Senior IAM Engineer - FedRAMP & Cloud Access

Rubrik; Boise (ID); Remote; USD 163,400 - 272,400; Full time

Job summary

Rubrik is seeking a highly skilled Senior IAM Engineer to join our Identity & Access Management team, reporting directly to the Senior Manager. You will design, implement, and operate secure workforce identity services for Rubrik’s RSC‑G environment.

You will own Okta and SailPoint administration in FedRAMP Moderate/High contexts, implement strong authentication and authorization controls (MFA, device trust, network zones), integrate SCIM and SSO for SaaS and GovCloud platforms, and partner with

Qualifications

• 8+ years in IAM with SailPoint ISC or similar enterprise IAM
• Hands-on Okta administration: SSO, SCIM provisioning, API automation
• Experience with IAM in FedRAMP/government or regulated environments
• Knowledge of identity protocols: SAML, OIDC, OAuth

Responsibilities

• Develop IAM strategy and architecture for enterprise access control
• Design IAM solutions for cloud and on‑prem environments with SSO and federation
• Implement and manage PAM across sensitive accounts
• Automate identity lifecycle: provisioning/de-provisioning
• Develop IAM policies and governance aligned with regulations (NIST, GDPR)
• Collaborate with engineering/operations to align IAM with business needs
• Ensure IAM systems are secure, auditable, and compliant
• Implement and scale identity protocols (SAML, OIDC, OAuth)
• Enhance security with MFA, device trust, RBAC/ABAC
• Lead User Access Reviews and audit readiness
• Automate workflows using Okta Workflows and APIs

Skills

IAM

SailPoint ISC

Okta

SSO

SCIM

MFA

FedRAMP

Cloud IAM

Tools

SailPoint ISC

Okta

Azure AD

AWS/Azure/GCP

Job description

Rubrik is seeking a highly skilled Senior IAM Engineer to join our Identity & Access Management team, reporting directly to the Senior Manager. You will design, implement, and operate secure workforce identity services for Rubrik’s RSC‑G environment.

You will own Okta and SailPoint administration in FedRAMP Moderate/High contexts, implement strong authentication and authorization controls (MFA, device trust, network zones), integrate SCIM and SSO for SaaS and GovCloud platforms, and partner with