Security Engineer, IAM

{
  "content_hash": "83afecdd2d14af373f2771c1ff9b5bcdc4647c4622e15037ef3f9a7746671025",
  "source_hash": "7526a32bc9a38509d30550ccc97cef05a14b8231d27ee5488c85e7bbfae05bba",
  "last_changed_at": "2026-06-06T07:57:37.966Z",
  "active_status": "active"
}

{
  "language": "en",
  "location": {
    "raw": "Boston, MA",
    "city": "Boston",
    "region": "MA",
    "country": "United States",
    "is_remote": false,
    "confidence": 0.9
  },
  "salary_max": null,
  "salary_min": null,
  "inferred_at": "2026-06-06T07:57:37.762Z",
  "launch_scope": {
    "reason": "english_us_canada",
    "included": true,
    "language": "en",
    "location": {
      "raw": "Boston, MA",
      "city": "Boston",
      "region": "MA",
      "country": "United States",
      "is_remote": false,
      "confidence": 0.9
    },
    "countries": [
      "United States"
    ]
  },
  "remote_policy": null,
  "salary_period": null,
  "workplace_type": "on_site",
  "salary_currency": null
}

{}

{
  "lists": [
    {
      "text": "Responsibilities",
      "content": "<div>\n<ul style=\"margin-top: 12.0pt; margin-bottom: .0001pt;\">\n<li style=\"margin: 12pt 0in 0.0001pt 0px; line-height: 115%; font-size: 11pt; font-family: Arial, sans-serif;\"><span style=\"font-family: 'Proxima Nova';\">Implement authentication and authorization controls across SaaS platforms, cloud infrastructure, and internal applications</span></li>\n<li style=\"margin: 0in 0in 0in 0px; line-height: 115%; font-size: 11pt; font-family: Arial, sans-serif;\"><span style=\"font-family: 'Proxima Nova';\">Configure and maintain SSO, MFA, conditional access policies, and federation integrations</span></li>\n<li style=\"margin: 0in 0in 0in 0px; line-height: 115%; font-size: 11pt; font-family: Arial, sans-serif;\"><span style=\"font-family: 'Proxima Nova';\">Assist with the evolution of single sign-on (SSO), multi-factor authentication (MFA), conditional access, and zero trust access models</span></li>\n<li style=\"margin: 0in 0in 0in 0px; line-height: 115%; font-size: 11pt; font-family: Arial, sans-serif;\"><span style=\"font-family: 'Proxima Nova';\">Assist in design and enforce role-based and attribute-based access control models (RBAC/ABAC) across cloud and SaaS systems</span></li>\n<li style=\"margin: 0in 0in 0in 0px; line-height: 115%; font-size: 11pt; font-family: Arial, sans-serif;\"><span style=\"font-family: 'Proxima Nova';\">Validate identity provider integrations, including application onboarding and SCIM provisioning</span></li>\n<li style=\"margin: 0in 0in 0in 0px; line-height: 115%; font-size: 11pt; font-family: Arial, sans-serif;\"><span style=\"font-family: 'Proxima Nova';\">Partner with Engineering to secure application authentication flows, API access, service-to-service authentication, and token management</span></li>\n<li style=\"margin: 0in 0in 0in 0px; line-height: 115%; font-size: 11pt; font-family: Arial, sans-serif;\"><span style=\"font-family: 'Proxima Nova';\">Harden and optimize identity provider configurations, including lifecycle management, federation, and SCIM provisioning</span></li>\n<li style=\"margin: 0in 0in 0in 0px; line-height: 115%; font-size: 11pt; font-family: Arial, sans-serif;\"><span style=\"font-family: 'Proxima Nova';\">Support AWS IAM security, including policy implementation, role configuration, cross-account access management, and identity federation</span></li>\n<li style=\"margin: 0in 0in 0in 0px; line-height: 115%; font-size: 11pt; font-family: Arial, sans-serif;\"><span style=\"font-family: 'Proxima Nova';\">Implement privileged access and identity lifecycle controls, including provisioning, deprovisioning, access reviews, entitlement governance, least privilege enforcement, and just-in-time access mechanisms</span></li>\n<li style=\"margin: 0in 0in 0in 0px; line-height: 115%; font-size: 11pt; font-family: Arial, sans-serif;\"><span style=\"font-family: 'Proxima Nova';\">Secure APIs, service accounts, and non-human identities used in automation and CI/CD workflows</span></li>\n<li style=\"margin: 0in 0in 0in 0px; line-height: 115%; font-size: 11pt; font-family: Arial, sans-serif;\"><span style=\"font-family: 'Proxima Nova';\">Implement and improve identity monitoring and detection capabilities, including anomaly detection, session risk analysis, and identity threat response</span></li>\n<li style=\"margin: 0in 0in 0in 0px; line-height: 115%; font-size: 11pt; font-family: Arial, sans-serif;\"><span style=\"font-family: 'Proxima Nova';\">Partner with GRC to support identity-related audits, evidence collection, and control validation across frameworks such as ISO 27001, SOC 2, PCI DSS, and GDPR</span></li>\n<li style=\"margin: 0in 0in 12pt 0px; line-height: 115%; font-size: 11pt; font-family: Arial, sans-serif;\"><span style=\"font-family: 'Proxima Nova';\">Contribute to incident response efforts involving identity compromise, credential abuse, or unauthorized access events</span></li>\n\n</ul></div>"
    },
    {
      "text": "Qualifications",
      "content": "<div>\n<ul style=\"margin-top: 12.0pt; margin-bottom: .0001pt;\">\n<li style=\"margin: 12pt 0in 0.0001pt 0px; line-height: 115%; font-size: 11pt; font-family: Arial, sans-serif;\"><span style=\"font-family: 'Proxima Nova';\">3+ years of experience in IAM engineering or identity architecture</span></li>\n<li style=\"margin: 0in 0in 0in 0px; line-height: 115%; font-size: 11pt; font-family: Arial, sans-serif;\"><span style=\"font-family: 'Proxima Nova';\">Hands-on experience with enterprise identity providers such as Okta, Azure AD, or similar enterprise IAM platforms</span></li>\n<li style=\"margin: 0in 0in 0in 0px; line-height: 115%; font-size: 11pt; font-family: Arial, sans-serif;\"><span style=\"font-family: 'Proxima Nova';\">Strong understanding of modern authentication and authorization protocols, including SAML, OAuth 2.0, OIDC, SCIM, and JWT</span></li>\n<li style=\"margin: 0in 0in 0in 0px; line-height: 115%; font-size: 11pt; font-family: Arial, sans-serif;\"><span style=\"font-family: 'Proxima Nova';\">Experience designing and implementing RBAC and/or ABAC models in cloud-native environments</span></li>\n<li style=\"margin: 0in 0in 0in 0px; line-height: 115%; font-size: 11pt; font-family: Arial, sans-serif;\"><span style=\"font-family: 'Proxima Nova';\">Strong knowledge of AWS IAM, cross-account access models, and cloud identity federation</span></li>\n<li style=\"margin: 0in 0in 0in 0px; line-height: 115%; font-size: 11pt; font-family: Arial, sans-serif;\"><span style=\"font-family: 'Proxima Nova';\">Experience securing APIs, service accounts, machine identities, and CI/CD authentication workflows</span></li>\n<li style=\"margin: 0in 0in 0in 0px; line-height: 115%; font-size: 11pt; font-family: Arial, sans-serif;\"><span style=\"font-family: 'Proxima Nova';\">Experience with privileged access management concepts and least privilege enforcement</span></li>\n<li style=\"margin: 0in 0in 0in 0px; line-height: 115%; font-size: 11pt; font-family: Arial, sans-serif;\"><span style=\"font-family: 'Proxima Nova';\">Experience automating IAM tasks using scripting or infrastructure-as-code tools (i.e., Python, Terraform, or similar infrastructure-as-code tooling)</span></li>\n<li style=\"margin: 0in 0in 0in 0px; line-height: 115%; font-size: 11pt; font-family: Arial, sans-serif;\"><span style=\"font-family: 'Proxima Nova';\">Familiarity with identity threat detection and response methodologies</span></li>\n<li style=\"margin: 0in 0in 12pt 0px; line-height: 115%; font-size: 11pt; font-family: Arial, sans-serif;\"><span style=\"font-family: 'Proxima Nova';\">Bachelor’s degree in Computer Science, Cybersecurity, or related field; relevant certifications (i.e., CISSP, CISM, GIAC, AWS Security Specialty, Okta Certified Professional) or equivalent practical experience will also be considered</span></li>\n\n</ul></div>"
    }
  ],
  "country": "US",
  "createdAt": 1773331637157,
  "updatedAt": null,
  "categories": {
    "team": "Information Security",
    "location": "Boston, MA",
    "allLocations": [
      "Boston, MA"
    ]
  },
  "salaryRange": null,
  "workplaceType": "onsite"
}