Senior IAM & IGA Engineer — Identity Automation Lead

Tanium; Bellevue (WA); Hybrid; USD 180,000 - 230,000; Full time

Job summary

Tanium is seeking a Staff IAM engineer to design, implement, and manage IAM and IGA across its corporate infrastructure. You will evaluate new IAM/IGA tech, partner with cross-functional teams on strategy, and keep our identity ecosystem secure and compliant.

The role requires 8–10 years in IAM, experience with SSO, MFA, PAM, and IGA products, plus hands-on Entra ID and AD in a hybrid setting. A Bachelor's in CS or related field is expected.

Qualifications

• Bachelor's Degree in Computer Science, IT or equivalent experience.
• 8–10 years in identity and access management with IGA integrations.
• Experience implementing, configuring, and managing an IGA product.
• Hands-on with Entra ID and Active Directory in hybrid environments.
• Strong onboarding/off-boarding and lifecycle workflow knowledge.
• Scripting proficiency with PowerShell.
• Familiarity with ISO 27001, FedRAMP, GDPR, HIPAA.
• Experience with SSO, MFA and PAM tooling.

Responsibilities

• Design and manage IAM/IGA solutions across corporate infrastructure (SSO, MFA, PAM).
• Build identity automation for onboarding/offboarding and approvals.
• Own identity lifecycle monitoring and improvement.
• Partner with GRC to maintain IAM/IGA policies meeting regulatory standards.
• Assess IAM systems for security gaps and ensure patch compliance.
• Lead IAM/IGA projects: upgrades, migrations, integrations and performance.
• Respond to IAM-related incidents and mentor engineers.
• Maintain system design documentation.

Skills

IAM

IGA

SSO

MFA

PAM

PowerShell

GRC

Regulatory compliance

Education

Bachelor's Degree in Computer Science, IT or relevant field

Tools

Lumos

SailPoint

Saviynt

Entra ID

Active Directory

Job description

Tanium is seeking a Staff IAM engineer to design, implement, and manage IAM and IGA across its corporate infrastructure. You will evaluate new IAM/IGA tech, partner with cross-functional teams on strategy, and keep our identity ecosystem secure and compliant.

The role requires 8–10 years in IAM, experience with SSO, MFA, PAM, and IGA products, plus hands-on Entra ID and AD in a hybrid setting. A Bachelor's in CS or related field is expected.