Senior Identity and Access Management (IAM) Engineer

YOUR MISSION

As a Senior Identity and Access Management (IAM) Engineer, you will be the technical cornerstone for all identity and access solutions at True Anomaly. You will architect, build, and own the systems that govern who has access to what, ensuring a secure, automated, and frictionless experience for all employees and contractors. Your mission is to build a modern, scalable IAM framework, migrating our core identity provider to and integrating with our HRIS to automate the entire identity lifecycle. This role is critical to enabling our teams to move quickly while upholding the rigorous security and compliance standards required by our government partners. 

RESPONSIBILITIES

• Lead the architecture, migration, and implementation a new IDP. 
• Design and own the end-to-end employee identity lifecycle (JML) by integrating our HRIS with IDP and downstream applications. 
• Engineer and automate access control policies (SSO, MFA, device trust) for a diverse environment of cloud (Azure, AWS) and on-premise systems. 
• Develop, implement, and maintain IAM solutions that satisfy strict security and audit requirements. 
• Manage and secure identity across a heterogeneous endpoint environment (macOS, Windows, Linux) using modern device management and trust principles. 
• Serve as the subject matter expert for all IAM services, providing documentation, and support for identity-related incidents and escalations. 

QUALIFICATIONS

• 7+ years of hands-on experience in Identity and Access Management, with a demonstrated history of architecting and deploying enterprise-wide solutions. 
• Expert-level knowledge of Okta (Workforce Identity Cloud), including advanced configurations, Universal Directory, Workflows, and API usage. 
• Deep technical expertise with Microsoft Entra ID (Azure AD), including conditional access, PIM, and hybrid identity, especially in the context of a migration. 
• Proven experience integrating HRIS platforms (e.g., Rippling, Workday) with an IdP to fully automate joiner, mover, and leaver (JML) processes. 
• Proficiency in scripting and automation (e.g., Python, PowerShell, Go) to build custom integrations and streamline IAM operations. 
• Knowledge of Privileged Access Management (PAM) solutions and Zero-Trust Network Access (ZTNA) architectures. 

PREFERRED SKILLS AND EXPERIENCE

• Broad experience in enterprise security engineering beyond IAM, such as endpoint security (EDR), data loss prevention (DLP), or network security. 
• Experience with modern device management tooling (e.g., Microsoft Intune, Jamf Pro) and implementing device trust concepts. 
• Familiarity with securing and enabling productivity through enterprise AI tools and large language models (LLMs). 
• Experience managing identity in multi-cloud (Azure, AWS, GCP) and hybrid on-premise Active Directory environments. 
• Experience implementing and auditing IAM controls for government compliance frameworks (e.g., FedRAMP, NIST 800-53, CMMC). 
• Experience securing diverse endpoint environments (macOS, Windows, Linux). 

COMPENSATION

• Colorado Base Salary: $140,000-$190,000
• California Base Salary: $145,000-$200,000
• Washington D.C. Base Salary: $145,000-$200,000
• Remote: Compensation for remote employees will vary based on location and local market data.
• Equity + Benefits including Health, Dental, Vision, HRA/HSA options, PTO and paid holidays, 401K, Parental Leave 

Your actual level and base salary will be determined on a case-by-case basis and may vary based on the following considerations: job-related knowledge and skills, education, location, and experience. 

ADDITIONAL REQUIREMENTS

• Ability to maintain or obtain TS//SCI clearance 
• Work Location—ideally, candidates will be based near Denver, Colorado Springs, Long Beach, or Washington, D.C., as some work requires on-site collaboration. Remote candidates will also be considered but should anticipate occasional travel for in-person work.
• Work environment—is in a standard office, working at a desk or in a production factory.
• Physical demands—may include frequent standing, sitting, walking, bending, and lifting or carrying items up to 20lbs.

This position will be open until it is successfully filled. To submit your application, please follow the directions below. #LI-Hybrid