IAM Engineer

Innovate Consulting is seeking an IAM Engineer for a cyber security company located in San Fransisco where you will design and operate identity systems that let clients move faster without sacrificing control—turning access into a competitive advantage and proving that security can be both principled and practical.

Performance Objectives

• Stand up a production-ready IAM platform (SSO, MFA, lifecycle, privileged access) for at least two client environments within 90 days, measured by zero-critical audit findings and sub-5-minute mean time to provision.
• Reduce orphaned and over-privileged accounts by 40% in the first six months through automated joiner-mover-leaver workflows and continuous access reviews.
• Integrate IAM with client DevSecOps pipelines so every new application ships with least-privilege policies and just-in-time access, cutting identity-related deployment delays by half.
• Lead quarterly tabletop exercises that validate incident response for identity compromise, documenting playbooks that drop recovery time below four hours.
• Publish a living IAM architecture standard that becomes the default for managed programs, adopted by 80% of new engagements within one year.
• Mentor two junior engineers so they independently own a client IAM workstream by month nine.

Environment & Resources

You report to the Principal Security Architect and work inside a tight 11–50 person team that lives the on TRACK culture—Trust, Responsive, Authentic, Community, Knowledge. You will have access to leading cloud IAM suites, a dedicated lab budget for proof-of-concepts, and direct client stakeholders who expect partner-level thinking, not ticket-taking.

Essential Qualifications

• Delivered at least two end-to-end IAM implementations (Okta, Azure AD, Ping, or equivalent) that survived real-world audits.
• Written and automated identity lifecycle policies that measurably reduced risk without slowing the business.
• Hands-on experience stitching IAM into CI/CD and infrastructure-as-code so access is declared, not requested.
• Comfortable translating technical identity controls into executive-level risk language.
• Bias for documentation and knowledge-sharing that others actually use.

Role Selling Points

• Early-stage impact: your designs become the company standard, not a slide in a 200-page playbook.
• Direct client partnership—you sit at the table where transformation decisions are made.
• Culture that invests in people first; we measure success by the trust we build, not the hours we bill.
• San Francisco-rooted but outcome-driven: ship work that protects the digital world, then go live it.

If you want to turn identity into the engine of secure digital transformation, apply now and show us the outcomes you have already delivered.