Senior Identity & Cloud Systems Engineer

IBM; San Diego (CA); On-site; USD 120,000 - 190,000; Full time

Job summary

IBM is seeking a Senior Systems Engineer to own identity, infrastructure, automation, and zero trust systems across enterprise environments. You will design, harden, and run this critical stack, partnering with security, infrastructure, and compliance teams to keep operations secure and auditable.

You will manage Okta/SAML/OIDC, SailPoint governance, and multi-cloud IAM across AWS, Azure, and GCP, while advancing automation via scripts and IaC.

Qualifications

• 5+ years in systems, identity, or cloud engineering at a fast-moving tech or SaaS company.
• Enterprise IdP administration with Okta and/or Azure AD at scale.
• Solid knowledge of SAML 2.0, OAuth 2.0/OIDC, and SCIM provisioning.
• Identity governance with SailPoint/IGA tooling and access reviews.
• Multi-cloud experience across AWS, Azure, GCP with IAM/RBAC controls.
• Zero Trust: Palo Alto Networks GlobalProtect/Prisma Access administration.
• SaaS administration: Google Workspace or Microsoft 365 at org level.
• Experience supporting FedRAMP, SOC 2, ISO 27001 controls.
• Automation mindset: scripting (Python/shell) and GitOps/IaC.
• Strong written and verbal communication; able to explain tradeoffs clearly.

Responsibilities

• Own end-to-end identity, infrastructure, automation, and zero trust systems.
• Administer Okta SAML/OIDC, SCIM, and group rules; manage access policies.
• Lead SailPoint UARs and identity governance processes.
• Administer AWS, Azure, and GCP environments with IAM/RBAC and service accounts.
• Architect Palo Alto GlobalProtect/Prisma Access and HIP policy management.
• Oversee Google Workspace or Microsoft 365 at an organizational level.
• Lead audits and remediation for UARs and access controls; enforce least privilege.
• Identify recurring manual work and build scripts/integrations to automate.
• Maintain runbooks and architecture docs; collaborate with security and infra teams.

Skills

Identity & Access

Multi-Cloud

Zero Trust Security

SaaS Admin

Automation & Scripting

Education

Bachelor's Degree

Tools

Okta

Azure AD

SailPoint

IAM / RBAC

Job description

IBM is seeking a Senior Systems Engineer to own identity, infrastructure, automation, and zero trust systems across enterprise environments. You will design, harden, and run this critical stack, partnering with security, infrastructure, and compliance teams to keep operations secure and auditable.

You will manage Okta/SAML/OIDC, SailPoint governance, and multi-cloud IAM across AWS, Azure, and GCP, while advancing automation via scripts and IaC.