Senior IAM Engineer: Identity & Access Strategy

Tanium; Durham (NC); Hybrid; USD 180,000 - 230,000; Full time

Job summary

Tanium is seeking a Staff IAM engineer to design, implement, and manage IAM and IGA across its corporate infrastructure. You’ll evaluate new IAM/IGA technologies, partner with cross-functional teams on strategy, and keep our identity ecosystem secure, compliant, and efficient.

This hybrid role requires in-office presence at Durham, NC at least three days per week, with additional locations including Addison, Bellevue, Emeryville, or Reston.

Qualifications

• 8-10 years in identity and access management, including IGA integrations with HRIS systems.
• Experience implementing, configuring, and managing an IGA product like Lumos, SailPoint, Saviynt.
• Hands-on expertise with Entra ID and Active Directory in a hybrid environment.
• Onboarding/offboarding standards and lifecycle workflows knowledge.
• Scripting proficiency (PowerShell).
• Security/compliance frameworks: ISO 27001, FedRAMP, GDPR, HIPAA.
• Experience with SSO, MFA, and PAM tooling.
• Strong cross-team communication and collaboration skills.

Responsibilities

• Design and manage IAM/IGA solutions across corporate infrastructure, including SSO, MFA, and PAM.
• Build and maintain identity automation – onboarding, off-boarding, entitlements, and workflows.
• Own the identity lifecycle: monitor, document, and improve it.
• Partner with GRC to develop IAM/IGA policies and standards for regulatory compliance.
• Assess IAM systems for security gaps and ensure patch and policy compliance.
• Lead technical delivery on IAM/IGA projects: upgrades, migrations, integrations.
• Respond to and resolve IAM-related incidents.
• Mentor engineers across IT and Security and track industry trends.
• Maintain system design documentation.

Skills

IAM

IGA

SSO

MFA

PAM

Entra ID

Active Directory

PowerShell

Compliance frameworks

Hybrid environment

Education

Bachelor's Degree in Computer Science / IT

Tools

Lumos

SailPoint

Saviynt

Job description

Tanium is seeking a Staff IAM engineer to design, implement, and manage IAM and IGA across its corporate infrastructure. You’ll evaluate new IAM/IGA technologies, partner with cross-functional teams on strategy, and keep our identity ecosystem secure, compliant, and efficient.

This hybrid role requires in-office presence at Durham, NC at least three days per week, with additional locations including Addison, Bellevue, Emeryville, or Reston.