The Identity & Access Management (IAM) Engineer designs, implements, and operates identity and access capabilities for human users, non-human identities, workloads, devices, services, and AI agents. The role focuses on the subject side of access control—identity, authentication, roles, groups, entitlements, and privileges—with an emphasis on least privilege, separation of duties, strong authentication, automated lifecycle management, and short-lived credentials.

The engineer partners with others across the organization to ensure applications, infrastructure, and services appropriately mediate access, separate security domains, minimize unnecessary sharing, and limit common mechanisms that could increase privilege or blast radius.

Design and operate authentication, authorization, federation, SSO, MFA, RBAC/ABAC, PAM, conditional access, policy-based authorization, just-in-time access, continuous verification, and privileged-access capabilities.

Engineer roles, groups, entitlements, and privilege assignments around least privilege and separation of duties.

Automate identity provisioning, access reviews, privilege changes, revocation, and deprovisioning.

Implement phishing-resistant MFA, cryptographically bound authentication, and strong identity assurance across enrollment, authentication, federation, and recovery.

Govern service accounts, machine and device identities, workloads, automated processes, APIs, and AI-agent identities.

Implement short-lived workload and agent identities using federation, certificates, and modern workload-identity approaches while reducing reliance on persistent secrets.

Partner with architects, engineers, and resource owners to ensure access is efficiently mediated and designs minimize excessive privilege, unnecessary sharing, and cross-domain exposure.

Monitor identity posture and partner with Security Operations to investigate identity threats and rapidly revoke compromised access.

Identity & Access Management (IAM) Engineer

Responsibilities

Qualification

Required

Benefits

Company

Backblaze

More roles at Backblaze