Sr. Staff Software Engineer (IAM Engineering) (Remote - US)

BNSF; United States; Remote; USD 243,000 - 407,000; Full time

Job summary

Join a leading U.S. railroad as an Identity and Access Management Engineer, where you'll manage user identities and implement access controls. This full-time remote position offers a competitive salary and a comprehensive benefits package, including health care and retirement options. Be part of a culture that values safety, inclusion, and excellence while driving innovation in IT solutions.

Benefits

401(k) and Railroad Retirement program

Comprehensive health care options

Life and disability insurance

Family benefits including parental support

Discounts on travel and gym memberships

Annual bonus

Qualifications

• 12+ years of experience in identity and access management engineering.
• Experience with multiple IAM systems and cloud services.
• Strong problem-solving skills and knowledge of integrating IAM systems.

Responsibilities

• Manage user identities and lifecycle management.
• Enforce access controls and security policies.
• Provide technical leadership and mentorship to junior engineers.

Skills

Problem Solving

Leadership

Fluency in multiple technology stacks

Strong communication skills

Education

Bachelor’s degree in Computer Science

Tools

Java

C++

HTML

XML

Active Directory

Job description

Press Tab to Move to Skip to Content Link

Be part of a team that values safety, inclusion, and excellence

We are one of the largest U.S. railroads transporting the nation’s freight across 28 western states and 3 Canadian provinces. As a member of our team, you will play a role in supporting the movement of essential products and materials that help feed, clothe, supply, and power communities throughout America and the world.

We are committed to a culture where all employees are included, belong, and have equal opportunity to achieve their full potential. Come make a difference with us!

Job Location: REMOTE
Other Potential Locations: Remote US
Anticipated Start Date: 06/16/2025
Number of Positions: 2
Salary Range: $243,750-$406,250

Apply early as this job may be removed or filled prior to the closing date, which is approximately seven (7) days after the posting date.

The US base salary range for this full-time position is $243,750 - $406,250 plus bonus eligibility and other elements of our total rewards package. This range reflects what bnsf | tech reasonably expects to pay based on the role's level, scope, and responsibilities. Individual compensation and level of position offered will depend on the hiring location and other factors such as skills, experience, and education. In addition to base pay, BNSF offers a comprehensive benefits package.

We are committed to a culture where all employees are included, belong, and have equal opportunity to achieve their full potential. Come make a difference with us!

The bnsf | tech department drives innovation and efficiency by developing and maintaining advanced technological solutions across the network. This team ensures a robust IT infrastructure, supports critical applications, and enhances cybersecurity measures. Their expertise is essential in optimizing operations and enabling BNSF to deliver reliable, cutting-edge transportation services.

This is a full-time position. Our leaders also foster a culture where work-life balance, which requires flexibility for when life happens, is important and respected.

As an Identity and Access Management Engineer, you will:

• Manage user identities, including provisioning, deprovisioning, and lifecycle management.
• Implement automation in access management and identity systems.
• Enforce access controls and security policies to protect sensitive data and resources.
• Provide technical leadership and mentorship to junior engineers.
• Ensure compliance with regulatory requirements and industry standards.
• Perform audits and monitor IAM systems to identify and address potential security vulnerabilities.
• Provide ongoing support for IAM systems and resolve issues related to user access vulnerabilities.
• Stay up-to-date with emerging technologies and industry trends and apply them to operations and activities.

Basic Qualifications

• Currently authorized to work in the US.
• Bachelor’s degree in Computer Science, Engineering, or equivalent experience or education.
• At least 12+ years of experience in identity and access management engineering, with success in delivering enterprise-scale solutions.
• Experience with multiple IAM systems such as Automated Provisioning, Directory Services, Application On-Boarding, Password Management, Re-certifications, Access Requests, Access Review, Delegation, Dynamic Organizations, Role-based Security & Access Control, Customer Identity Management.
• Fluency in multiple technology stacks and expertise in several: C, C++, Java, J2EE, JSP, Servlet, EJB, Application (Client/Server), RMI, WAS, Web Services, WS-Security, HTML, XML, XSLT, SOAP, MQ Series, LDAP / Active Directory.
• Familiarity with cloud services.
• Experience designing architecture, reliability, and scalability of systems.
• Experience with continuous delivery and infrastructure as code.
• Experience with monitoring tools and forensic investigations on access.
• Strong problem-solving skills.
• Knowledge of integrating IAM systems with developer tooling across the software development lifecycle.
• Experience working in a DevOps environment, leveraging coding/scripting skills, and working with APIs. Ability to build test scripts for regression testing.

Preferred Qualifications

• Knowledge of Identity as a Service, Mutual TLS (mTLS) Auth for Service-Services, OpenID Connect, FIDO2, PIM methodologies, REST and REST Security, and experience with enterprise RDBMS like DB2, SQL Server, Oracle.
• Experience with operating systems like Windows, AIX, Linux, and knowledge of SOX audit controls related to IAM.
• Java Application Interface Development and Object Models, Enterprise Service Bus (ESB) technologies / JMS. IAM certifications are a plus.

Benefits at BNSF include:

• Industry-leading 401(k) and Railroad Retirement program.
• Comprehensive health care options including medical, dental, vision, mental health, and more.
• Health care spending accounts, life and disability insurance.
• Family benefits including parental and family building support, adoption, and surrogacy reimbursement.
• Discounts on travel, gym memberships, counseling, and wellness.
• Annual bonus (Incentive Compensation Program).

Please review our FAQ for information on potential fraud and our hiring process. All positions require background checks, medical review, and drug screening. Employees needing unescorted access to secure areas must obtain a TWIC card. More info at TSA TWIC.

BNSF Railway is an Equal Opportunity Employer. All qualified applicants will receive consideration regardless of race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or veteran status.