Senior IAM Engineer - Okta & Automation Lead

Crusoe; San Francisco (CA); On-site; USD 165,000 - 200,000; Full time

Benefits offered by this job

Competitive compensation

Equity packages

Health insurance

401(k) plan

Paid time off

Job summary

Crusoe in San Francisco seeks a Senior Systems Engineer to own day-to-day identity and access management operations, focusing on Okta and SSO-enabled apps. You’ll onboard and offboard users, manage access, and build automations to scale IAM across the environment.

You will run periodic access reviews, enforce least privilege, and collaborate with API, engineering, and Service Desk teams. Strong scripting and governance experience are required.

Qualifications

• 5+ years in Systems Engineering, IAM, or IT operations.
• Hands-on Okta administration experience.
• Experience with identity governance platforms (e.g., Lumos or similar).
• Familiarity with SCIM provisioning and automation tooling.
• Proficient in Python or PowerShell for bulk ops.

Responsibilities

• Own day-to-day IAM operations in Okta and SSO-enabled apps.
• Onboard/off-board users and manage access during hires, terminations, and transfers.
• Build automations with Okta Workflows and no-code tools; create SCIM solutions where needed.
• Conduct periodic access reviews and entitlement certifications; enforce least- privilege.
• Collaborate with API, engineering, and Service Desk teams to scale IAM across the stack.
• Troubleshoot authentication failures, API errors, and script-driven bulk operations.

Skills

Okta administration

IAM governance

RBAC

Python/PowerShell

SaaS administration

SCIM provisioning

Education

Bachelor's degree in CS/IT

Tools

Lumos

Okta Identity Governance

Slack

Google Workspace

Job description

Crusoe in San Francisco seeks a Senior Systems Engineer to own day-to-day identity and access management operations, focusing on Okta and SSO-enabled apps. You’ll onboard and offboard users, manage access, and build automations to scale IAM across the environment.

You will run periodic access reviews, enforce least privilege, and collaborate with API, engineering, and Service Desk teams. Strong scripting and governance experience are required.