Senior IAM Engineer: Zero Trust, Entra & Automation

Segment (Twilio); Santa Monica (CA); On-site; USD 158,000 - 279,000; Full time

Benefits offered by this job

Health insurance

Equity awards

Life insurance

Disability benefits

Parental leave

Wellness benefits

Paid time off

Global mental health resources

Job summary

Roku seeks a senior Identity Engineer to strengthen its Zero‑Trust architecture and standardize global IAM practices. You will optimize the Microsoft‑centric identity platform and enable a geographically distributed workforce with robust automation and Azure Entra ID integration.

You will lead policy enforcement, access governance, and onboarding of enterprise apps while collaborating across IT, security, and networking teams to deliver secure, scalable solutions.

Qualifications

• 8+ years hands-on IAM and cloud automation experience.
• Strong analytical and problem-solving abilities in complex infra.
• Excellent communication for technical and non-technical stakeholders.
• Deep experience with Entra ID, CA, Identity Governance, and PIM.
• Familiar with Microsoft 365 services: Exchange Online, Defender, Purview, Sentinel, Intune.
• Proficient in PowerShell, Azure CLI, and Graph API.
• Onboarding and managing enterprise apps in Azure Entra ID.
• Understanding of MFA and security standards.
• Experience with policy-as-code concepts (OPA / Rego) is a plus.

Responsibilities

• Lead enterprise‑wide IAM standardization across global regions.
• Drive automation across IAM to streamline administration.
• Support onboarding of enterprise apps into Azure Entra ID (SSO, CA, RBAC).
• Enhance privileged access management and scalable monitoring.
• Collaborate with IT, Networking, and Security teams on identity issues.
• Advance Zero Trust Identity Fabric principles across users, devices, workloads.
• Build identity automation with a DevOps mindset; create tooling from scratch.

Skills

Identity and access management

Microsoft Entra ID

Azure

PowerShell

Azure CLI

Microsoft Graph API

OAuth2 / OpenID Connect / SAML

Zero Trust Architecture

DevOps scripting

Policy-as-code (OPA / Rego)

Education

B.S. in Computer Science, IT, Engineering, or equivalent

Tools

Jira

Confluence

Job description

Roku seeks a senior Identity Engineer to strengthen its Zero‑Trust architecture and standardize global IAM practices. You will optimize the Microsoft‑centric identity platform and enable a geographically distributed workforce with robust automation and Azure Entra ID integration.

You will lead policy enforcement, access governance, and onboarding of enterprise apps while collaborating across IT, security, and networking teams to deliver secure, scalable solutions.