Senior Identity Access Management Engineer

Overview

Senior Identity Access Management Engineer to enhance Roku’s Zero-Trust architecture and optimize a Microsoft-centric identity platform for a geographically distributed workforce.

What you'll do

• Lead enterprise-wide IAM standardization across global regions.
• Drive IAM automation to streamline administration and improve user experience.
• Onboard enterprise applications into Azure Entra ID with SSO, Conditional Access, and RBAC.
• Enhance privileged access management with monitoring, alerting, and auditability solutions.
• Troubleshoot identity-related issues and support global infrastructure initiatives.
• Advance Zero Trust identity principles including continuous verification and least-privilege access.
• Build identity automation using scripting, pipelines, and tooling with a DevOps mindset.

What you'll need

• 8+ years of hands-on experience in identity and access management and automating cloud technologies (Microsoft ecosystem).
• Deep expertise in Azure Entra ID, including Conditional Access, Identity Governance, and Privileged Identity Management.
• Automation and scripting skills using PowerShell, Azure CLI, and Microsoft Graph API.
• Working knowledge of Azure services such as Function Apps and Logic Apps.
• Experience with onboarding and managing enterprise applications in Azure Entra ID.
• Advanced knowledge of Azure SSO methods including OAuth2, OpenID Connect, and SAML.
• Knowledge of privileged access tools (Azure PIM, CyberArk), secrets management (HashiCorp or Azure Key Vault), and workload identity patterns SPIFEE & SPIRE.

Details

• For New York only: estimated annual salary between $158,000 - $279,000.
• Hybrid working: generally in office Monday through Thursday, with Fridays flexible for remote work (role/location dependent).