Senior IAM Engineer: Zero-Trust & Azure Entra

Roku; Santa Monica (CA); Hybrid; USD 158,000 - 279,000; Full time

Benefits offered by this job

Health insurance

Equity awards

Life insurance

Disability benefits

Parental leave

Wellness benefits

Paid time off

Job summary

Roku is seeking a senior‑level Identity Engineer to advance its Zero‑Trust architecture and optimize its Microsoft‑centric identity platform for a distributed workforce.

You will lead IAM standardization, drive automation, and support onboarding of enterprise apps into Azure Entra ID, with a focus on CA, RBAC, and SSO. Strong scripting, DevOps mindset, and excellent communication are essential.

Qualifications

• 8+ years of hands‑on IAM experience within the Microsoft ecosystem.
• Strong analytical skills and attention to detail for troubleshooting complex identity issues.
• Excellent communication skills for technical and non‑technical stakeholders.
• Deep experience with Microsoft Entra ID including CA, Identity Governance, and PIM.

Responsibilities

• Lead enterprise‑wide IAM standardization and governance across global regions.
• Drive automation to streamline IAM administration and improve user experience.
• Onboard and manage enterprise apps in Azure Entra ID including SSO and RBAC.
• Enhance privileged access management and implement scalable monitoring and auditing.

Skills

IAM

Automation

PowerShell

Azure CLI

Entra ID

Education

Bachelor's degree in CS/IT/Engineering

Tools

HashiCorp Vault

Azure Key Vault

PIM

CyberArk

Microsoft Graph API

Logic Apps

Function Apps

Job description

Roku is seeking a senior‑level Identity Engineer to advance its Zero‑Trust architecture and optimize its Microsoft‑centric identity platform for a distributed workforce.

You will lead IAM standardization, drive automation, and support onboarding of enterprise apps into Azure Entra ID, with a focus on CA, RBAC, and SSO. Strong scripting, DevOps mindset, and excellent communication are essential.