Senior Identity Platform Engineer — IAM & Access

Ramp; United States; Remote; USD 140,000 - 190,000; Full time

Benefits offered by this job

Flexible PTO

Centralized home-office equipment

Health and wellness stipend

Intra-office travel budget

Weekly coffee stipend

Job summary

Ramp is seeking a Senior Security Engineer, Identity to turn the identity layer into IAM as a service. You will design identity across Okta, Google Workspace, and internal apps, and implement it via Terraform and agentic workflows.

You will own the entitlement catalog, access governance, and audit capabilities, partnering with IT, Security Engineering, AI DevX, and Data teams to scale identity across the company.

Qualifications

• 6+ years in identity engineering or IAM with scale.
• Deep understanding of OAuth 2.0, OIDC, SAML, and SCIM.
• Experience with Okta or equivalent IAM at scale.
• Terraform experience managing identity providers.

Responsibilities

• Own Terraform for identity services: Okta apps, authorization servers, authentication policies, groups and SCIM provisioning.
• Design and operate custom authorization servers, including audiences, scopes, claims and access policies.
• Implement app-to-app and agent access via XAA and ID-JAG for delegated access governance.
• Own the IGA platform: entitlement catalog, ownership, access requests, time-bound grants and certifications.
• Build agentic workflows for access governance and review processes.
• Create identity graphs to target over-privileged access across identities.
• Maintain identity data lake and on-call explanations for events.

Skills

Identity engineering

IAM at scale

Okta

OAuth 2.0 / OIDC / SAML

SCIM

Terraform

Python or Go

CI/CD

Tools

Okta

Terraform

ISPM tooling

CI tooling

Job description

Ramp is seeking a Senior Security Engineer, Identity to turn the identity layer into IAM as a service. You will design identity across Okta, Google Workspace, and internal apps, and implement it via Terraform and agentic workflows.

You will own the entitlement catalog, access governance, and audit capabilities, partnering with IT, Security Engineering, AI DevX, and Data teams to scale identity across the company.