Subway: Global quick-service restaurant chain specializing in submarine sandwiches.
3+ YOEBachelor's degree or equivalent experience; 3–5 years in IAM or related infrastructure/security work; Okta, SSO, SCIM, Active Directory, scripting, REST APIs, ITSM, Git, and CI/CD experience.
Okta, Active Directory, Microsoft Entra ID, Microsoft 365, ServiceNow, AWS IAM Identity Center, SCIM 2.0, SAML 2.0, OIDC, OAuth 2.0, PowerShell, Python, bash, REST APIs, Git, CI/CD, Ceridian Dayforce, Jamf, CrowdStrike Falcon Identity Protection, SIEM, OWASP API Security Top 10, Intune, Workday, UKG, SC-300, Model Context Protocol (MCP), LLM
Subway: Global quick-service restaurant chain specializing in submarine sandwiches.
3+ YOEBachelor's degree or equivalent experience; 3–5 years in IAM, identity operations, systems administration, or related security infrastructure; Okta, SSO, SCIM, AD, scripting, REST APIs, ITSM, Git, and CI/CD experience.
Okta, Active Directory, Microsoft Entra ID, Microsoft 365, ServiceNow, AWS IAM Identity Center, Ceridian Dayforce, Jamf, PowerShell, Python, Bash, Git, SCIM 2.0, SAML 2.0, OIDC, OAuth 2.0, REST APIs, CrowdStrike Falcon Identity Protection, SIEM, Intune, Workday, UKG, Model Context Protocol (MCP), OWASP API Security Top 10, Microsoft SC-300
City of New York: Provides municipal services and administration for New York City.
4+ YOESupport and administer identity and access management including PKI/AD CS, Microsoft Entra ID, HSM, certificate lifecycle, access provisioning, and troubleshoot IAM production issues; bachelor's degree plus four years' related experience or equivalent.
Microsoft Entra ID, Active Directory, AD CS, HSM, CLM, PowerShell, Ansible, Phyton, X.509, TLS/SSL, CRL/OCSP, NIST, CIS
Principal Authentication Engineer (IAM) — Vice President
New York, New York, United States
$150k-$210k/yrOnsiteFull Time
Morgan StanleyNYSE: MS: Global financial services firm providing investment and banking solutions.
10+ YOEHands-on IAM engineering experience with OIDC/OAuth2, SAML, FIDO2/WebAuthn, PKI, API auth, IAM platform integrations, automation, and operating large-scale, highly available environments.
Guardian Life: Provides life, disability, dental, and vision insurance products.
5+ YOEBachelor's in CS/IT, 5+ years IAM engineering experience, expertise with Okta, PingFederate, SailPoint, CyberArk, Microsoft Azure AD/Entra ID, reverse proxies, audits, scripting, DevOps/CI/CD and AWS; CISSP/CISM preferred.
Okta, PingFederate, SailPoint, CyberArk, Microsoft Azure AD, Microsoft Entra ID, Okta Access Gateway, Microsoft App Proxy, DevOps, CI/CD, AWS
San Francisco or New York City or Chicago or United States
$150k-$210k/yrHybridFull Time
Komodo Health: Privately held healthcare AI and real-world data analytics serving Life Sciences and healthcare organizations.
5+ YOE5+ years IAM experience with Okta, identity lifecycle, SSO/MFA/federation, scripting for automation, APIs, Terraform/Github, and cross-functional partnership; strong security and governance background.
5+ YOERequires 5+ years of IAM or information security engineering, Ping Identity and SailPoint, 3+ years of secrets management, team leadership, cloud and Kubernetes experience, and a bachelor's degree or equivalent.
Vercel: Software providing developer infrastructure for teams building web applications and AI agents.
7+ YOE7+ years in identity/access management or platform security; deep Okta and Terraform expertise; AWS/GCP IAM experience; MDM/MAM experience (Jamf/Intune); strong collaboration and autonomy.
Okta, Terraform, AWS, GCP, Jamf, Intune, SCIM, SAML, OIDC, Google Workspace, Azure AD, Next.js, AI SDK
Judi Health: Privately held health technology providing pharmacy and benefits administration to employers, unions, health plans, and governments.
4+ YOERequires 4–6+ years in IT engineering, systems administration, or IAM; advanced Okta expertise; RBAC, governance, automation, cloud, Office 365, macOS, scripting, project leadership, and mentoring experience.
Oscar HealthNYSE: OSCR: Technology-driven health insurance and managed care provider.
4+ YOE4+ years identity engineering experience; design and implement IAM controls for enterprise, cloud and SaaS; strong understanding of least privilege, RBAC/ABAC, lifecycle management, access reviews, and identity telemetry.
Okta, Google Workspace Identity, AWS, BigQuery, Google Cloud, SAML, OAuth, OIDC, SCIM, LDAP, ITDR, UEBA, SIEM, SOAR
CoreWeaveNasdaq: CRWV: Specialized cloud provider for large-scale AI and machine learning.
10+ YOE10+ years of distributed systems experience; 5+ years IAM; leadership; cloud-native, Kubernetes; security/compliance; OpenID/OAuth 2.0/SAML/JWT.
Principal Authentication Engineer (IAM) — Vice President
New York, New York, United States
$150k-$210k/yrOnsiteFull Time
Morgan StanleyNYSE: MS: Provides global investment banking, wealth management, and advisory services.
10+ YOEHands-on IAM engineering experience (10+ years typical) with OIDC/OAuth2, SAML, FIDO2/WebAuthn, PKI, secrets management, Vault/CyberArk/SailPoint/Entra ID, Terraform, config management, and coding in Shell/Python/Go.
Cupertino or San Francisco or Boston or New York City or Austin or Tokyo or London or Bangalore
$150k-$190k/yrOnsiteFull Time
Postman: Private software providing an API development and lifecycle-management platform for developers and organizations.
5+ YOE5+ years building complex backend or distributed systems at scale; proficiency in JavaScript, Node.js, React.js, databases, query optimization, schema design, indexing, and caching.
Artemis: AI-native cybersecurity platform helping enterprises detect, investigate, and respond to threats across digital environments.
5+ YOE5+ years in security engineering or corporate security, deep IAM/endpoint/cloud expertise, SOC 2/ISO audit experience, incident response leadership, familiarity with EDR/SIEM/IAM/MDM/DLP tooling.
United States or Canada or Columbus or Austin or New York City or California
$167k-$231k/yrRemoteFull Time
UpstartNasdaq: UPST: Public AI lending marketplace connecting consumers with banks and credit unions for personal, auto, and home-equity loans.
4+ YOEBachelor's or equivalent and 4+ years software engineering; 4+ years designing/operating Kubernetes; AWS (EKS, EC2, IAM) experience; Go or comparable language; infrastructure-as-code, CI/CD, and automation experience.
Lead Identity Access Management (IAM) Engineer/Architect
Rockville or Washington or Tysons or Colorado or Florida or Texas or Illinois or Pennsylvania or Massachusetts or Maryland or Virginia or New York City or New Jersey
$114k-$249k/yrHybridFull Time
FINRA: Regulates brokerage firms and exchange markets in the United States.
7+ YOEBachelor’s degree or equivalent experience and 7+ years related experience. Requires SailPoint IdentityIQ, Java, cloud IAM, security architecture, access controls, and strong technical communication skills.
Ripple: Enables institutions to move, manage, and tokenize value.
10+ YOE10+ years of Security Engineering experience, AI/ML security exposure, expertise in LLM and agentic AI risks, cloud, CI/CD, containers, Kubernetes, IAM, API security, and threat modeling.