Senior Identity & Access Management Engineer

Embedded Shishya; United States; Hybrid; USD 120,000 - 190,000; Full time

Job summary

Autodesk is seeking a Senior Identity & Access Management Engineer to design, operate, and improve authentication, federation, and lifecycle processes across the company.

You will build identity platform services for workforce and cloud apps, automate workflows, and support identity integration during mergers, acquisitions, or divestitures. This role supports hybrid or remote hiring and reports to the Engineering Manager, Enterprise Identity Services.

Qualifications

• Bachelor’s degree in CS/IT or related field, or equivalent experience.
• 5+ years designing and delivering IAM solutions across auth, federation, and lifecycle.
• Experience integrating IAM across cloud and on-premises environments.
• Strong knowledge of SAML, OAuth, OpenID Connect, LDAP, Kerberos, SCIM.
• Hands-on with IAM platforms (Okta, Entra ID, Ping, SailPoint, CyberArk).

Responsibilities

• Design and improve enterprise identity services across authentication, federation, access management, lifecycle, and governance.
• Build and operate identity platform services for workforce, cloud, and enterprise app access.
• Support identity integration for mergers, acquisitions, divestitures, onboarding, and platform consolidation.
• Create reusable standards, patterns, automation, and runbooks for identity integrations and operations.
• Implement and support SSO, MFA, conditional access, federation, OAuth, OpenID Connect, SAML, SCIM, and directory integrations.
• Partner with security, infra, application, and business teams to deliver identity solutions.
• Troubleshoot identity issues across authentication flows, federation, access policies, provisioning, and integrations.
• Improve identity service reliability through monitoring, incident response, automation, and security hardening.
• Assess identity platforms and access patterns to reduce risk and support audit/compliance needs.
• Contribute to the identity roadmap by recommending improvements to security, usability, and operational efficiency.

Skills

IAM systems

SAML

OAuth

OpenID Connect

MFA

Python

Cloud & on-prem

Okta

Microsoft Entra ID

Ping Identity

SailPoint

Saviynt

CyberArk

Education

Bachelor’s degree in CS/IT/Cybersecurity

Master’s degree

Security certifications CISSP/CCSP

Tools

Okta

Microsoft Entra ID

Ping Identity

SailPoint

Saviynt

CyberArk

Job description

Job Requisition ID # 26WD100006

We are looking for a Senior Identity & Access Management Engineer focused on enterprise identity services. This role will help design, operate, and improve the platforms and integrations that support authentication, federation, access management, and identity lifecycle processes across the company. The work includes platform engineering, application onboarding, automation, troubleshooting, and support for business events such as mergers, acquisitions, and divestitures.

Do you thrive in an environment where you can work on engaging and challenging projects? Do you have a start-up mentality? Every year, Autodesk hires talented engineers to join our global teams and benefit from unlimited access to our technology and industry mentors. If this sounds like you… let's talk.

We support hybrid or remote hiring, and you will report an Engineering Manager, Enterprise Identity Services.

Responsibilities

• Design and improve enterprise identity services across authentication, federation, access management, lifecycle, and governance
• Build and operate identity platform services for workforce, cloud, and enterprise application access
• Support identity integration work for mergers, acquisitions, divestitures, application onboarding, and platform consolidation
• Create reusable standards, patterns, automation, and runbooks for identity integrations and operations
• Implement and support SSO, MFA, conditional access, federation, OAuth, OpenID Connect, SAML, SCIM, and directory integrations
• Partner with security, infrastructure, application, and business teams to define and deliver identity solutions
• Troubleshoot identity issues across authentication flows, federation, access policies, provisioning, and integrations
• Improve identity service reliability through monitoring, incident response, automation, and security hardening
• Assess identity platforms and access patterns to reduce risk and support audit and compliance needs
• Contribute to the identity roadmap by recommending improvements to security, usability, and operational efficiency

Minimum qualifications

• Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related field, or equivalent experience
• A minimum of 5 years of experience engineering identity and access management solutions across authentication, federation, access control, lifecycle management, access governance, or related identity domains
• Demonstrable experience integrating, modernizing, or migrating IAM capabilities across enterprise environments, including public cloud and on-premises systems
• Deep understanding of identity and authentication protocols such as SAML, OAuth, OpenID Connect, LDAP, Kerberos, and SCIM
• Experience with enterprise identity platforms such as Okta, Microsoft Entra ID, Ping, SailPoint, Saviynt, CyberArk, or similar technologies
• Working knowledge of MFA, conditional access, privileged access, identity lifecycle processes, access reviews, and least-privilege access models
• Proficiency in scripting, automation, or programming languages such as Python, PowerShell, JavaScript, or similar
• Strong knowledge of security standards, control frameworks, risk management practices, and identity security best practices
• Exceptional problem-solving and analytical skills with the ability to troubleshoot complex technical issues across distributed systems
• Excellent communication and collaboration abilities, including the ability to work effectively with technical teams, business stakeholders, and application owners
• Proven ability to work independently, prioritize effectively, and manage multiple engineering initiatives simultaneously

Preferred Qualifications

• Master’s degree in a related field
• Certification in relevant security, identity, or cloud technologies such as CISSP, SSCP, CCSP, Microsoft, Okta, AWS, or similar
• Experience with cloud services and infrastructure across AWS, Azure, Google Cloud, or hybrid enterprise environments
• Knowledge of DevOps, infrastructure as code, CI/CD, API integrations, and platform engineering practices
• Experience supporting identity-related work for mergers, acquisitions, divestitures, application rationalization, or enterprise transformation programs
• Experience leading technical projects, mentoring engineers, or influencing cross-functional technical direction

Learn More

About Autodesk

Welcome to Autodesk! Amazing things are created every day with our software – from the greenest buildings and cleanest cars to the smartest factories and biggest hit movies. We help innovators turn their ideas into reality, transforming not only how things are made, but what can be made.

Salary transparency

Belonging

We take pride in cultivating a culture of belonging where everyone can thrive. Learn more here:

In-Person Onboarding and Identity Verification

This role may require in-person onboarding and/or in-person ID verification.

Are you an existing contractor or consultant with Autodesk?