Senior IAM Engineer - Enterprise Authentication & Access

Rozgoo; United States; Remote; USD 150,000 - 210,000; Full time

Job summary

Drata is seeking an experienced Identity & Access Management engineer to design and operate the authentication surface and authorization framework for enterprise customers. You will own SSO integrations, token management, and MFA, while shaping scalable SCIM provisioning and identity sync across major IdPs.

You will collaborate on RBAC/ABAC policy engines, design secure API interfaces, and ensure end-to-end security with observability and audit trails.

Qualifications

• 7+ years building production software with identity focus.
• 3+ years in a NodeJS/TypeScript codebase with strong typing.
• Hands-on experience with OAuth 2.0/OIDC, SAML 2.0, and SCIM 2.0.
• Designing or operating access control systems (RBAC/ABAC).
• Strong observability and security-minded approach.
• Cloud experience, preferably AWS, and collaborative architecture skills.

Responsibilities

• Design and operate Drata's authentication surface, including SSO integrations, session handling, token management, and MFA.
• Contribute to authorization architecture, balancing RBAC/ABAC and policy engines.
• Build and harden SCIM provisioning at enterprise scale with group sync and role mapping.
• Develop identity sync workflows across major IdPs with observability and retry semantics.
• Implement auth for AI features and agentic workflows with audit trails.
• Provide IAM primitives across services and participate in cross-team architecture.
• Threat-model identity surfaces and partner with security on incident responses.

Skills

Identity security

RBAC/ABAC

API design

Observability

Threat modeling

Architecture collaboration

Tools

Node.js

TypeScript

AWS

OAuth 2.0 / OIDC

SAML 2.0

SCIM provisioning

Job description

Drata is seeking an experienced Identity & Access Management engineer to design and operate the authentication surface and authorization framework for enterprise customers. You will own SSO integrations, token management, and MFA, while shaping scalable SCIM provisioning and identity sync across major IdPs.

You will collaborate on RBAC/ABAC policy engines, design secure API interfaces, and ensure end-to-end security with observability and audit trails.