Senior Systems Engineer - Identity, Cloud & Zero-Trust

IBM; Durham (NC); On-site; USD 120,000 - 170,000; Full time

Job summary

Confluent, an IBM Company, is seeking a Senior Systems Engineer to own end-to-end IAM, cloud security, and automation. You will administer IdP, govern access, and work across AWS, Azure, and GCP to ensure audit-ready, zero-trust posture.

You will collaborate with security, infrastructure, and compliance teams, driving automation and robust documentation while supporting FedRAMP/SOC2/audit readiness.

Qualifications

• 5+ years of experience in systems, identity, or cloud engineering.
• Enterprise IdP administration with Okta and/or Microsoft Entra ID at scale.
• SAML 2.0, OAuth 2.0 / OIDC (PKCE, Client Credentials) incl. SCIM provisioning.
• Identity governance with SailPoint/IdentityIQ/IdentityNow or Saviynt.
• Multi-cloud IAM/RBAC with AWS, Azure, GCP and network security controls.
• Zero Trust & Network Security: GlobalProtect/Prisma Access, HIP policy management.
• SaaS administration: Google Workspace or Microsoft 365 at org level.
• Compliance exposure: FedRAMP, SOC 2, ISO 27001 experience.
• Automation mindset: GitOps/IaC and scripting to replace manual work.
• Excellent written and verbal communication; translate tech tradeoffs clearly.
• Strong troubleshooting across cross-system problems to root cause.

Responsibilities

• Own identity, access, and cloud security end-to-end.
• Administer IdP infrastructure (Okta/Azure AD) and governance (SailPoint/Saviynt).
• Manage multi-cloud environments (AWS, Azure, GCP) and IAM policies.
• Architect Palo Alto Networks security platforms (GlobalProtect, Prisma Access).
• Administer Google Workspace and GitHub Enterprise IAM.
• Lead audits and remediation for UARs and access reviews.
• Build automation to eliminate recurring manual work.
• Collaborate with security, infrastructure, and network teams.
• Maintain runbooks and architecture docs to avoid tribal knowledge.

Skills

Okta/Microsoft Entra

SAML/OIDC

SCIM provisioning

SailPoint/IAM

Multi-cloud IAM

Zero Trust Security

Palo Alto VPN

Google Workspace admin

GitOps/IaC

Python/Shell scripting

Audit/compliance support

Communication skills

Troubleshooting

Education

Bachelor's Degree

Tools

GitHub Enterprise

Azure Virtual Desktop

Jamf

Intune

Glean integration

Job description

Confluent, an IBM Company, is seeking a Senior Systems Engineer to own end-to-end IAM, cloud security, and automation. You will administer IdP, govern access, and work across AWS, Azure, and GCP to ensure audit-ready, zero-trust posture.

You will collaborate with security, infrastructure, and compliance teams, driving automation and robust documentation while supporting FedRAMP/SOC2/audit readiness.