Staff IAM Architect Job at Addepar

Staff IAM Architect

We are currently seeking a Sr. IAM Architect to join our growing Information Sec...

Location

United States

Salary:

137000.00 - 214000.00 USD / Year

Addepar

Expiration Date

Until further notice

Requirements

8+ years of general Information Security experience
At least 5 years focused on Identity & Access Management
Bachelor’s degree/equivalent or higher
Computer Science or Engineering related education preferred
In-Depth Experience with Identity & Access Management tools
Familiar with IT Governance and Compliance functions, including SOC2 and Data Governance
Familiar with Security Operations Center(SOC) and Vulnerability management functions
Skilled at developing process maps, and translating processes to technical / system requirements
Attention to details and analytical skills
Ability to build strong relationships and work collaboratively

Job Responsibility

Provide strategic direction on the overall maturity of the internal IAM program
Improve Data Quality in upstream and downstream systems (eg: HRIS, IGA, IDP, Productivity Tools)
Lifecycle Management (eg: Joiners, Movers and Leavers)
Governance such Entitlement Reviews and proper inventory management of identities
Enhancing IAM Monitoring with a focus on Non-Human Identities (NHID)
Identity Governance & Administration (IGA) platform Enhancements
Assist with the Production Readiness process to assist with IAM related queries, needs and assist stakeholders
Analysis and Understanding of access requirements, internal process & systems flows, client expectations, security policies, etc. to enforce a least privileged access model
Solution new processes and/or technologies to improve the overall security posture
Assisting with the development and refinement of Information Security Policies & Standards

What we offer

bonus
equity
benefits
reasonable accommodation for individuals with disabilities
flexible workforce model

Fulltime

Staff Software Engineer, IAM

Mozilla IAM team seeks a Staff Software Engineer to rebuild our Identity and Acc...

Location

United States; Canada

Salary:

Not provided

Mozilla

Expiration Date

Until further notice

Requirements

10+ years experience in software engineering
at least 5 years of extensive IAM / IdP expertise
Successfully implemented IAM/IdP Solution using Okta, Google IdP
Proven technical leadership experience
Expertise in AuthN, AuthZ, and access governance
Deep knowledge of identity lifecycle management and access governance
Proficient in Python, JavaScript, Github actions, GitOps workflows
Strong expertise integrating with Cloud Service Providers and cloud-native technologies, preferably GCP
Excellent communication skills aligning technology with user needs and organizational goals
Self-starter who thrives in ambiguity

Job Responsibility

Architect and lead IAM / IdP system redesign, emphasizing user experience and scalability
Guide technical decision-making and adoption of user-centric solutions
Guide team members and promote engineering standard methodologies, with a focus on usability and maintainability
Facilitate cross-functional collaboration for efficient and cohesive platform delivery
Drive automation and self-service capabilities in IAM / IdP, ensuring robust security, compliance, and improved user satisfaction
Meet with engineering teams across Mozilla to understand their needs and concerns around access management
Document standard methodologies and design guidelines
Be trusted to resolve unclear but urgent tasks

What we offer

Generous performance-based bonus plans
Rich medical, dental, and vision coverage
Generous retirement contributions with 100% immediate vesting
Quarterly all-company wellness days
Country specific holidays plus a day off for your birthday
One-time home office stipend
Annual professional development budget
Quarterly well-being stipend
Considerable paid parental leave
Employee referral bonus program

Fulltime

Technical Account Manager

A Technical Account Manager (TAM) specializing in enterprise identity and Okta’s...

Location

United Kingdom , London

Salary:

Not provided

Social Value Portal Ltd

Expiration Date

Until further notice

Requirements

5+ years of total experience in information technology
at least 1 year of hands-on experience as a Technical Account Manager (TAM) or comparable practitioner role in the IAM space
Working proficiency in the following core IAM areas: Technologies and protocols to support identity federation and robust access control models (e.g., SAML 2.0, WS-Federation, OAuth, OpenID Connect)
Legacy applications in a hybrid IT environment with non-standard applications (i.e. those that do not support modern identity federation protocols)
Enterprise applications in the ecosystem to provide identity and attributes to applications or to harness an external application to help drive business process (ITSM, HR, etc)
SaaS deployment such as Salesforce, Box, Office 365, Workday and HR as master for identities
Lifecycle management scenarios to 3rd party systems and applications (Workflows, HR-driven provisioning, MSFT integrations, SCIM, etc)
Security and performance monitoring, and 3rd party signals integrations (SEIM, MDM, WAF, etc)
Strong background in any of the following: Technical Account Management, Technical Consulting, Product Management, Solution Architect, Solution Engineering or similar role
Understanding of identity and surrounding technologies

Job Responsibility

Fully own the account management function as an Okta TAM. This includes the business and the technical side
Advise customers on best practices and product adoption in a post-sales capacity
Partner with Customer Success Managers and serve as their technical counterpart on a defined book of business
Earn customer trust by understanding their goals and use cases, and recommend best practices relating to process changes, product adoption, configuration and additional features to meet requirements
Maintain focus on increasing subscription adoption, customer satisfaction and retention
Review customer architectures and Okta configurations to ensure they are enhancing security posture and capturing ROI as Okta releases new features and functionality
Take and respond to reactive questions from Customer Success Managers and key customer stakeholders
Establish strong personal relationships on key accounts with decision-makers and stakeholders
Participate in content creation for both internal and external enablement of staff and customers

What we offer

Amazing Benefits
Making Social Impact
Developing Talent and Fostering Connection + Community at Okta
Okta cultivates a dynamic work environment, providing the best tools, technology and benefits to empower our employees to work productively in a setting that best and uniquely suits their needs

Fulltime

Security Engineer

Location

Salary:

Not provided

Ryz Labs

Expiration Date

Until further notice

Requirements

3+ years total technical or security engineering experience with security focus
2+ years of AWS or GCP experience implementing security and hardening activities, especially in a large or complex environments
2+ years working in a CI/CD DevSecOps environment (Jenkins, Travis, Jira, GitHub, GitLab, etc.)
Experience with IAM solutions such as Okta and deep knowledge of AWS or GCP IAM and how to configure and maintain least-privilege and segregation of duty across boundaries
Knowledge and experience with EC2, ECS, S3, LBS, API Gateways, Bastion Hosts, VPC, Cloud Trail, Cloud Watch, Data Dog, SIEM and other cloud technologies

Job Responsibility

collaborate with our customers and suppliers to model security requirements against cloud capabilities
work closely with engineering teams, program management and senior stakeholders to translate requirements into achievable designs that raise the bar
function across teams ensuring that the strategic architecture is met across design, implementation, deployment and operation
playing a key role in defining the mechanisms that the company will use to validate how services are meeting all the security operational controls
work closely with the product and platform engineering teams to architect, implement, and operate effective cloud security controls
Partner with internal IT & Product Engineering stakeholders to assess gaps in products and platforms, design mitigating controls, and train and educate staff on remediations
Partner with the Business Technology and IAM teams to build a new Access Management and User Access Review system based on Lumos
Maintain inventory of cloud assets and ensure secure bootstrapping of deployed assets while monitoring for drift and potential threats across product engineering environment
Design and build the security components of the next phase of Sonder Security Roadmap

Senior/Staff Enterprise Security Engineer

We're looking for a very experienced and highly motivated Senior or Staff Enterp...

Location

United States , San Francisco; New York

Salary:

214200.00 - 252000.00 USD / Year

Abridge

Expiration Date

Until further notice

Requirements

5 to 7+ years of progressive experience in an Enterprise/Corporate Security Engineering role
Proven hands-on experience developing security automation solutions with Python or similar high-level languages
Expert-level knowledge of IAM concepts, protocols (SAML, OAuth), and hands-on experience with at least IAM in Google Workspace
Strong experience deploying and managing modern Endpoint Protection (EDR) and MDM solutions in a large corporate environment
Deep understanding of networking and security protocols (TCP/IP, DNS, TLS/SSL, VPN, Firewalls) and how to secure hybrid environments
Demonstrated ability to lead complex projects, mentor junior staff, and communicate security risks and solutions effectively to both technical and non-technical stakeholders

Job Responsibility

Architect and implement enterprise-wide Identity and Access Management (IAM) and Privileged Access Management (PAM) solutions
Own the implementation and maintenance of authentication standards, including Single Sign-On (SSO), phishing resistant Multi-Factor Authentication (MFA), and identity federation protocols (SAML, OIDC, OAuth2)
Design and enforce security policies for critical SaaS applications using tools like SSPM (SaaS Security Posture Management)
Develop and automate the full identity lifecycle (joiner, mover, leaver) process
Lead the development of the security automation roadmap for Enterprise Security
Design and build custom automation scripts and integrations using languages like Python to connect security tools (SIEM, EDR, IAM, Ticketing)
Utilize Infrastructure as Code (IaC) tools (e.g., Terraform) to manage the secure configuration of enterprise tools and enforce security policies at scale
Engineer, deploy, and manage our Endpoint Detection and Response (EDR) and Mobile Device Management (MDM) platforms
Design, configure, and maintain enterprise network security controls, including next-generation firewalls, secure web gateways, VPNs, and micro-segmentation strategies
Own and optimize the email security stack, DMARC/DKIM/SPF enforcement, and anti-phishing controls

What we offer

Generous Time Off: 14 paid holidays, flexible PTO for salaried employees, and accrued time off for hourly employees
Comprehensive Health Plans: Medical, Dental, and Vision coverage for all full-time employees and their families
Generous HSA Contribution: If you choose a High Deductible Health Plan, Abridge makes monthly contributions to your HSA
Paid Parental Leave: Generous paid parental leave for all full-time employees
Family Forming Benefits: Resources and financial support to help you build your family
401(k) Matching: Contribution matching to help invest in your future
Personal Device Allowance: Tax free funds for personal device usage
Pre-tax Benefits: Access to Flexible Spending Accounts (FSA) and Commuter Benefits
Lifestyle Wallet: Monthly contributions for fitness, professional development, coworking, and more
Mental Health Support: Dedicated access to therapy and coaching to help you reach your goals

Fulltime

Manager – Security Architecture and Strategy

The Manager, Security Architecture and Strategy, is a key role in continent secu...

Location

Singapore , Singapore

Salary:

Not provided

Marriott Bonvoy

Expiration Date

Until further notice

Requirements

Bachelor’s degree in Computer Science, Information Technology, Information Security, Cybersecurity or related field
3+ years IT/ information security work experience, preferably in a large organization
Experience in reviewing Security Architectures and explaining security risks/gaps as well as mitigation strategies is highly desirable
Professional certifications related to security assessment, such as CISA, CRISC, PCI ISA, ISO/IEC 27001 Lead Auditor, etc.
The coordinator must have strong interpersonal communication skills, as well as organizational skills. Project management experience is also desirable.
Fluent in English, both spoken and written.
Strong working knowledge of IT service management (e.g., ITIL-related disciplines)
Ability to communicate Security Requirements for areas including but not limited to: Cloud Computing, Application Development, IAM, Cryptography, and Infrastructure design and standards to a diverse audience.
Ability to present the process to all levels of audience, be comfortable answering questions around the process, gather and document feedback from these presentations and bring that back to the Security Architect for future enhancements.
Experience in creating presentations in PowerPoint, and comfort in presenting to C level executives.

Job Responsibility

Contributes to, evaluates, and supports the documentation, and validation processes necessary to assure that associates, information technology systems and business processes meet the organization’s information assurance, security, and privacy requirements.
Consults with customers to gather and evaluate functional requirements and provides these to the Security Architect team.
Provides sound advice and recommendations to leadership and staff on a variety of relevant topics within the pertinent subject domain
Works with the Security Architect Analysts to monitor ongoing project activities, intake of new projects and monitoring of the Security Engagement Process to meet team objectives for performance.
Develops specific goals and plans to prioritize, organize, and accomplish work.
Champions leaders’ vision for product and service delivery.
Makes and executes the necessary decisions to keep moving forward toward achievement of goals.
Provides direction and assistance to other teams regarding projects.
Determines priorities, schedules, plans and necessary resources to promote completion of any projects on schedule.
Analyzes information and evaluates results to choose the best solution and solve problems.

Fulltime

Staff DevOps - Data Platform

We are looking for a Staff DevOps - Data Platform to join the Data and ML Platfo...

Location

France , Paris

Salary:

Not provided

Doctolib

Expiration Date

Until further notice

Requirements

7+ years of experience after graduation as a Staff Data Platform Engineer, Staff Data Ops, Staff Site Reliability Engineer, or in a similar role, with a history of architecting and scaling robust data platforms
Extensive experience with Google Cloud Platform and a command of Kubernetes & Terraform for automated deployments
Authority on implementing network and IAM security best practices
Deep technical proficiency in orchestrating data pipelines using Airflow or Dagster, deploying applications to the cloud, and leveraging modern data warehouses such as BigQuery
Highly skilled in programming with Python, and have a solid understanding of software development principles
Excellent troubleshooter who excels at diagnosing and fixing data infrastructure and identifying performance bottlenecks
Strong communicator who can articulate complex technical concepts to both technical and non-technical audiences

Job Responsibility

Design and implement enterprise-scale data infrastructure strategies, conducting thorough impact and cost analysis for major technical decisions, and establishing architectural standards across the organization
Build and optimize complex, multi-region data pipelines handling petabyte-scale datasets, ensuring 99.9% reliability and implementing advanced monitoring and alerting systems
Lead cost analysis initiatives, identify optimization opportunities across our data stack, and implement solutions that reduce infrastructure spend while improving performance and reliability
Provide technical guidance to data engineers and cross-functional teams, conduct architecture reviews, and drive adoption of best practices in DataOps, security, and governance
Evaluate emerging technologies, conduct proof-of-concepts for new data tools and platforms, and lead the technical roadmap for data infrastructure modernization

What we offer

Free comprehensive health insurance for you and your children
Parent Care Program: receive one additional month of leave on top of the legal parental leave
Free mental health and coaching services through our partner Moka.care
For caregivers and workers with disabilities, a package including an adaptation of the remote policy, extra days off for medical reasons, and psychological support
Work from EU countries and the UK for up to 10 days per year, thanks to our flexibility days policy
Work Council subsidy to refund part of sport club membership or creative class
Up to 14 days of RTT
A subsidy from the work council to refund part of the membership to a sport club or a creative class
Lunch voucher with Swile card

Fulltime

Staff Software Engineer I - Internal Access Management

We are seeking a Staff Software Engineer to lead the technical vision, architect...

Location

Salary:

225100.00 - 264500.00 CAD / Year

Confluent

Expiration Date

Until further notice

Requirements

10+ years of engineering experience
4+ years in security, IAM, or distributed systems
Deep expertise in Kubernetes, workload identity, cloud IAM (AWS, GCP, Azure), and zero-trust architectures
Strong understanding of authentication technologies: IAM, OAuth2, OIDC, policy engines, and modern zero-trust principles
Proven track record leading multi-team technical initiatives at a Staff or Senior Staff level
Strong knowledge of distributed systems, cloud infrastructure, container orchestration, and service mesh
Excellent communication and stakeholder-influence skills across engineering and security domains

Job Responsibility

Define and drive the long-term architecture and roadmap for Internal Access Management across Kubernetes and multi-cloud environments
Architect and implement least privilege, just-in-time access, and zero-trust models across Confluent services
Build and evolve scalable access-authorization workflows and lifecycle management systems using technologies such as SPIFFE/SPIRE, OPA, cloud IAM policies, workload identity, and internal enforcement engines
Strengthen security boundaries through threat modeling, defense-in-depth practices, and comprehensive access-auditing capabilities
Partner with cross-functional teams—including Platform, Kafka, Observability, Developer Productivity, Release Engineering, and SRE—to drive adoption of secure identity and access patterns
Mentor senior engineers, elevate engineering standards, and influence architectural decisions across the organization
Communicate complex technical decisions clearly and align stakeholders across engineering and security

What we offer

Remote-First Work
Robust Insurance Benefits
Flexible Time Away
The Best Teammates
Experience Ambassadors
Open and Honest Culture
Well-Being and Growth
Offers Equity

Fulltime

Staff IAM Architect

Addepar

Location:
Canada

Category:
IT - Administration

Contract Type:
Not provided

Salary:

Job Description:

Job Responsibility:

Requirements:

Nice to have:

Additional Information:

Job Posted:
December 05, 2025

Looking for more opportunities? Search for other job offers that match your skills and interests.

Similar Jobs for Staff IAM Architect

Staff IAM Architect

Staff Software Engineer, IAM

Technical Account Manager

Security Engineer

Senior/Staff Enterprise Security Engineer

Manager – Security Architecture and Strategy

Staff DevOps - Data Platform

Staff Software Engineer I - Internal Access Management

Staff IAM Architect

Addepar

Location:Canada

Category:IT - Administration

Contract Type:Not provided

Salary:

Job Description:

Job Responsibility:

Requirements:

Nice to have:

Additional Information:

Job Posted:December 05, 2025

Looking for more opportunities? Search for other job offers that match your skills and interests.

Similar Jobs for Staff IAM Architect

Staff IAM Architect

Staff Software Engineer, IAM

Technical Account Manager

Security Engineer

Senior/Staff Enterprise Security Engineer

Manager – Security Architecture and Strategy

Staff DevOps - Data Platform

Staff Software Engineer I - Internal Access Management

Location:
Canada

Category:
IT - Administration

Contract Type:
Not provided

Job Posted:
December 05, 2025