Staff Identity and Access Management Engineer

Tanium; United States; Hybrid; USD 180,000 - 230,000; Full time

Job summary

Tanium is seeking a Staff Identity and Access Management Engineer to design, implement, and manage IAM/IGA across its corporate infrastructure in a hybrid, multi-location setup (Addison, TX; Bellevue, WA; Durham, NC; Emeryville, CA; Reston, VA). You will lead IAM projects, ensure lifecycle governance, and align with risk and compliance requirements.

The role requires 8–10 years in IAM, experience with SSO/MFA/PAM, and hands-on work with Entra ID and Active Directory in hybrid environments.

Qualifications

• 8–10 years of IAM experience, incl. IGA integrations with HRIS systems.
• Experience implementing and managing an IAM product (Lumos, SailPoint, Saviynt, etc.).
• Hands-on with Entra ID and Active Directory in hybrid environments.
• Strong onboarding/off-boarding, lifecycle workflows, and policy compliance.

Responsibilities

• Design and manage IAM/IGA solutions across corporate infra, incl. SSO, MFA, PAM.
• Build and maintain identity automation and workflows; troubleshoot issues.
• Own the identity lifecycle; monitor, document, and improve processes.
• Partner with GRC to maintain IAM/IGA policies for ISO 27001, FedRAMP, GDPR, HIPAA.
• Assess systems for security gaps and ensure patch and policy compliance.
• Lead delivery on IAM/IGA projects; monitor performance and optimize.
• Respond to and resolve IAM-related incidents; mentor engineers across IT/Security.

Skills

IAM

IGA integrations

Hybrid work

Strong problem solving

Cross-functional collab

Security/compliance

Communication

Education

Bachelor's Degree in Computer Science or related field

Tools

Lumos

SailPoint

Saviynt

Entra ID

Active Directory

PowerShell

Job description

Staff Identity and Access Management Engineer

Addison, TX (Hybrid); Bellevue, WA (Hybrid); Durham, NC (Hybrid); Emeryville, CA (Hybrid); Reston, VA (Hybrid)

The Basics

We'relooking for a Staff IAM engineer to design, implement, and manage identity and access management (IAM) and identity governance (IGA) solutions across Tanium's corporate infrastructure.You'llevaluate new IAM/IGA technologies, partner with cross-functional teams on strategy, and keep our identity ecosystem secure, compliant, and efficient.

This position follows the Company’s hybrid schedule which currently requires employees to work in the office at one of the following locations a minimum of threedays per week: Addison, TX; Bellevue, WA; Durham, NC; Emeryville, CA; or Reston, VA.

Whatyou'lldo

• Design and manage IAM/IGA solutions across corporate infrastructure, including SSO, MFA, and PAM
• Build and maintain identity automation - onboarding, off-boarding, entitlements, and approval workflows - and troubleshoot issues surfaced by testing, user, or peer feedback
• Own the identity lifecycle: monitor, document, and continuously improve it
• Partner with GRC to develop and maintain IAM/IGA policies and standards that satisfy regulatory requirements (ISO 27001, FedRAMP, GDPR, HIPAA, etc.)
• Assess IAM systems regularly for security gaps and insure ongoing patch and policy compliance
• Lead technical delivery on IAM/IGA projects - upgrades, migrations, integrations - and monitor system performance to identify optimizations
• Respond to and resolve IAM-related incidents
• Mentor engineers across IT and Security and track industry trends to keep our IAM/IGA approach current

We’relooking for someone with

• Education
  • Bachelor's Degree in Computer Science, IT or other relevant degree or equivalent work experience
• Experience
  • 8–10 years in identity and access management, including IGA integrations with HRIS systems (Workday, SuccessFactors, or similar)
  • Experience implementing, configuring, and managing an IGA product like Lumos, SailPoint, Saviynt, etc
  • Hands‑on expertise with Entra ID and Active Directory (preferably in a hybrid environment) with respect to identity and access
  • Solid grasp of onboarding/off-boarding standards and lifecycle workflows
  • Scripting proficiency (PowerShell)
  • Working knowledge of security/compliance frameworks - ISO 27001, FedRAMP, GDPR, HIPAA
  • Experience with SSO, MFA, and PAM tooling
  • Strong problem‑solving skills and the communication chops to work across IT, Security, and business teams
• Other
  • Comfortable working independently and juggling multiple priorities in a fast‑paced environment

About Tanium

Tanium delivers the industry's only true real‑time cloud‑based endpoint management and securityoffering. Its platform is real‑time, seamless, and autonomous, allowing security‑conscious organizations to break down silos between IT and Security operations that results in reduced complexity, cost, and risk. Securing more than 32M endpoints around the world, Tanium's customers include Fortune 100 organizations, top US retailers, top US commercial banks, and branches of the U.S. Military. It also partners with the world's biggest technology companies, system integrators, and managed service providers to help customers realize the full potential of their IT investments. Tanium has been named to the Forbes Cloud 100 list for nine consecutive years and ranks on the Fortune 100 Best Companies to Work For. For more information on The Power of Certainty™, visit www.tanium.com and follow us on LinkedIn and X .

On a mission. Together.

At Tanium, we are stewards of a culture that emphasizes the importance of collaboration, respect, and diversity. In our pursuit of revolutionizing the way some of the largest enterprises and governments in the world solve their most difficult IT challenges, we are strengthened by our unique perspectives and by our collective actions.

We are an organization with stakeholders around the world and it’s imperative that the diversity of our customers and communities is reflected internally in our team members. We strive to create a diverse and inclusive environment where everyone feels they have opportunities to succeed and grow because we know that only together can we dogreat things.

Each of our team members has 5 days set aside as volunteer time off (VTO) to contribute to the communities they live in and give back to the causes they care about most.

Whatyou’llget

The annual base salary range for this full-time position is $180,000 to $230,000. This range is an estimate for what Tanium will pay a new hire. The actual annual base salary offered may be adjusted based on a variety of factors, including but not limited to, location, education, skills, training, and experience.

In addition to an annual base salary, team members will receive equity awards and a generous benefits package consisting of medical, dental and vision plan, family planning benefits, health savings account, flexible spending account, transportation savings account, 401(k) retirement savings plan with company match, life, accident and disability coverage, business travel accident insurance, employee assistance programs, disability insurance, and other well‑being benefits.

For more information on how Tanium processes your personal data, please seeour Privacy Policy .

Tanium is an Equal Opportunity and Aff… All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, age, gender identity, sexual orientation, disability, protected Veteran status, or other legally protected categories. If you require a reasonable accommodation in searching for a job opening, completing an application, interviewing, or completing any pre‑employment testing or requirements, please [e-mail] . For more information refer to the “Know Your Rights” poster which is available here -https://www.eeoc.gov/poster .

For more information on how Tanium processes your personal data, please see ourPrivacy Policy .

Voluntary Self-Identification

To comply with government reporting obligations, we ask candidates to respond to the below self‑identification survey. In addition, this information helps Tanium to have an inclusive environment for all by identifying and removing barriers in our hiring practices. Completing this form will help us achieve this goal . Providing this information is voluntary and you may decline to self‑ identify for any of the categories below. Whatever your decision, your responses will not be considered in the hiring process or thereafter. Any information that you do provide will be recorded and maintained in a confidential file.

As set forth in Tanium’s Equal Employment Opportunity policy, we do not discriminate on the basis of any protected group status under any applicable law.

• Hispanic or Latino - A person of Cuban, Mexican, Puerto Rican, South or Central American, or other Spanish culture or origin regardless of race.
• White (Not Hispanic or Latino) - A person having origins in any of the original peoples of Europe, the Middle East, or North Africa.
• Black or African American (Not Hispanic or Latino) - A person having origins in any of the black racial groups of Africa.
• Native Hawaiian or Other Pacific Islander (Not Hispanic or Latino) - A person having origins in any of the peoples of Hawaii, Guam, Samoa, or other Pacific Islands.
• Asian (Not Hispanic or Latino) - A person having origins in any of the original peoples of the Far East, Southeast Asia, or the Indian Subcontinent, including, for example, Cambodia, China, India, Japan, Korea, Malaysia, Pakistan, the Philippine Islands, Thailand, and Vietnam.
• American Indian or Alaska Native (Not Hispanic or Latino) - A person having origins in any of the original peoples of North and South America (including Central America), and who maintain tribal affiliation or community attachment.
• Two or More Races (Not Hispanic or Latino) - All persons who identify with more than one of the above six races.

Categories of Protected Veterans

A "disabled veteran" is one of the following: a veteran of the U.S. military, ground, naval or air service who is entitled to compensation (or who but for the receipt of military retired pay would be entitled to compensation) under laws administered by the Secretary of Veterans Affairs; or a person who was discharged or released from active duty because of a service‑connected disability.

A "recently separated veteran" means any veteran during the three‑year period beginning on the date of such veteran's discharge or release from active duty in the U.S. military, ground, naval, or air service.

An "active duty wartime or campaign badge veteran" means a veteran who served on active duty in the U.S. military, ground, naval or air service during a war, or in a campaign or expedition for which a campaign badge has been authorized under the laws administered by the Department of Defense.

An "Armed forces service medal veteran" means a veteran who, while serving on active duty in the U.S. military, ground, naval or air service, participated in a United States military operation for which an Armed Forces service medal was awarded pursuant to Executive Order 12985.

Voluntary Self-Identification of Disability

Form CC-305

OMB Control Number 1250-0005

Expires 07/31/2029

Why are you being asked to complete this form?

We are a federal contractor or subcontractor. The law requires us to provide equal employment opportunity to qualified people with disabilities. We have a goal of having at least 7% of our workers as people with disabilities. The law says we must measure our progress towards this goal. To do this, we must ask applicants and employees if they have a disability or have ever had one. People can become disabled, so we need to ask this question at least every five years.

Completing this form is voluntary, and we hope that you will choose to do so. Your answer is confidential. No one who makes hiring decisions will see it. Your decision to complete the form and your answer will not harm you in any way. If you want to learn more about the law or this form, visit the U.S. Department of Labor’s Office of Federal Contract Compliance Programs (OFCCP) website at www.dol.gov/ofccp.

How do you know if you have a disability?

A disability is a condition that substantially limits one or more of your “major life activities.” If you have or have ever had such a condition, you are a person with a disability.

Disabilities include, but are not limited to:

• Alcohol or other substance use disorder (not currently using drugs illegally)
• Blind or low vision
• Cancer (past or present)
• Cardiovascular or heart disease
• Celiac disease
• Cerebral palsy
• Deaf or serious difficulty hearing
• Diabetes
• Disfigurement, for example, disfigurement caused by burns, wounds, accidents, or congenital disorders
• Epilepsy or other seizure disorder
• Gastrointestinal disorders, for example, Crohn's Disease, irritable bowel syndrome
• Mental health conditions, for example, depression, bipolar disorder, anxiety disorder, schizophrenia, PTSD
• Missing limbs or partially missing limbs
• Mobility impairment, benefiting from the use of a wheelchair, scooter, walker, leg brace(s) and/or other supports
• Nervous system condition, for example, migraine headaches, Parkinson’s disease, multiple sclerosis (MS)
• Neurodivergence, for example, attention‑deficit/hyperactivity disorder (ADHD), autism spectrum disorder, dyslexia, dyspraxia, other learning disabilities
• Partial or complete paralysis (any cause)
• Pulmonary or respiratory conditions, for example, tuberculosis, asthma, emphysema

PUBLIC BURDEN STATEMENT: According to the Paperwork Reduction Act of 1955 no persons are required to respond to a collection of information unless such collection displays a valid OMB control number. This survey should take about 5 minutes to complete.

Gender: What gender do you most closely identify with? * Select...

Race/Ethnic Background: What ethnicity do you most closely identify with? * Select...

Select...

Disability Status: Please select one of the options below * Select...