows

Entra ID / AD

Workday

SCIM provisioning

Job description

# Senior IAM EngineerBetter · better.comCategory: Identity & Access ManagementLocation: RemoteLevel: Senior## Quality of lifeWhat the posting states. Hover or tap a perk to see the line it came from.* EquityWhy Better. Why Now.Better is rebuilding home finance as an AI-native platform—turning a process that once took weeks into something that can happen in seconds.With over $110B in loans funded and $1.2B+ raised, we operate at real scale while rethinking how homeownership works from the ground up.The category hasn’t caught up yet. That’s the opportunity.Role SummaryWe are looking for a Senior IAM Engineer to own and advance our identity and access management program. You will be the subject matter expert for Okta and the broader IAM ecosystem at Better — administering the platform end to end, integrating it with the systems our teams rely on every day, and partnering closely with Security to ensure our access controls are strong, scalable, and easy to use. You will lead lifecycle automation, harden application integrations, and serve as the senior escalation point for complex identity issues. This is a hands-on, high-impact role for someone who enjoys solving complex identity problems and continuously improving the experience for the business.Key Responsibilities• Administer Okta end to end, including users, groups, applications, authentication policies, sign-on rules, network zones, and Okta Workflows across the full product suite.• Configure and support Okta authentication and access standards, including OAuth/OIDC, SAML, SCIM, Okta FastPass, Device Trust, device-bound SSO, and Device Access.• Integrate and manage third-party SaaS applications in Okta, including SSO setup, SCIM-based provisioning and de-provisioning, group push, and role mapping.• Own Okta's integrations with core enterprise systems, including Microsoft (Entra ID / Active Directory) and Workday as the HR system of record driving joiner, mover, and leaver events.• Design and operate the joiner/mover/leaver lifecycle, ensuring timely, accurate, and auditable provisioning and de-provisioning across all in-scope applications.• Ensure application integrations meet security best practices, including least-privilege access, MFA enforcement, strong authentication policies, and well-structured group and role design.• Partner with the Security team to design and implement Okta and application-level security controls, policies, and risk-based / adaptive access rules.• Support audit, compliance, and access certification activities (e.g., SOX, SOC 2) with reporting, evidence collection, and periodic access reviews.• Build and maintain Okta Workflows and other automations to streamline identity processes such as onboarding, offboarding, group membership, and access reviews.• Provide tier 2 and tier 3 support for IAM-related issues, including triage, root-cause analysis, and remediation, and serve as the escalation point for the helpdesk.• Document configurations, runbooks, and processes to support team continuity, onboarding, and audit readiness.Qualifications• 5+ years of experience in an Identity and Access Management, IT security, or systems engineering role.• Hands-on experience administering Okta in production across the full product suite, including users, groups, applications, authentication policies, and Okta Workflows.• Deep working knowledge of identity standards and Okta features, including OAuth/OIDC, SAML, SCIM, Okta FastPass, Device Trust, device-bound SSO, and Device Access.• Proven experience integrating third-party SaaS applications with Okta, including SSO and SCIM provisioning.• Experience integrating Okta with Microsoft (Entra ID / Active Directory).• Experience integrating Okta with Workday as the HR system of record driving lifecycle events.• Experience designing and operating joiner/mover/leaver lifecycle processes at scale.• Experience partnering with Security teams to implement IAM controls, policies, and best practices for application integrations and access design.• Experience providing tier 2 and tier 3 end-user support for identity-related issues.• Strong problem-solving and troubleshooting skills, with a structured, root-cause-driven approach.• Strong written and verbal communication skills, with the ability to work directly with business, IT, and security stakeholders.Nice to Have• Okta Certified Administrator, Okta Certified Consultant, or Okta Certified Master.• Experience building AI agents to assist with Okta and IAM management — for example, automating joiner/mover/leaver tasks, triaging access requests, running access reviews, surfacing anomalous sign-in or policy events, and providing self-service support through Slack or other channels.• Experience scripting and integrating with REST APIs (e.g., Python, JavaScript) to extend Okta and IAM workflows.• Experience with privileged access management (PAM) tools (e.g., CyberArk, BeyondTrust, Delinea, Keeper).• Experience supporting IAM in regulated environments (e.g., SOX, SOC 2, HIPAA, PCI).• Familiarity with Zero Trust principles and conditional/adaptive access design.By the numbers:We've funded over $110 billion in loans (more than any other fintech in the US!)Raised over $1.2 billion in equity capital to modernize the $15 trillion mortgage industryBetter's proprietary AI platform, Tinman, and voice-based AI mortgage assistant, BetsyTM, make us an award-winning lender:Banking Tech Award USA (2026): Best LendTech SolutionFintech Breakthrough Award (2026): Digital Mortgage Company of the YearNerdWallet Best of Award (2026): Best for Home Equity LoansFintech Breakthrough Award 2025: Best Lending InnovationYahoo! Finance (2025): Best Mortgage Lender for First-Time Homebuyers – Best for quick approvalYahoo! Finance (2025): Best Online Mortgage LenderMoney Magazine (2025): Best for fast closingForbes (2023): Best Online Mortgage LenderWe're building the future of home finance — and we're looking for smart, driven, ambitious innovators who are ready to tackle the most impactful work of their careers.DisclaimerBetter Home & Finance Holding Company is an equal opportunity employer committed to fostering an inclusive and diverse environment for our employees. We are committed to equal employment opportunities regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity or Veteran status, or any other reason protected by law.We are committed to working with and providing reasonable accommodation to applicants with physical or mental disabilities. Better will not discriminate against any qualified individual who is capable of performing the essential functions of the job with or without reasonable accommodation.We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.