Senior IAM Engineer: Zero-Trust & Automation Lead

United States Digital Space LLC; San Mateo (CA); On-site; USD 200,000 - 300,000; Full time

Benefits offered by this job

Healthcare coverage

Vision & dental

HSA/FSA

Mental health support

Parental leave

Paid holidays

Professional dev stipend

Wellness benefits

Healthy lunches

Commuter benefits

Job summary

United States Digital Space LLC is seeking a Senior IAM Engineer to define and enforce identity and access across our infrastructure. You will codify identity boundaries in Terraform and Rego, drive least-privilege in AWS, and enable a self-service access model through scripts and low-code workflows.

You’ll collaborate with security, infrastructure, and product teams, communicating complex access decisions clearly to engineers, auditors, and executives, while advancing zero-trust controls and

Qualifications

• Bachelor of Science in Computer Science or equivalent practical experience
• 3+ years identity and access management in a cloud-native engineering environment
• Deep AWS IAM expertise: policy evaluation, permission boundaries, assume-role patterns
• Fluency with SAML, OIDC, OAuth 2.0, SCIM; RBAC/ABAC or policy-based access; Okta administration
• Automation for your own work using scripting or low-code/no-code platforms, including LLM or agent-driven steps
• Excellent written and verbal communication skills to explain decisions to engineers, auditors, and executives

Responsibilities

• Manage identity and access infrastructure as code in Terraform, with policy-as-code
• Advance zero trust controls for engineering access: short-lived credentials, just-in-time elevation
• Own the access lifecycle for human and non-human identities
• Operate access review and certification workflows that produce audit evidence
• Write tools to surface over-permissioned identities, unused credentials, and policy drift; drive remediation
• Build agentic workflows on a low-code orchestration platform for access requests, approvals, risk scoring, and review campaigns
• Partner with security, infrastructure, and product engineering teams so secure paths are easy and IAM design is informed

Skills

IAM experience

AWS IAM

Identity protocols

Okta admin

Automation skills

Communication

Education

BS in CS or equivalent

Tools

Terraform

Rego

Job description

United States Digital Space LLC is seeking a Senior IAM Engineer to define and enforce identity and access across our infrastructure. You will codify identity boundaries in Terraform and Rego, drive least-privilege in AWS, and enable a self-service access model through scripts and low-code workflows.

You’ll collaborate with security, infrastructure, and product teams, communicating complex access decisions clearly to engineers, auditors, and executives, while advancing zero-trust controls and