Staff Engineer, Identity & Access Management (IAM)

recursionpharmaceuticals; EE. UU.; Híbrido; USD 181.000 - 213.000; Jornada completa

Descripción de la vacante

Recursion Pharmaceuticals is seeking a staff-level IAM engineer to shape identity strategy across cloud, on-premise, and corporate apps. You will partner with IT, security, and engineering to embed zero-trust and deliver secure identity services that accelerate scientific work.

You will lead large-scale IAM initiatives, implement RBAC/ABAC, and design governance with Okta, AWS IAM, Azure AD, and Delinea/CyberArk. Strong leadership and communication are essential.

Formación

• Bachelor's or Master's degree in CS, InfoSec, or related field.
• 7+ years in Identity and Access Management and security.
• Proven leadership of large IAM initiatives in cloud-first/hybrid environments.
• Programming in Java, C++, or Python related to IAM.
• Expert-level enterprise identity administration and governance.
• Experience with OAuth, OpenID, SAML.
• Familiarity with AD and cloud IAM (Okta, AWS IAM, Azure AD).
• Experience with PAM solutions such as Delinea or CyberArk.
• Security certifications desirable (CISSP, OSCP, GWAPT).

Responsabilidades

• Assess and revamp IAM strategy across products, platforms, cloud/on-premise, and apps.
• Drive IAM implementations within zero-trust security program.
• Architect cloud-based identity governance and access management.
• Define RBAC/ABAC workflows for onboarding and lifecycle management.
• Collaborate with IT, security, and engineering to embed IAM principles.
• Define KPIs, KCIs, and KRIs for IAM control effectiveness.

Conocimientos

IAM strategy leadership

Zero-trust security architecture

OAuth/OpenID/SAML expertise

PAM tools (Delinea, CyberArk)

Cloud and on-prem identity governance

Strong communication & leadership

Educación

Bachelor's or Master's degree in Computer Science, Information Security, or a related field

Herramientas

Delinea

CyberArk

Okta

AWS IAM

Azure AD

Descripción del empleo

Role overview

Staff-level engineering role shaping the Identity and Access Management (IAM) strategy across products, platforms, cloud and on-premise infrastructure, and corporate applications within a biotechnology organisation. The position partners deeply with IT, security, and engineering teams to embed zero-trust principles and deliver secure, compliant identity services that accelerate scientific work.

Responsibilities

• Assess the current IAM landscape and revamp the IAM strategy across products, platforms, cloud/on-premise infrastructure, and corporate applications.
• Drive IAM implementation as part of a broader zero-trust security strategy.
• Architect and design cloud-based identity governance, access management, and directory solutions.
• Implement RBAC and ABAC workflows for onboarding and ongoing identity lifecycle management.
• Act as a key technical and strategic advisor across IT, security, and development to embed IAM principles into broader security architecture.
• Partner with engineering and IT to ensure applications are built with appropriately scoped access privileges and aligned to risk.
• Define KPIs, KCIs, and KRIs that surface IAM control effectiveness and support continuous improvement.
• Collaborate with compliance partners to ensure IAM solutions meet SOX, GxP, and other regulatory standards.

Requirements

• Bachelor's or Master's degree in Computer Science, Information Security, or a related field.
• 7+ years of experience across Identity and Access Management and broader information security domains.
• Proven track record leading large-scale IAM initiatives from strategy through execution in cloud-first and hybrid environments.
• Proficiency in at least one programming language such as Java, C++, or Python as it relates to IAM products.
• Expert-level experience with enterprise identity administration and governance platforms.
• Expert-level experience with adaptive authentication, OAuth, OpenID, and SAML.
• Deep familiarity with the identity stack including Enterprise Active Directory and cloud IAM products such as Okta, AWS IAM, Azure AD, or Duo.
• Hands-on experience with privileged access management solutions such as Delinea or CyberArk.
• Working knowledge of UNIX/Linux, macOS, Windows, and database management systems.
• Strong communication and leadership skills, with the ability to influence across multiple teams and disciplines; experience acting as a business systems analyst to elicit technology-agnostic requirements is valued.
• Continuous-improvement mindset and awareness of emerging IAM trends.
• Relevant security certifications such as CISSP, OSCP, or GWAPT are highly desirable.

Benefits and work setup

• Remote-eligible position; Salt Lake City is the preferred home base, with regular on-site visits expected for routine work and team events.
• Estimated annual base salary range of $180,600–$212,900, plus eligibility for an annual bonus, equity compensation, and a comprehensive benefits package.