2 hours ago
Base Salary
$175k - $241k/yr
Responsibilities
- Own Terraform configuration for Okta applications, authorization servers, authentication policies, groups, group rules, and SCIM provisioning.
- Design and operate custom authorization servers with audiences, scopes, claims, and access policies for internal services and AI agents.
- Implement delegated app-to-app and agent access through Cross App Access and ID-JAG.
- Own the IGA platform, including entitlement catalogs, ownership, access requests, time-bound grants, and certifications.
- Build agentic workflows that create governed entitlements and open Terraform and IGA changes for review.
- Build identity graphs and automate remediation of overprivileged and long-standing access.
- Build an identity data lake and on-call agent to explain identity and access events.
Requirements
- 6+ years of experience in identity engineering or IAM, including operational ownership of Okta or an equivalent identity provider at scale.
- Deep understanding of OAuth 2.0, OIDC, SAML, and SCIM, including custom authorization server audiences, scopes, and claims.
- Working knowledge of Cross App Access and ID-JAG, including token exchange and JWT bearer grants.
- Experience with ISPM or identity graph tooling and automated remediation.
- Experience owning an IGA platform or building an equivalent in-house.
- Experience using Terraform to manage identity providers, including module design, state, and CI.
- Programming experience in Python or Go and experience building against platform APIs.
Benefits
- Flexible PTO, centralized home-office equipment ordering, health and wellness stipend, budget for intra-office travel, and weekly coffee stipend.
- United States employees receive medical, dental, and vision coverage, One Medical membership, 401(k) with employer match, fertility HRA, parental leave, pet insurance, in-office perks, and potential relocation coverage to NYC or SF.
- Canada employees receive group health coverage, life, AD&D and disability coverage, fertility drug coverage, retirement-plan matching, parental leave, an Employee Assistance Program, and virtual care.
- United Kingdom employees receive private medical insurance, virtual GP and at-home care, workplace pension, and parental leave.
About Ramp
Ramp builds a finance operations platform for businesses, combining corporate cards with expense management, bill pay, accounts payable, travel, and accounting automation. Founded in 2019 and headquartered in New York, the privately held company’s systems handle over $200B in annualized spend across 70,000+ companies. Its business model blends card interchange with software that helps finance teams control and automate spending.