Identity & Access Management (IAM) Engineer
Backblaze External Website1 day ago
Remote, United StatesMid Level
H1B sponsor
Base Salary
$155k - $195k/yr
Responsibilities
- Design and operate authentication, authorization, federation, SSO, MFA, RBAC/ABAC, PAM, conditional access, policy-based authorization, just-in-time access, continuous verification, and privileged-access capabilities.
- Engineer roles, groups, entitlements, and privilege assignments according to least privilege and separation-of-duties principles.
- Automate identity provisioning, access reviews, privilege changes, revocation, and deprovisioning.
- Implement phishing-resistant MFA, cryptographically bound authentication, and strong identity assurance across enrollment, authentication, federation, and recovery.
- Govern service accounts, machine and device identities, workloads, automated processes, APIs, and AI-agent identities.
- Implement short-lived workload and agent identities using federation, certificates, and modern workload-identity approaches.
- Partner with architects, engineers, and resource owners on secure access design and minimized privilege and cross-domain exposure.
- Monitor identity posture and work with Security Operations to investigate identity threats and revoke compromised access.
Requirements
- Hands-on experience engineering enterprise IAM systems and integrations.
- Strong knowledge of authentication, authorization, federation, identity lifecycle management, role and group design, separation of duties, and least privilege.
- Knowledge of phishing-resistant MFA, cryptographic authentication, identity proofing, federation, and modern identity assurance practices.
- Experience managing human and non-human identities, including service, machine, workload, or device identities.
- Experience automating identity processes using APIs, scripting, or Infrastructure-as-Code.
- Understanding of PKI, secrets management, short-lived credentials, workload identity federation, OIDC, OAuth, and SPIFFE/SPIRE.
- Ability to reason about identity and authorization across distributed systems and collaborate with architects and engineers on secure access design.
Benefits
- Healthcare coverage for family, including dental and vision.
- 401(k) plan, RSU grants for full-time employees, and ESPP program.
- Flexible vacation policy and maternity and paternity leave.
- MacBook Pro for work and a workstation personalization stipend.
- Childcare bonus and fertility treatment and support.
- Learning and development program and commuter benefits.
- Culture supporting healthy work-life balance.
Categories
About Backblaze External Website
Backblaze provides cloud storage and backup services for businesses, developers, and individuals, centered on its B2 S3‑compatible object storage and Computer Backup offerings. It also offers B2 Overdrive for high‑throughput AI/GPU data pipelines and B2 Neo for white‑label enterprise storage, sold on usage-based and subscription pricing. Founded in 2007 and headquartered in San Mateo, the NASDAQ‑listed company (BLZE) serves 500,000+ customers across 175 countries.