Senior Security Software Engineer, IAM - Moveworks

ServiceNow; Oregon; Hybrid; USD 140,000 - 180,000; Full time

Job summary

ServiceNow is seeking a Senior Identity & Access Management Engineer to design, build, and scale IAM solutions across cloud infrastructure and applications. You will own end-to-end IAM initiatives, from requirements through production rollout, ensuring secure, automated access controls.

Work will involve modernizing access reviews, reducing privilege sprawl, and delivering observable changes via SIEM and logging.

Qualifications

• 5+ years developing and maintaining IAM products/tools.
• Automation-first mindset with scalable software, Infrastructure as Code, and AI coding tools.
• Strong grasp of IAM best practices, least privilege and auditability.

Responsibilities

• Develop IAM solutions end to end across cloud infrastructure, SaaS apps, and internal systems.
• Architect secure access models and reduce privilege sprawl.
• Ensure observability with logging, metrics, and SIEM integration.

Skills

IAM development

Automation & IaC

Security & access control

AI coding tools

Production software

Education

BS in Computer Science

Tools

AWS

Azure

Teleport

Terraform

Job description

Company Description

It all started when engineer Fred Luddy wrote code that automated a tedious task for his coworker, Phyllis. She cried tears of joy. That moment inspired Fred to build a company that could do that for everyone—freeing people from busywork so they could focus on meaningful work. Today, ServiceNow is the AI control tower for business reinvention. Our ServiceNow AI platform brings together any AI, any data, and any workflow— helping 85% of the Fortune 500 work smarter, faster, and better. We're building an AI-native culture where technology and talent are unstoppable together. And we're just getting started. Join us to put AI to work for people.

Job Description

The Role

Do you care deeply about secure access at scale? Making sure the right people have the right access, exactly when they need it, without slowing teams down? Join Moveworks and help shape the future of our identity and access strategy. At Moveworks, we believe great security is an enabler, not a blocker. As a Senior Identity & Access Management Engineer, you'll be a hands‑on technical developer, coding, designing, building, and scaling IAM solutions across cloud infrastructure, SaaS applications, and internal systems. You'll own the development of IAM initiatives end‑to‑end, from untangling ambiguous access challenges to architecting secure, automated solutions and driving them into production. In this role, you'll develop robust access models across AWS, Azure, Kubernetes, and beyond; reduce privilege sprawl through thoughtful role design; and build strong observability through logging, metrics, and reporting in our SIEM. You'll modernize access reviews to deliver real security impact with minimal friction, continuously de‑risk IAM threats, and partner closely with teams to drive adoption of secure‑by‑default patterns. Your work will directly protect Moveworks' most critical systems while enabling our engineers to move fast, safely, and confidently.

What you get to do in this role:

• Be the technical developer to drive IAM application development: Code, design, and implement solutions with extensive knowledge in AWS, Azure, Teleport, and Terraform. Enabling robust and reliable solutions to keep our engineering teams active.
• Drive IAM projects end‑to‑end: Take ambiguous access problems, understand and have the ability to define requirements, architect solutions, and own the rollout/operationalization (not just the design).
• Develop with secure access models in mind: Continuously develop role design improvements and access assignment patterns across AWS, Kubernetes, SaaS apps, and internal systems to reduce unnecessary privileges, minimize manual grants, and create scalable "safe baseline" access that covers routine work without daily elevation.
• Develop on operationalizing logging and metrics: Ensure access changes are observable in our Security Information and Event Management (SIEM) tool; build repeatable reporting that surfaces risky access and drift.
• Run and improve user access reviews (UAR): Develop, execute and design a UAR process & solution that meets compliance requirements while improving real security signal—minimizing approver burden through scoping, automation, and clear decision support.
• Develop technology to continuously de‑risk: Identify high‑risk permissions and misuse paths, propose appropriate controls and mitigations, drive adoption with partner teams, and develop solutions to continuously de‑risk.
• Operate with strong security judgment and high signal: Reliably distinguish meaningful IAM risk from noise, gather context efficiently, and elevate with crisp rationale and actionable mitigations.
• Document and standardize the paved road: Write lightweight procedures, runbooks, and automation so access decisions are consistent, scalable, and not dependent on tribal knowledge.

Qualifications

To be successful in this role you have:

• Experience: 5+ years of experience developing and maintaining IAM products/tools.
• Automation-first mindset: Experience writing production‑ready scalable software, Infrastructure as Code, and using AI coding tools to build reliable automation.
• IAM Expertise: Strong grasp of IAM best practices, techniques, and common failure modes (e.g., least privilege, privilege escalation paths, separation of duties, breakglass, auditability). Ability to spot dangerous permissions and identify suitable mitigations and controls.
• Educational Background: BS+ in computer science or a related field, or equivalent relevant experience.
• US Citizenship preferred

Additional Information

Work Personas

We approach our distributed world of work with flexibility and trust. Work personas (flexible, remote, or required in office) are categories that are assigned to ServiceNow employees depending on the nature of their work and their assigned work location. Learn more here . To determine eligibility for a work persona, ServiceNow may confirm the distance between your primary residence and the closest ServiceNow office using a third‑party service.

Equal Opportunity Employer

Equal Opportunity EmployerServiceNow is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, national origin, age, disability, gender identity, veteran status, or any other category protected by law. In addition, all qualified applicants with arrest or conviction records will be considered for employment in accordance with legal requirements.

Accommodations

We strive to create an accessible and inclusive experience for all candidates. If you require a reasonable accommodation to complete any part of the application process, or are unable to use this online application and need an alternative method to apply, please contact for assistance.

Export Control Regulations

For positions requiring access to controlled technology subject to export control regulations, including the U.S. Export Administration Regulations (EAR), ServiceNow may be required to obtain export control approval from government authorities for certain individuals. All employment is contingent upon ServiceNow obtaining any export license or other approval that may be required by relevant export control authorities.

Employee Type: Regular Region: AMS - North America and Canada Work Persona: Flexible or Remote