Subway: Global quick-service restaurant chain specializing in made-to-order sandwiches.
3+ YOEBachelor's degree or equivalent experience; 3–5 years in IAM or related infrastructure/security work; Okta, SSO, SCIM, Active Directory, scripting, REST APIs, ITSM, Git, and CI/CD experience.
Okta, Active Directory, Microsoft Entra ID, Microsoft 365, ServiceNow, AWS IAM Identity Center, SCIM 2.0, SAML 2.0, OIDC, OAuth 2.0, PowerShell, Python, bash, REST APIs, Git, CI/CD, Ceridian Dayforce, Jamf, CrowdStrike Falcon Identity Protection, SIEM, OWASP API Security Top 10, Intune, Workday, UKG, SC-300, Model Context Protocol (MCP), LLM
Subway: Global quick-service restaurant chain specializing in sandwiches and salads.
3+ YOEBachelor's degree or equivalent experience; 3–5 years in IAM, identity operations, systems administration, or related security infrastructure; Okta, SSO, SCIM, AD, scripting, REST APIs, ITSM, Git, and CI/CD experience.
Okta, Active Directory, Microsoft Entra ID, Microsoft 365, ServiceNow, AWS IAM Identity Center, Ceridian Dayforce, Jamf, PowerShell, Python, Bash, Git, SCIM 2.0, SAML 2.0, OIDC, OAuth 2.0, REST APIs, CrowdStrike Falcon Identity Protection, SIEM, Intune, Workday, UKG, Model Context Protocol (MCP), OWASP API Security Top 10, Microsoft SC-300
City of New York: Provides municipal services and administration for New York City.
4+ YOESupport and administer identity and access management including PKI/AD CS, Microsoft Entra ID, HSM, certificate lifecycle, access provisioning, and troubleshoot IAM production issues; bachelor's degree plus four years' related experience or equivalent.
Microsoft Entra ID, Active Directory, AD CS, HSM, CLM, PowerShell, Ansible, Phyton, X.509, TLS/SSL, CRL/OCSP, NIST, CIS
Principal Authentication Engineer (IAM) — Vice President
New York, New York, United States
$150k-$210k/yrOnsiteFull Time
Morgan StanleyNYSE: MS: Global financial services firm providing investment and wealth management.
10+ YOEHands-on IAM engineering experience with OIDC/OAuth2, SAML, FIDO2/WebAuthn, PKI, API auth, IAM platform integrations, automation, and operating large-scale, highly available environments.
Guardian Life: Provides life, disability, dental, and vision insurance products.
5+ YOEBachelor's in CS/IT, 5+ years IAM engineering experience, expertise with Okta, PingFederate, SailPoint, CyberArk, Microsoft Azure AD/Entra ID, reverse proxies, audits, scripting, DevOps/CI/CD and AWS; CISSP/CISM preferred.
Okta, PingFederate, SailPoint, CyberArk, Microsoft Azure AD, Microsoft Entra ID, Okta Access Gateway, Microsoft App Proxy, DevOps, CI/CD, AWS
San Francisco or New York City or Chicago or United States
$150k-$210k/yrHybridFull Time
Komodo Health: Provides AI-driven healthcare data and patient journey analytics software.
5+ YOE5+ years IAM experience with Okta, identity lifecycle, SSO/MFA/federation, scripting for automation, APIs, Terraform/Github, and cross-functional partnership; strong security and governance background.
5+ YOERequires 5+ years of IAM or information security engineering, Ping Identity and SailPoint, 3+ years of secrets management, team leadership, cloud and Kubernetes experience, and a bachelor's degree or equivalent.
Vercel: Frontend cloud platform for building and hosting web applications.
7+ YOE7+ years in identity/access management or platform security; deep Okta and Terraform expertise; AWS/GCP IAM experience; MDM/MAM experience (Jamf/Intune); strong collaboration and autonomy.
Okta, Terraform, AWS, GCP, Jamf, Intune, SCIM, SAML, OIDC, Google Workspace, Azure AD, Next.js, AI SDK
4+ YOERequires 4–6+ years in IT engineering, systems administration, or IAM; advanced Okta expertise; RBAC, governance, automation, cloud, Office 365, macOS, scripting, project leadership, and mentoring experience.
Oscar HealthNYSE: OSCR: Provides tech-enabled health insurance plans and telemedicine services.
4+ YOE4+ years identity engineering experience; design and implement IAM controls for enterprise, cloud and SaaS; strong understanding of least privilege, RBAC/ABAC, lifecycle management, access reviews, and identity telemetry.
Okta, Google Workspace Identity, AWS, BigQuery, Google Cloud, SAML, OAuth, OIDC, SCIM, LDAP, ITDR, UEBA, SIEM, SOAR
CoreWeaveNASDAQ: CRWV: Cloud platform providing GPU-accelerated infrastructure for AI workloads.
10+ YOE10+ years of distributed systems experience; 5+ years IAM; leadership; cloud-native, Kubernetes; security/compliance; OpenID/OAuth 2.0/SAML/JWT.
Principal Authentication Engineer (IAM) — Vice President
New York, New York, United States
$150k-$210k/yrOnsiteFull Time
Morgan StanleyNYSE: MS: Provides global investment banking, wealth management, and advisory services.
10+ YOEHands-on IAM engineering experience (10+ years typical) with OIDC/OAuth2, SAML, FIDO2/WebAuthn, PKI, secrets management, Vault/CyberArk/SailPoint/Entra ID, Terraform, config management, and coding in Shell/Python/Go.
Acrisure: Provides AI-powered insurance, financial, and business risk solutions.
5+ YOERequires 5+ years in IAM engineering, enterprise Microsoft Entra ID and Active Directory, AWS IAM, authentication protocols, automation, PAM or IGA platforms, and Zero Trust and least-privilege principles.
Artemis: Develops AI-powered cybersecurity software for automated threat detection and defense.
5+ YOE5+ years in security engineering or corporate security, deep IAM/endpoint/cloud expertise, SOC 2/ISO audit experience, incident response leadership, familiarity with EDR/SIEM/IAM/MDM/DLP tooling.
Lead Identity Access Management (IAM) Engineer/Architect
Rockville or Washington or Tysons or Colorado or Florida or Texas or Illinois or Pennsylvania or Massachusetts or Maryland or Virginia or New York City or New Jersey
$114k-$249k/yrHybridFull Time
FINRA: Regulates brokerage firms and exchange markets in the United States.
7+ YOEBachelor’s degree or equivalent experience and 7+ years related experience. Requires SailPoint IdentityIQ, Java, cloud IAM, security architecture, access controls, and strong technical communication skills.
Dallas or Ashburn or Denver or Charlotte or Boston or New York City or Austin
$140k-$180k/yrHybridFull Time
Digital RealtyNYSE: DLR: Provides global data center, colocation, and interconnection solutions.
8+ YOE8+ years IAM experience with 4+ years hands-on SailPoint ISC; experience with JML lifecycle, access certifications, SOX UARs, non-human identity governance, CI/CD, and integrations with Oracle HCM, Active Directory, and Microsoft Entra ID.
SailPoint Identity Security Cloud (IdentityNow), Oracle HCM, Active Directory, Microsoft Entra ID, ServiceNow, BeyondTrust, Microsoft Sentinel, GitHub
Woodbridge or New York City or Atlanta or Boston or Chicago or Dallas or Delaware or Denver or Garden City or Cayman Islands or Greenwich or Houston or Los Angeles or Miami or Naples or Nevada or Palm Beach or San Diego or San Francisco or Seattle or Stuart or Washington
$160k-$200k/yrHybridFull Time
Bessemer Trust: Wealth management and family office services for affluent clients.
7+ YOE7+ years in DevOps/platform/cloud infrastructure engineering; strong AWS (IAM, CloudFormation, Lambda, API Gateway, VPC, CloudWatch, SSM, Secrets Manager, ECR); AWS CDK/CloudFormation/Terraform; CI/CD (Bitbucket/GitHub Actions, OIDC); container and datastore operations; security fundamentals.