{"id":1753536,"url":"https://alion.io/job/argano-senior-full-stack-engineer-iam","title":"Senior Full Stack Engineer – IAM","company":{"id":1891210,"name":"Argano","domain":"argano.com","url":"https://alion.io/company/argano","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Oracle","truth_index":{"grade":"B","score":83,"open_postings":9,"ghost_share":0,"stale_share":0.667,"repost_share":0,"time_to_fill_p50_days":39,"computed_at":"2026-10-14T06:34:16Z"}},"role":"Backend","role_family":"Backend","seniority":"senior","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":126000,"max_usd":231000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":3030},"experience_years_min":8,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Active Directory","optional":false},{"name":"Angular","optional":false},{"name":"ASP.NET Core","optional":false},{"name":"Azure","optional":false},{"name":"C#","optional":false},{"name":"CI/CD","optional":false},{"name":"Git","optional":false},{"name":"IAM","optional":false},{"name":"ITSM","optional":false},{"name":"LDAP","optional":false},{"name":"Least Privilege","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"PowerShell","optional":false},{"name":"Rest API","optional":false},{"name":"SQL","optional":false},{"name":"TypeScript","optional":false},{"name":"Bicep","optional":true},{"name":"HashiCorp Vault","optional":true},{"name":"JavaScript","optional":true},{"name":"Kubernetes","optional":true},{"name":"SOC 2","optional":true},{"name":"Terraform","optional":true},{"name":"Vault","optional":true}],"status":"live","first_seen_at":"2026-10-03T02:13:47Z","employer_posted_date":"2026-10-03","last_verified_at":"2026-10-14T11:07:51Z","board_verified":true,"closed_at":null,"days_open":11,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":11},"description":"Description:\nThe Identity & Access Management (IAM) - Directory Services team is responsible for building and operating a secure, standardized, and automated enterprise identity foundation across The Walt Disney Company. We provide the authoritative directory platforms that enable authentication, authorization, and access governance for both human and non-human identities.\nOur mission is to move identity governance from manual, reactive processes to automated, policy-driven enforcement, ensuring identities are secure, compliant, and healthy by default across their lifecycle. We partner closely with security, infrastructure, and application teams to eliminate legacy risk, reduce operational toil, and enable modern, cloud-first identity capabilities at enterprise scale.\nWhat You’ll Do:\nApplication & Automation Engineering\nDesign, build, and maintain secure, enterprise-scale web applications using .NET (C#) on the backend and Angular on the frontend.\nDevelop and deliver RESTful APIs and microservices that integrate with Active Directory, Entra ID, and enterprise identity platforms.\nBuild self-service portals and workflows that replace manual identity operations with automated, policy-driven processes.\nWrite clean, testable, well-documented code and participate in code reviews, CI/CD pipelines, and automated testing.\nNon-Human Identity (NHI) Onboarding & Management\nAutomate the onboarding, lifecycle, and decommissioning of non-human identities - service accounts, managed identities, application registrations, certificates, and secrets.\nBuild tooling for NHI discovery, ownership attestation, credential rotation, and expiry notification.\nImplement guardrails and approval workflows that ensure every NHI has a valid owner, justification, and least-privilege entitlement set.\nAD Group Management & Access Automation\nDevelop automation for Active Directory group lifecycle management - creation, naming standards, nesting rules, ownership, membership review, and cleanup of stale or orphaned groups.\nImplement RBAC-based, request-and-approve access models with time-bound and just-in-time membership patterns.\nIntegrate group management with Entra ID, ITSM, and identity governance platforms.\nGovernance, Compliance & Reporting Automation\nAutomate governance and compliance policy enforcement for Active Directory and Entra ID, including drift detection, automated remediation, and exception handling.\nBuild dashboards and compliance reporting that give owners, auditors, and leadership continuous visibility into identity posture.\nTranslate security standards and audit requirements into codified, testable policy checks.\nCollaboration & Delivery\nPartner with identity engineers, security architects, and application teams to gather requirements and deliver iteratively.\nProduce runbooks, technical documentation, and knowledge transfer materials so solutions remain supportable beyond the contract term.\nWork Location: This is an onsite position based in Burbank, California. Candidates must be able to work onsite.\nRequired Qualifications & Skills:\n8+ years of professional software engineering experience building and shipping web applications.\nStrong, hands-on expertise in:\n.NET / .NET Core, C#, ASP.NET Web API\nAngular (modern versions), TypeScript, HTML/CSS\nREST API design, SQL Server / relational data modeling\nPowerShell scripting for identity and directory automation\nDemonstrated experience automating against Active Directory and/or Microsoft Entra ID (Azure AD) - LDAP, Microsoft Graph API, directory objects, groups, and service principals.\nExperience with Git-based source control, CI/CD pipelines, and automated testing.\nAbility to work independently in a complex enterprise environment and deliver production-ready outcomes within a fixed contract timeline.\nStrong communication skills, with the ability to explain technical design to both engineers and non-technical stakeholders.\nPreferred Qualifications:\nExperience building identity governance, IAM, or access-request automation solutions.\nFamiliarity with non-human identity management, secrets management (e.g., Azure Key Vault, HashiCorp Vault), and certificate lifecycle automation.\nExperience with Azure cloud services, Azure Functions, Logic Apps, or equivalent serverless automation.\nExposure to PIM/PAM platforms and privileged access models.\nExperience with compliance and audit-driven engineering (SOX, PCI, SOC 2, or similar control environments).\nWorking knowledge of containers, Kubernetes, or infrastructure-as-code (Terraform, Bicep).\nRelevant Microsoft certifications (e.g., SC-300, AZ-204, AZ-500).\nRequired Education:\nBachelor’s degree in Computer Science, Information Systems, Software, Electrical or Electronics Engineering, or comparable field of study, and/or equivalent work experience","description_format":"text","description_chars":4801,"description_truncated":false,"requirements":{"experience_years_min":8,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Information Technology","Professional Services","IT Consulting & Digital Transformation"],"lifecycle":[{"event":"open","at":"2026-10-03T09:51:07Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"H-1B filings in 12 months: 20 · green card filings: 4","filings_12m":20,"filings_prev_12m":34,"green_card_filings_12m":4,"median_offered_wage_usd":156667,"route":null,"cap_exempt":false,"checked_at":"2026-10-03T21:08:04+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)","US Department of Labor: PERM disclosure data (green cards)"],"filings_for_role_12m":7}],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":11,"expected_fill_days":39,"reasons":["conf:4","velocity","win:early"],"computed_at":"2026-10-14T06:34:16Z"},"pay":null,"html_url":"https://alion.io/job/argano-senior-full-stack-engineer-iam","json_url":"https://alion.io/job/argano-senior-full-stack-engineer-iam.json","meta":{"generated_at":"2026-10-14T14:07:32Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":17305,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-15T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1891210},"rest":"https://alion.io/mcp/rest/get_company?id=1891210"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fargano-senior-full-stack-engineer-iam"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fargano-senior-full-stack-engineer-iam"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fargano-senior-full-stack-engineer-iam"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/argano-senior-full-stack-engineer-iam\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fargano-senior-full-stack-engineer-iam"}]}