Staff IAM Engineer: Identity & Access Platform Lead

CLEAR; New York (NY); On-site; USD 200,000 - 240,000; Full time

Job summary

CLEAR is seeking a Staff IAM Engineer on the Enterprise Security team to design, build, and scale our core identity infrastructure across environments. You will own complex IAM challenges and partner with security to deliver secure, frictionless identity solutions.

You will mature our Identity and Access Management posture, driving major initiatives from design through deployment and guiding cross-functional teams to resolve access anomalies efficiently.

Qualifications

• 8+ years of hands-on IAM and security engineering experience.
• Deep admin/architectural expertise with Okta (SSO, lifecycle, workflows) and SailPoint (governance, access certifications).
• Strong background securing AWS access (IAM policies, roles, SCPs, AWS IAM Identity Center).
• Coding/scripting abilities (Python, Bash) to build automations and REST API integrations.
• Terraform IaC experience.

Responsibilities

• Lead the engineering, architecture, and scaling of core identity platforms (Okta, SailPoint).
• Design and implement least-privilege access controls across AWS and FedRAMP boundaries.
• Drive automation across IAM lifecycle via scripts and API integrations.
• Use Terraform to deploy and manage security configurations.
• Take technical lead on major IAM initiatives from design to deployment.
• Troubleshoot complex identity workflows and access issues.

Skills

IAM

Security Engineering

Okta

SailPoint

AWS

Python

Terraform

Tools

Terraform

Okta

SailPoint

AWS IAM

Job description

CLEAR is seeking a Staff IAM Engineer on the Enterprise Security team to design, build, and scale our core identity infrastructure across environments. You will own complex IAM challenges and partner with security to deliver secure, frictionless identity solutions.

You will mature our Identity and Access Management posture, driving major initiatives from design through deployment and guiding cross-functional teams to resolve access anomalies efficiently.