Braze

Lead IAM Engineer

Braze
Apply
14 hours ago

Base Salary

$91k - $142k/yr

Responsibilities

  • Own the technical roadmap and architecture for enterprise Identity and Access Management with Okta as the core platform.
  • Improve Okta SSO, authentication, lifecycle automation, Workflows, Identity Governance, and Access Requests.
  • Design reliable onboarding, role-change, and offboarding processes for employees, contractors, partners, and other users.
  • Build integrations between Okta and systems including Workday, Google Workspace, Slack, GitHub, Atlassian, and MDM platforms.
  • Drive identity automation using Okta Workflows, APIs, scripting, Terraform, and other engineering tools.
  • Modernize identity configuration management through infrastructure as code, validation, peer review, and controlled deployment.
  • Lead access reviews, access requests, role-based access, approval workflows, entitlement management, and least-privilege controls.
  • Implement authentication, federation, and provisioning solutions using SAML, OIDC, OAuth, SCIM, MFA, and related standards.
  • Support identity-related SOX controls, audit evidence, access reviews, remediation, privileged access, and zero-trust initiatives.
  • Provide senior escalation support, lead root cause analysis, create self-service and runbook automation, mentor engineers, and evaluate emerging identity capabilities.

Requirements

  • Deep hands-on Okta expertise in complex enterprise environments, including SSO, Lifecycle Management, Authentication, MFA, Workflows, and Identity Governance.
  • Advanced understanding of SAML, OIDC, OAuth 2.0, SCIM, federation, provisioning, authentication, and authorization.
  • Experience automating onboarding, role changes, and offboarding using an HRIS such as Workday as the authoritative employee-data source.
  • Strong experience with identity governance, access reviews, entitlement management, access requests, role-based access control, and least privilege.
  • Strong scripting and automation skills using Python, PowerShell, or similar languages.
  • Strong API integration experience connecting identity platforms with enterprise systems.
  • Experience with Terraform or another infrastructure-as-code framework.
  • Experience converting manual identity administration into scalable, automated, and auditable processes.
  • Experience supporting IAM controls in a SOX-regulated or similarly controlled environment.
  • Ability to lead complex cross-functional IAM initiatives without formal people-management authority and communicate technical decisions and risk to technical and non-technical audiences.
  • Preferred qualifications include Okta certifications, Git-based workflows, CI/CD practices, partner or B2B identity architecture, service or machine identity management, and automated audit evidence or governance controls.

Benefits

  • The position offers a hybrid work arrangement and a curated in-office employee experience.
  • Benefits include retirement and Employee Stock Purchase Plans, flexible paid time off, medical, dental, vision, life, and disability coverage.
  • Family benefits include fertility services and equal paid parental leave.
  • Professional development includes formal career pathing, learning platforms, and a yearly learning stipend.
  • The company offers employee resource groups, volunteer opportunities, donation matching, and a collaborative workplace culture.
  • U.S. compensation includes base pay of $91,000-$142,000 per year, with potential equity and other total-rewards benefits.

Tech Stack

Categories

Braze

About Braze

1,001-5,000 employees

Braze builds a customer engagement platform used by marketing teams to orchestrate cross-channel messaging across mobile, email, web, and more. The company sells its software via SaaS subscriptions with analytics, segmentation, and journey orchestration. Founded in 2011 and headquartered in New York, Braze is a public company (NASDAQ: BRZE) with global offices.

Contact me