Senior IAM Engineer: Build Secure Access at Scale

ServiceNow, Inc.; Washington (District of Columbia); Hybrid; USD 150,000 - 210,000; Full time

Job summary

Moveworks is seeking a Senior Identity & Access Management Engineer to secure access across AWS, Azure, Kubernetes, and SaaS apps. You will own IAM initiatives end-to-end, architect secure models, and reduce privilege sprawl while enabling engineering teams to move fast.

You’ll build observable access changes in SIEM, drive secure-by-default patterns, and partner with teams to implement scalable, automated solutions across broad cloud environments.

Qualifications

• 5+ years of experience developing and maintaining IAM products/tools.
• Automation-first mindset: production-ready software, IaC, and automated workflows.
• IAM best practices, least privilege, auditability, and risk-based access controls.
• BS+ in computer science or related field; equivalent experience accepted.
• US Citizenship preferred.

Responsibilities

• Code, design, and implement IAM solutions across cloud, SaaS, and internal systems.
• Own end-to-end IAM initiatives from requirements to rollout.
• Develop secure access models to minimize privileges and simplify normal work.
• Improve logging, metrics, and SIEM integrations for visibility and response.
• Run and optimize user access reviews (UAR) with automation to reduce burden.
• Identify high-risk permissions and implement mitigations with partner teams.
• Write runbooks and automation to standardize access decisions.
• Collaborate with security, engineering, and product teams to enforce secure-by-default patterns.

Skills

IAM

Automation

Infrastructure as Code

Education

BS+ in computer science

Tools

AWS

Azure

Teleport

Terraform

Kubernetes

Job description

Moveworks is seeking a Senior Identity & Access Management Engineer to secure access across AWS, Azure, Kubernetes, and SaaS apps. You will own IAM initiatives end-to-end, architect secure models, and reduce privilege sprawl while enabling engineering teams to move fast.

You’ll build observable access changes in SIEM, drive secure-by-default patterns, and partner with teams to implement scalable, automated solutions across broad cloud environments.