Senior IAM Engineer — AI-Driven Access & Automation

Apply; Seattle, Northern (WA, KY); Hybrid; USD 180,000 - 220,000; Full time

Benefits offered by this job

Health insurance

Equity stock options

Retirement plans

Paid public holidays and unlimited PTO

Paid maternity and parental leave

Leaves of absence

Employee Assistance Program

Job summary

HackerOne is seeking a Senior Security Engineer to lead Identity and Access Management. You’ll design and deliver entitlement models for humans, service accounts, and AI agents, with automation and least-privilege principles.

You will work across Okta, AWS IAM, and cloud environments, applying AI-first tooling and coding practices to secure access across the platform. Remote-friendly role targeted to candidates near Seattle, WA; Washington DC; or other listed hubs, with a strong emphasis on data

Qualifications

• 5+ years of identity and access management, security engineering, or software engineering with substantial ownership of identity systems.
• Hands-on experience operating an enterprise identity provider such as Okta, including SAML, OIDC, SCIM, and lifecycle automation.
• Experience managing identity across an enterprise SaaS estate such as Google Workspace, Salesforce and Workday, including SCIM provisioning and group-driven entitlements.
• Experience with cloud IAM, ideally AWS, including policy design and short-lived credentials.
• Strong software engineering fundamentals with proficiency in Python, Go, or a similar language, and hands-on use of AI and LLM tooling and agentic coding tools in production engineering work.

Responsibilities

• Own the identity lifecycle end to end, from onboarding and creation through change to removal, for people, service accounts, and AI agents alike, building the automation that grants entitlements on evidence of legitimate need and removes them seamlessly and automatically.
• Design and build the access models on top of data classification, so that what an identity can reach follows from what the data is rather than from who asked.
• Make time-bound access the default for critical data, so that the secure path is the easy path.
• Engineer identity as code, keeping provisioning logic, entitlement policy, and access review rules in version control and under test across systems such as Okta, Lumos, and AWS IAM, applying First Principles Problem Solving rather than configuring by hand in consoles.
• Build AI and LLM-powered tooling that makes access review and entitlement anomaly detection continuous rather than periodic, embedding AI First practices so unusual patterns surface when they happen rather than at audit, and decide where AI is trusted to carry an access decision and where a person still signs it off.
• Bring non-human identities under the same discipline as human ones. Service accounts, workload identities, integrations, and AI agents each get an owner, a purpose, and an expiry, treated as the default rather than a cleanup project
• Continuously measure access and report the opportunity to reduce unnecessary entitlement, using Data-Driven Decision Making to prioritize where reduction matters most
• Partner with Engineering, Enterprise IT, and Compliance to embed identity controls into the systems they own, and support detection and incident response as the identity responder, containing access, reconstructing what an identity reached, and contributing to blameless retrospectives, demonstrating Change Agility as threats and tooling evolve

Skills

IAM

Python/Go

Cloud IAM

Okta

SAML/OIDC

Tools

Okta

Lumos

AWS IAM

Job description

HackerOne is seeking a Senior Security Engineer to lead Identity and Access Management. You’ll design and deliver entitlement models for humans, service accounts, and AI agents, with automation and least-privilege principles.

You will work across Okta, AWS IAM, and cloud environments, applying AI-first tooling and coding practices to secure access across the platform. Remote-friendly role targeted to candidates near Seattle, WA; Washington DC; or other listed hubs, with a strong emphasis on data