CLEARNYSE: YOU: Secure biometric identity platform for travel and venue access
8+ YOE8+ years in IAM/security engineering with deep Okta and SailPoint experience, strong AWS access security, scripting (Python/Bash), Terraform, and API automation skills.
Okta, SailPoint, Terraform, Python, Bash, REST APIs, AWS, AWS IAM Identity Center
Subway: Global quick-service restaurant chain specializing in made-to-order sandwiches.
3+ YOEBachelor's degree or equivalent experience; 3–5 years in IAM or related infrastructure/security work; Okta, SSO, SCIM, Active Directory, scripting, REST APIs, ITSM, Git, and CI/CD experience.
Okta, Active Directory, Microsoft Entra ID, Microsoft 365, ServiceNow, AWS IAM Identity Center, SCIM 2.0, SAML 2.0, OIDC, OAuth 2.0, PowerShell, Python, bash, REST APIs, Git, CI/CD, Ceridian Dayforce, Jamf, CrowdStrike Falcon Identity Protection, SIEM, OWASP API Security Top 10, Intune, Workday, UKG, SC-300, Model Context Protocol (MCP), LLM
City of New York: Provides municipal services and administration for New York City.
4+ YOESupport and administer identity and access management including PKI/AD CS, Microsoft Entra ID, HSM, certificate lifecycle, access provisioning, and troubleshoot IAM production issues; bachelor's degree plus four years' related experience or equivalent.
Microsoft Entra ID, Active Directory, AD CS, HSM, CLM, PowerShell, Ansible, Phyton, X.509, TLS/SSL, CRL/OCSP, NIST, CIS
Principal Authentication Engineer (IAM) — Vice President
New York, New York, United States
$150k-$210k/yrOnsiteFull Time
Morgan StanleyNYSE: MS: Global financial services firm providing investment and wealth management.
10+ YOEHands-on IAM engineering experience with OIDC/OAuth2, SAML, FIDO2/WebAuthn, PKI, API auth, IAM platform integrations, automation, and operating large-scale, highly available environments.
San Francisco or New York City or Chicago or United States
$150k-$210k/yrHybridFull Time
Komodo Health: Provides AI-driven healthcare data and patient journey analytics software.
5+ YOE5+ years IAM experience with Okta, identity lifecycle, SSO/MFA/federation, scripting for automation, APIs, Terraform/Github, and cross-functional partnership; strong security and governance background.
CVS HealthNYSE: CVS: Provides retail pharmacy, health insurance, and pharmacy benefit management services.
7+ YOE7+ years IAM experience with Active Directory, Entra ID and cloud IAM; support audits (HIPAA, SOX); PAM and automation experience; strong problem solving and stakeholder support skills.
Active Directory, Entra ID, GCP IAM, GCP Config Connector, Security Command Center, CyberArk, HashiCorp Vault
Amex GBTNYSE: GBTG: Provides travel management services and technology for businesses.
5+ YOEBachelor's in Computer Science or related plus 5 years IAM experience; 4+ years Okta, SSO, SAML/OIDC/OAuth, OAG, and migrating legacy auth; strong communication and technical troubleshooting skills.
Vercel: Frontend cloud platform for building and hosting web applications.
7+ YOE7+ years in identity/access management or platform security; deep Okta and Terraform expertise; AWS/GCP IAM experience; MDM/MAM experience (Jamf/Intune); strong collaboration and autonomy.
Okta, Terraform, AWS, GCP, Jamf, Intune, SCIM, SAML, OIDC, Google Workspace, Azure AD, Next.js, AI SDK
Dublin or London or Reston or Charlotte or Parsippany
OnsiteFull Time
AIG: Global provider of property casualty insurance and risk solutions.
Define and govern enterprise IAM/CIAM strategy and target-state architecture; develop roadmaps; collaborate with PMO and engineering; knowledge of Entra ID, Okta, SailPoint IIQ, HYPR; strong stakeholder management.
Entra ID, Active Directory, Okta, SailPoint IIQ, HYPR, Intune, Windows Hello for Business
Oscar HealthNYSE: OSCR: Provides tech-enabled health insurance plans and telemedicine services.
4+ YOE4+ years identity engineering experience; design and implement IAM controls for enterprise, cloud and SaaS; strong understanding of least privilege, RBAC/ABAC, lifecycle management, access reviews, and identity telemetry.
Okta, Google Workspace Identity, AWS, BigQuery, Google Cloud, SAML, OAuth, OIDC, SCIM, LDAP, ITDR, UEBA, SIEM, SOAR
CoreWeaveNASDAQ: CRWV: Cloud platform providing GPU-accelerated infrastructure for AI workloads.
10+ YOE10+ years of distributed systems experience; 5+ years IAM; leadership; cloud-native, Kubernetes; security/compliance; OpenID/OAuth 2.0/SAML/JWT.
Principal Authentication Engineer (IAM) — Vice President
New York, New York, United States
$150k-$210k/yrOnsiteFull Time
Morgan StanleyNYSE: MS: Provides global investment banking, wealth management, and advisory services.
10+ YOEHands-on IAM engineering experience (10+ years typical) with OIDC/OAuth2, SAML, FIDO2/WebAuthn, PKI, secrets management, Vault/CyberArk/SailPoint/Entra ID, Terraform, config management, and coding in Shell/Python/Go.
Acrisure: Provides AI-powered insurance, financial, and business risk solutions.
5+ YOERequires 5+ years in IAM engineering, enterprise Microsoft Entra ID and Active Directory, AWS IAM, authentication protocols, automation, PAM or IGA platforms, and Zero Trust and least-privilege principles.
Artemis: Develops AI-powered cybersecurity software for automated threat detection and defense.
5+ YOE5+ years in security engineering or corporate security, deep IAM/endpoint/cloud expertise, SOC 2/ISO audit experience, incident response leadership, familiarity with EDR/SIEM/IAM/MDM/DLP tooling.
United States or Canada or Columbus or Austin or New York City or California
$167k-$231k/yrRemoteFull Time
UpstartNasdaq: UPST: AI-powered lending marketplace for consumer and automotive loans.
4+ YOEBachelor's or equivalent and 4+ years software engineering; 4+ years designing/operating Kubernetes; AWS (EKS, EC2, IAM) experience; Go or comparable language; infrastructure-as-code, CI/CD, and automation experience.
Dallas or Ashburn or Denver or Charlotte or Boston or New York City or Austin
$140k-$180k/yrHybridFull Time
Digital RealtyNYSE: DLR: Provides global data center, colocation, and interconnection solutions.
8+ YOE8+ years IAM experience with 4+ years hands-on SailPoint ISC; experience with JML lifecycle, access certifications, SOX UARs, non-human identity governance, CI/CD, and integrations with Oracle HCM, Active Directory, and Microsoft Entra ID.
SailPoint Identity Security Cloud (IdentityNow), Oracle HCM, Active Directory, Microsoft Entra ID, ServiceNow, BeyondTrust, Microsoft Sentinel, GitHub