Senior Systems Engineer: Identity & Zero Trust

IBM; Lowell (MA); On-site; USD 140,000 - 190,000; Full time

Job summary

Confluent is seeking a Senior Systems Engineer to own end-to-end identity, access, and security platforms. You will manage IdP infrastructure, governance reviews, and multi-cloud IAM across AWS, Azure, and GCP, while automating routines and maintaining runbooks.

Strong collaboration with security, infra, and compliance teams is essential. You will drive automation, participate in FedRAMP/SOC2/ISO 27001 controls, and ensure least-privilege access across environments, with a focus on robust,

Qualifications

• 5+ years of experience in systems, identity, or cloud engineering, ideally at a fast-moving tech or SaaS company.
• Enterprise IdP administration: hands-on, at-scale experience with Okta and/or Microsoft Entra ID (Azure AD).
• Authentication protocols: solid working knowledge of SAML 2.0, OAuth 2.0 / OIDC (including PKCE, Client Credentials).
• Identity governance: experience with SailPoint (IdentityIQ/IdentityNow) or similar IGA tools.
• Multi-cloud: experience across AWS, Azure, and GCP with IAM/RBAC and security controls.
• Zero Trust & Network Security: experience with Palo Alto Networks VPN and SASE solutions.
• SaaS administration: experience with Google Workspace or Microsoft 365 at an org level.
• Compliance exposure: experience supporting audits for FedRAMP, SOC 2, or ISO 27001.
• Automation mindset: GitOps/IaC workflows and scripting to replace manual work.
• Excellent written and verbal communication; able to explain tradeoffs to engineers, auditors, and stakeholders.

Responsibilities

• Identity & Access Management: administer enterprise IdP infrastructure across Okta and SailPoint.
• Identity Governance: lead quarterly User Access Reviews and governance processes.
• Multi-Cloud Administration: manage AWS, Azure, and GCP environments and RBAC.
• Zero Trust & Network Security: architect and operate GlobalProtect/Prisma Access and related controls.
• SaaS & Developer Platforms: administer Google Workspace, GitHub Enterprise IAM, and related integrations.
• Security Audits & Compliance: lead evidence collection and remediation for access reviews.
• Automation: build scripts/integrations to remove recurring manual work.
• Collaborate with security, infra, and network teams; document runbooks and architecture.
• Escalate cross-system issues with clear, contextual communication.

Skills

Identity Management

OAuth/OIDC

SAML 2.0

SailPoint

Multi-cloud

Zero Trust

Automation

Okta

Security audits

GitOps

Education

Bachelor's Degree

Tools

GitHub Enterprise

GlobalProtect

Prisma Access

Azure AD

Terraform

Job description

Confluent is seeking a Senior Systems Engineer to own end-to-end identity, access, and security platforms. You will manage IdP infrastructure, governance reviews, and multi-cloud IAM across AWS, Azure, and GCP, while automating routines and maintaining runbooks.

Strong collaboration with security, infra, and compliance teams is essential. You will drive automation, participate in FedRAMP/SOC2/ISO 27001 controls, and ensure least-privilege access across environments, with a focus on robust,