Senior IAM Engineer - Azure Entra & Zero Trust (Hybrid)

Roku, Inc.; New York (NY); Hybrid; USD 158,000 - 279,000; Full time

Benefits offered by this job

Health insurance

Equity awards

Life insurance

Disability benefits

Parental leave

Wellness benefits

Paid time off

Job summary

Roku, Inc. is seeking a senior Identity Engineer to strengthen Zero-Trust IAM across a geographically distributed workforce. You will standardize identity lifecycle, automate IAM workflows, and onboard enterprise apps into Azure Entra ID, including SSO and CA capabilities.

The role emphasizes collaboration with IT, Security, and Networking teams, plus building repeatable tooling from scratch with a DevOps mindset while communicating complex concepts clearly.

Qualifications

• 8+ years of hands-on IAM experience within the Microsoft ecosystem.
• Strong analytical skills for troubleshooting complex identity issues.
• Excellent communication to explain technical concepts to varied audiences.
• Deep experience with Microsoft Entra ID, including Privileged Identity Management.
• Automation and scripting with PowerShell, Azure CLI, and Microsoft Graph API.

Responsibilities

• Lead IAM standardization across global regions and enforce identity policies.
• Drive automation to streamline IAM administration and user experience.
• Onboard enterprise apps into Azure Entra ID, including SSO and CA.
• Enhance privileged access management and scalable monitoring/auditing.

Skills

IAM

Automation

Azure Entra ID

Conditional Access

RBAC

SSO

PowerShell

Azure CLI

Microsoft Graph

Azure Functions

Logic Apps

DevOps

Zero Trust

Jira

Confluence

Education

B.S. in Computer Science or related

Job description

Roku, Inc. is seeking a senior Identity Engineer to strengthen Zero-Trust IAM across a geographically distributed workforce. You will standardize identity lifecycle, automate IAM workflows, and onboard enterprise apps into Azure Entra ID, including SSO and CA capabilities.

The role emphasizes collaboration with IT, Security, and Networking teams, plus building repeatable tooling from scratch with a DevOps mindset while communicating complex concepts clearly.