Lead IAM Engineer

At Braze we have found our people. Were a genuinely approachable exceptionally kind and intensely passionate crew.

We seek to ignite that passion by setting high standards championing teamwork and creating work-life harmony as we collectively navigate rapid growth on a global scale while striving for greater equity and opportunity inside and outside our organization.

To flourish here you must be prepared to set a high bar for yourself and those around you. There is always a way to contribute: Acting with autonomy having accountability and being open to new perspectives are essential to our continued success.

Our deep curiosity to learn and our eagerness to share diverse passions with others gives us balance and injects a one-of-a-kind vibrancy into our culture.

If you are driven to solve exhilarating challenges and have a bias toward action in the face of change you will be empowered to make a real impact here with a sharp and passionate team at your back. If Braze sounds like a place where you can thrive we cant wait to meet you.

WHAT YOULL DO

Were seeking a Lead IAM Engineer to own the technical direction and evolution of our enterprise identity and access management this senior individual contributor role youll architect build and continuously improve a secure scalable and automated identity ecosystem centered on Okta identity lifecycle access governance and automation.

Youll partner across Information Systems Security Engineering Financial and People Systems to ensure employees contractors partners applications and services have the right access at the right time while maintaining strong security governance reliability and user experience.

A major focus of this role will be improving onboarding access-change and offboarding reliability reducing manual administration strengthening access governance and expanding automation across our identity ecosystem. Youll help modernize how identity configuration changes are managed through APIs infrastructure as code automated workflows and repeatable engineering practices.

Youll also help strengthen the broader Identity & Access capability by developing reusable patterns improving documentation and operational resilience mentoring other engineers and reducing key-person dependencies across critical identity services.

If youre an experienced IAM engineer with deep Okta expertise who enjoys both defining architecture and getting hands-on with automation integrations governance and platform engineering wed love to meet you.

Main responsibilities:

• Own the technical roadmap and architecture for enterprise Identity & Access Management with Okta as a core identity platform
• Architect and continuously improve Okta capabilities across SSO authentication lifecycle automation Workflows Identity Governance and Access Requests
• Design reliable onboarding role-change and offboarding identity processes for employees contractors partners and other user populations
• Build and improve integrations between Okta and systems such as Workday Google Workspace Slack GitHub Atlassian MDM and other enterprise applications
• Drive identity automation using Okta Workflows APIs scripting Terraform and other engineering tools
• Modernize how identity configuration changes are made through infrastructure as code automated validation peer review and controlled deployment where appropriate
• Lead identity governance initiatives including access reviews access requests role-based access approval workflows entitlement management and least-privilege controls
• Design and implement authentication federation and provisioning solutions using SAML OIDC OAuth SCIM MFA and related identity standards
• Partner with Security on authentication standards privileged access identity risk and zero-trust initiatives
• Support and continuously improve identity-related SOX controls audit evidence access reviews and remediation processes
• Design identity solutions for partners resellers service accounts machine identities and other non-standard access needs
• Serve as a senior escalation point for complex identity issues and lead root cause analysis when identity or lifecycle processes fail
• Identify recurring administrative or support work and create automation self-service runbooks or delegated workflows to reduce manual intervention
• Establish repeatable engineering standards for how identity changes are designed tested deployed and documented
• Mentor other engineers and help build broader IAM expertise and independent backup coverage across the team
• Evaluate emerging identity capabilities and recommend where they can improve security reliability scalability or user experience

WHO YOU ARE

• Deep hands-on expertise with Okta in a complex enterprise environment including SSO Lifecycle Management Authentication MFA Workflows and Identity Governance
• Advanced understanding of SAML OIDC OAuth 2.0 SCIM federation provisioning authentication and authorization
• Experience automating employee onboarding role changes and offboarding using an HRIS such as Workday as the authoritative source for employee data
• Strong experience with identity governance including access reviews entitlement management access requests role-based access control and least privilege
• Strong scripting and automation skills using Python PowerShell or similar languages
• Strong API integration experience and the ability to connect identity platforms with broader enterprise systems
• Experience with Terraform or another infrastructure-as-code framework
• Experience turning manual identity administration into scalable automated and auditable processes
• Experience supporting IAM controls in a SOX-regulated or similarly controlled environment
• Proven ability to lead complex cross-functional IAM initiatives without requiring formal people-management authority
• Strong communication skills with the ability to explain identity architecture technical decisions and risk to both technical and non-technical audiences

Bonus Points:

• Okta certifications such as Okta Certified Administrator Consultant Developer or Identity Governance credentials
• Experience managing Okta configuration through Terraform or similar tooling
• Experience using Git-based workflows or CI/CD practices to manage identity or infrastructure changes
• Familiarity with adjacent enterprise platforms such as Google Workspace Slack GitHub Atlassian Iru Kandji Jamf Zscaler or 1Password
• Experience with partner reseller B2B or external identity architectures
• Experience managing service accounts machine identities workload identities or other non-human access
• Experience automating audit evidence or identity governance controls

For candidates based in the United States the pay range for this position at the start of employment is expected to be between $91000 and $142000/year with an expected On Target Earnings (OTE) between $101000 and $158000/year (including bonus or commission). Your exact offer may vary depending on multiple individualized factors including market location job-related knowledge skills and addition to cash compensation this role qualifies for a comprehensive Total Rewards package that includes equity grants of restricted stock (RSUs) so that you will own a piece of our company.

#LI-Hybrid