Staff IAM EngineerActive
The opportunity
ChargePoint is looking for a IAM Engineer to lead enterprise identity strategy and platform architecture across cloud, on-premises, and hybrid environments. This role owns cloud identity, directory services, Okta identity workflows, and the transition of applications to modern authentication standards (OAuth 2.
What you'll do
Lead enterprise identity strategy and platform architecture, encompassing: cloud identity, directory services, and the transition of applications to modern authentication standards (OAuth 2.0, OIDC, SAML).
Define and implement reference architectures for secure authentication across: CLI, browser, and agentic workflows.
Establish agent identities as a foundational element within the identity: platform, enabling access control and auditability for automated and machine-assisted workflows.
Build and implement advanced identity security controls such as Conditional: Access policies, Privileged Identity Management (PIM), and risk-based authentication.
Scale device management and identity governance systems to meet the demands: of AI-powered operations. Ensure reliability, performance, and compliance across large organizational environments.
Partner with security, infrastructure, and product teams to align on: architecture, build strategy, and operational ownership.
What they're looking for
- Drive IAM application development: code, design, and implement solutions with deep knowledge in AWS, Azure, Teleport, and Terraform. Deliver reliable solutions that keep engineering teams productive.
- Drive IAM projects end-to-end: take ambiguous access problems, define requirements, architect solutions, and own the rollout and operationalization — not just the design.
- Refine role design and access patterns across AWS, Kubernetes, SaaS, and: internal systems — eliminate unnecessary privileges, reduce manual grants, and establish scalable baseline access.
- Run and improve user access reviews (UAR): develop, execute, and design a UAR process and solution that meets compliance requirements while improving real security signal — minimize approver burden through scoping, automation, and clear decision support.
