Senior Identity & Zero-Trust Systems Engineer

IBM; Raleigh (NC); On-site; USD 120,000 - 180,000; Full time

Job summary

IBM is seeking a Senior Systems Engineer to own end-to-end identity, infrastructure, automation, and zero-trust systems. You will manage IdP infrastructure (Okta/Entra), multi-cloud IAM (AWS/Azure/GCP), and SaaS platforms, driving security and audit readiness across complex environments.

Responsibilities include governance, access reviews, and automation to replace manual work. Collaboration with security, infra, and compliance teams is essential to keep the company productive and compliant.

Qualifications

• 5+ years of systems, identity, or cloud engineering experience.
• Hands-on with Okta and/or Microsoft Entra ID (Azure AD).
• Knowledge of SAML 2.0, OAuth 2.0 / OIDC, PKCE and SCIM provisioning.
• Experience with SailPoint or similar IGA tools.
• Experience across AWS, Azure, and GCP IAM/RBAC and network controls.
• Experience with Palo Alto Networks VPN and SASE (GlobalProtect, Prisma Access).
• Experience administering Google Workspace or Microsoft 365 at an organizational level.
• Experience with FedRAMP, SOC 2, or ISO 27001 audits.
• Automation with Python, shell, GitOps/IaC.

Responsibilities

• Own end-to-end systems design, hardening, and operation.
• Administer IdP infrastructure and governance processes.
• Manage multi-cloud IAM, RBAC, and network controls across environments.
• Architect and maintain security platforms for zero trust architecture.
• Lead technical evidence collection and remediation for audits and access reviews.
• Build automation scripts and integrations to reduce manual work.
• Document runbooks and architecture to prevent knowledge silos.
• Collaborate with security, infra, and compliance teams to stay audit-ready.

Skills

Identity Management

Cloud Engineering

Zero Trust

Automation

Security Governance

Communication

Education

Bachelor's Degree

Tools

Okta

Microsoft Entra ID

SailPoint

Palo Alto Networks

GlobalProtect

Prisma Access

Google Workspace

GitHub Enterprise

AWS

Azure

GCP

Job description

IBM is seeking a Senior Systems Engineer to own end-to-end identity, infrastructure, automation, and zero-trust systems. You will manage IdP infrastructure (Okta/Entra), multi-cloud IAM (AWS/Azure/GCP), and SaaS platforms, driving security and audit readiness across complex environments.

Responsibilities include governance, access reviews, and automation to replace manual work. Collaboration with security, infra, and compliance teams is essential to keep the company productive and compliant.