Senior IAM Engineer — Zero-Trust & Automation

Verkada Inc.; San Mateo (CA); On-site; USD 200,000 - 300,000; Full time

Benefits offered by this job

Healthcare coverage

Mental health support

Paid parental leave

Flexible PTO

Job summary

Verkada Inc. is seeking a Senior IAM Engineer in the San Mateo area to define and enforce identity and access across our infrastructure.

You will codify identity boundaries in Terraform and Rego, drive least privilege across AWS roles, and implement self-service access guided by agentic workflows. You will own lifecycle management for human and non-human identities, automate reviews, and build tools to detect drift and over-permissioned access, collaborating with security and product teams to

Qualifications

• Bachelor's degree or equivalent practical experience in CS or related field.
• 3+ years hands-on identity and access management in a cloud-native environment.
• Deep AWS IAM expertise: policy evaluation, permissions, SCPs, Terraform expressions.
• Fluency with SAML, OIDC, OAuth 2.0, SCIM; RBAC/ABAC or policy-based access.
• Ability to automate work via scripting or low-code platforms.
• Excellent written and verbal communication to explain access decisions.

Responsibilities

• Manage IAM infrastructure as code using Terraform with policy-as-code.
• Advance zero trust controls for engineering access: short-lived credentials and just-in-time elevation.
• Own the access lifecycle for human and non-human identities including joiner/mover/leaver flows.
• Operate access review and certification workflows to produce audit evidence.
• Write tools to surface over-permissioned identities, unused credentials, and policy drift; drive remediation.
• Build agentic workflows to automate access requests, approvals, risk scoring, and reviews.
• Collaborate with security, infrastructure, and product teams to embed secure IAM design.

Skills

IAM security

Automation scripting

Communication skills

Education

Bachelor of Science in Computer Science

Tools

Terraform

Okta administration

Job description

Verkada Inc. is seeking a Senior IAM Engineer in the San Mateo area to define and enforce identity and access across our infrastructure.

You will codify identity boundaries in Terraform and Rego, drive least privilege across AWS roles, and implement self-service access guided by agentic workflows. You will own lifecycle management for human and non-human identities, automate reviews, and build tools to detect drift and over-permissioned access, collaborating with security and product teams to