Senior Systems Engineer - Identity & Cloud Security

IBM; Rochester (MN); On-site; USD 120,000 - 150,000; Full time

Job summary

IBM is seeking a Senior Systems Engineer to own end-to-end identity, infrastructure, automation, and zero-trust systems. You’ll work across Okta, SailPoint, and multi-cloud environments while partnering with security, infrastructure, and compliance teams to stay audit-ready.

You will lead access reviews, enforce least-privilege, and automate recurring tasks using Python, shell, and Workato, ensuring scalable, compliant operations.

Qualifications

• 5+ years of experience in systems, identity, or cloud engineering.
• Enterprise IdP administration: hands-on with Okta and/or Entra ID.
• Authentication protocols: SAML 2.0, OAuth 2.0 / OIDC with PKCE and client credentials.
• Identity governance: experience with SailPoint or comparable IGA tool.
• Multi-cloud: AWS, Azure, and GCP IAM/RBAC and network security controls.
• Zero Trust & Network Security: experience with GlobalProtect/Prisma Access.
• SaaS administration: Google Workspace or Microsoft 365 at org level.
• Compliance exposure: experience with FedRAMP, SOC 2, ISO 27001.
• Automation mindset: GitOps/IaC and scripting (Python, shell).
• Clear written and verbal communication for engineers, auditors, and stakeholders.
• Strong troubleshooting to own cross-system problems to root cause.

Responsibilities

• Identity & Access Management: administer IdP infrastructure across Okta (SAML/OIDC, SCIM, groups, policies).
• Identity Governance: own identity governance and quarterly User Access Reviews.
• Multi-Cloud Administration: govern AWS, Azure, and GCP environments, including IAM roles and VPC controls.
• Zero Trust & Network Security: architect and administer Palo Alto platforms (GlobalProtect/Prisma Access).
• SaaS, AI & Developer Platforms: administer Google Workspace, GitHub Enterprise IAM, AVD, and related tools.
• Security Audits & Compliance: lead evidence collection and remediation for access reviews.
• Automation: build scripts or integrations to eliminate recurring manual work (Okta Workflows, Python/shell, Workato).
• Escalation & collaboration: partner with security, infrastructure, and network teams on complex issues.
• Runbooks & architecture docs: maintain documentation to reduce tribal knowledge.

Skills

IAM

Identity Governance

Multi-Cloud Admin

Zero Trust Security

SaaS Administration

Audits & Compliance

Automation

Documentation

Communication

Education

Bachelor's Degree

Tools

Okta

Microsoft Entra ID

SailPoint

GCP

AWS

Azure

GlobalProtect

Prisma Access

Google Workspace

Workato

Job description

IBM is seeking a Senior Systems Engineer to own end-to-end identity, infrastructure, automation, and zero-trust systems. You’ll work across Okta, SailPoint, and multi-cloud environments while partnering with security, infrastructure, and compliance teams to stay audit-ready.

You will lead access reviews, enforce least-privilege, and automate recurring tasks using Python, shell, and Workato, ensuring scalable, compliant operations.