Senior Identity & Access Management Engineer

About the Role Moveworks is seeking a Senior Identity & Access Management Engineer to own design, development, and operation of IAM at scale across cloud infrastructure, SaaS apps, and internal systems. You will balance security with velocity and de-risk access with automated, observable controls.

What You'll Do

• Be the technical developer to drive IAM application development: Code, design, and implement solutions with extensive knowledge in AWS, Azure, Teleport, and Terraform. Enabling robust and reliable solutions to keep our engineering teams active.
• Drive IAM projects end-to-end: Take ambiguous access problems, define requirements, architect solutions, and own rollout and operationalization.
• Develop with secure access models in mind: Continuously improve role design and access assignment patterns across AWS, Kubernetes, SaaS apps, and internal systems to reduce unnecessary privileges, minimize manual grants, and create scalable safe-baseline access that covers routine work without daily elevation.
• Develop on operationalizing logging and metrics: Ensure access changes are observable in our SIEM; build repeatable reporting that surfaces risky access and drift.
• Run and improve user access reviews (UAR): Develop, execute and design a UAR process and solution that meets compliance requirements while improving real security signals—minimizing approver burden through scoping, automation, and clear decision support.
• Develop technology to continuously de-risk: Identify high-risk permissions and misuse paths, propose appropriate controls and mitigations, drive adoption with partner teams, and develop solutions to continuously de-risk.
• Operate with strong security judgment and high signal: Distinguish meaningful IAM risk from noise, gather context efficiently, and escalate with crisp rationale and actionable mitigations.
• Document and standardize the paved road: Write lightweight procedures, runbooks, and automation so access decisions are consistent, scalable, and not dependent on tribal knowledge.

What We're Looking For

• US Citizenship preferred
• Willingness to work onsite at our Mountain View or New York offices
• Experience: 5+ years of experience working in IAM, security engineering, or platform engineering with substantial IAM responsibilities in production environments
• IAM Expertise: Strong grasp of IAM best practices and common failure modes (e.g., least privilege, privilege escalation)