IAM Operations Engineer

IAM Operation Engineer

About the Role

We are seeking a skilled IAM Operations Engineer to manage and maintain Identity and Access Management (IAM) systems and processes within our organization. The ideal candidate will ensure the secure and efficient handling of user identities, authentication, authorization, and governance, while supporting compliance and security policies. This role involves troubleshooting IAM-related issues, enforcing access controls, and improving overall IAM operations.

What the Candidate Will Need / Bonus Points

---- What the Candidate Will Do ----

1. User Lifecycle Management: Manage provisioning, de-provisioning, and access control for user accounts across various systems.
2. Access Controls: Implement, monitor, and maintain Role-Based Access Control (RBAC), Least Privilege Access (LPA), and Just-in-Time (JIT) access models.
3. Authentication & Authorization: Administer Single Sign-On (SSO), Multi-Factor Authentication (MFA), and Privileged Access Management (PAM) solutions.
4. Incident Response: Investigate and resolve IAM-related incidents, including unauthorized access, account lockouts, and security breaches.
5. Compliance & Auditing: Ensure adherence to regulatory frameworks (e.g., SOX, GDPR, HIPAA) by performing regular audits, access reviews, and maintaining IAM documentation.
6. System Administration: Maintain and configure IAM tools and platforms such as Active Directory, Okta, SailPoint, Duo, OneLogin, Azure AD, or other IAM solutions.
7. Automation & Optimization: Develop scripts and workflows to automate IAM processes, reducing manual efforts and improving efficiency.
8. Cloud IAM Solutions: Design, implement, and manage Cloud IAM solutions across AWS IAM, Azure AD, Oracle Cloud and Google Cloud IAM.
9. Collaboration & Support: Work closely with IT, Security, and Compliance teams to align IAM policies with business needs and security best practices.
10. Reporting & Metrics: Generate reports on user access, authentication events, and security incidents for management review.

---- Basic Qualifications ----

1. Bachelor’s degree in Computer Science, Information Security, or a related field (or equivalent work experience).
2. 4+ years of experience in IAM operations, security administration, or IT support.
3. Strong understanding of IAM principles, directory services (Active Directory, LDAP), and access control models.
4. Experience with IAM tools such as Okta, SailPoint, CyberArk, Azure AD, or similar platforms.
5. Knowledge of authentication protocols (SAML, OAuth, OIDC, Kerberos, RADIUS).
6. Familiarity with scripting languages (PowerShell, Python, Bash) for automation.
7. Experience with cloud IAM (AWS IAM, Azure AD, Oracle Cloud, Google IAM)
8. Understanding of regulatory compliance (SOX, HIPAA, GDPR, NIST).
9. Strong analytical, troubleshooting, and problem-solving skills.
10. Excellent communication and collaboration abilities.

---- Preferred Qualifications ----

1. 6+ years of experience in Identity and Access Management
2. Microsoft Certified: Security, Compliance, and Identity Fundamentals
3. Okta Certified Professional
4. SailPoint Certified IdentityNow Engineer

We welcome people from all backgrounds who seek the opportunity to help build a future where everyone and everything can move independently. If you have the curiosity, passion, and collaborative spirit, work with us, and let’s move the world forward, together.

Offices continue to be central to collaboration and Uber’s cultural identity. Unless formally approved to work fully remotely, Uber expects employees to spend at least half of their work time in their assigned office. For certain roles, such as those based at green-light hubs, employees are expected to be in-office for 100% of their time. Please speak with your recruiter to better understand in-office expectations for this role.

*Accommodations may be available based on religious and/or medical conditions, or as required by applicable law. To request an accommodation, please reach out to accommodations@uber.com.