{"id":3889725,"url":"https://alion.io/job/backblaze-identity-access-management-iam-engineer","title":"Identity & Access Management (IAM) Engineer","company":{"id":37551,"name":"Backblaze","domain":"backblaze.com","url":"https://alion.io/company/backblaze","size_band":"201-500","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":{"grade":"A","score":91,"open_postings":11,"ghost_share":0,"stale_share":0.364,"repost_share":0,"time_to_fill_p50_days":55,"computed_at":"2026-11-08T05:47:12Z"}},"role":"Security","role_family":"Security","seniority":null,"employment_type":null,"work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"board_field","remote_working_hours":null,"hiring_geo_confidence":"structured","locations":[],"countries":[],"hiring_countries":["US"],"hiring_countries_total":1,"salary":{"min":155000,"max":195000,"currency":"USD","period":"year","gross":null,"usd_annual":195000},"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":true,"technologies":[{"name":"AI Agents","optional":false},{"name":"IAM","optional":false},{"name":"Least Privilege","optional":false},{"name":"PKI","optional":false}],"status":"live","first_seen_at":"2026-11-06T19:27:44Z","employer_posted_date":"2026-11-06","last_verified_at":"2026-11-08T14:28:40Z","board_verified":true,"closed_at":null,"days_open":1,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":1},"description":"About Backblaze\nBackblaze is the object storage leader in the open cloud movement, fueling customersuccess with cloud storage built purposefully to unlock budgets, unburden administrators, and unleash innovators. Together with our partners, we’re helping customers break free from the restrictive, overpriced legacy solutions that hold them back, and blaze forward with the full power of the open cloud in their hands. Founded in 2007, we scaled the business with less than $3 million in outside funding until 2021, when we did a traditional IPO on the Nasdaq stock exchange. Today, Backblaze generates over $100m in revenue and is the leading specialized storage cloud - managing over three billion gigabytes of data storage for 500K+ customers in 175+ countries, including businesses, developers, IT professionals, and individuals.\nRole Overview\nThe Identity & Access Management (IAM) Engineer designs, implements, and operates identity and access capabilities for human users, non-human identities, workloads, devices, services, and AI agents. The role focuses on the subject side of access control-identity, authentication, roles, groups, entitlements, and privileges-with an emphasis on least privilege, separation of duties, strong authentication, automated lifecycle management, and short-lived credentials.\nThe engineer partners with others across the organization to ensure applications, infrastructure, and services appropriately mediate access, separate security domains, minimize unnecessary sharing, and limit common mechanisms that could increase privilege or blast radius.\nKey Responsibilities\nDesign and operate authentication, authorization, federation, SSO, MFA, RBAC/ABAC, PAM, conditional access, policy-based authorization, just-in-time access, continuous verification, and privileged-access capabilities.\nEngineer roles, groups, entitlements, and privilege assignments around least privilege and separation of duties.\nAutomate identity provisioning, access reviews, privilege changes, revocation, and deprovisioning.\nImplement phishing-resistant MFA, cryptographically bound authentication, and strong identity assurance across enrollment, authentication, federation, and recovery.\nGovern service accounts, machine and device identities, workloads, automated processes, APIs, and AI-agent identities.\nImplement short-lived workload and agent identities using federation, certificates, and modern workload-identity approaches while reducing reliance on persistent secrets.\nPartner with architects, engineers, and resource owners to ensure access is efficiently mediated and designs minimize excessive privilege, unnecessary sharing, and cross-domain exposure.\nMonitor identity posture and partner with Security Operations to investigate identity threats and rapidly revoke compromised access.\nQualifications\nHands-on experience engineering enterprise IAM systems and integrations.\nStrong knowledge of authentication, authorization, federation, identity lifecycle management, role/group design, separation of duties, and least privilege.\nKnowledge of phishing-resistant MFA, cryptographic authentication, identity proofing, federation, and modern identity assurance practices.\nExperience managing human and non-human identities, including service, machine, workload, or device identities.\nExperience automating identity processes using APIs, scripting, or Infrastructure-as-Code.\nUnderstanding of PKI, secrets management, short-lived credentials, workload identity federation, and technologies such as OIDC, OAuth, and SPIFFE/SPIRE.\nAbility to reason about identity and authorization across distributed systems and collaborate with architects and engineers on secure access design.\nBackblaze Perks: \nHealthcare for family, including dental and vision\nCompetitive compensation and 401K \nRSU grants for full-time employees \nESPP program \nFlexible vacation policy \nMaternity & paternity leave \nMacBook Pro to use for work plus a generous stipend to personalize your workstation \nChildcare bonus (human children only) \nFertility treatment and support \nLearning & development program \nCommuter benefits \nCulture that supports a healthy work-life balance \nTo provide greater transparency to candidates, we share base pay ranges for all US-based job postings regardless of state. We set standard base pay ranges for all roles based on function, level, and country location, benchmarked against similar-stage growth companies. Final offer amounts are determined by multiple factors, including candidate location, skills, depth of work experience, and relevant licenses/credentials, and may vary from the amounts listed below.\nThe base pay range for this position is $155,000 - $195,000\nAt Backblaze, we value being fair and good to our customers, partners, and employees. That’s why diversity, equity, and inclusion are at the core of our values. We are committed to fostering a workforce where all employees feel a sense of belonging regardless of race, ethnicity, nationality, gender, sexual orientation, age, religion, socio-economic status, ability, veteran status, and education. We believe that our dedication to cultivating a diverse workspace not only allows us to better serve our customers in over 175 countries, but further reinforces our commitment to doing the right thing. We are proud to be an Equal Opportunity Employer.\nTo understand more about the data we collect and process as part of your application, please view our Backblaze Employee Privacy Notice.","description_format":"text","description_chars":5485,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["401k plan","Apple Macbook","Equity","Flexible vacation policy"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Digital Storage","Cloud Storage & File Sharing","Backup & Disaster Recovery"],"lifecycle":[{"event":"open","at":"2026-11-06T20:50:12Z"}],"visa":[{"country":"US","licensed_sponsor":true,"adverts_offering_sponsorship_24m":0,"sanctioned_now":false,"evidence":"H-1B filings in 12 months: 1 · green card filings: 3","filings_12m":1,"filings_prev_12m":3,"green_card_filings_12m":3,"median_offered_wage_usd":137500,"route":null,"cap_exempt":false,"checked_at":"2026-11-08T10:45:15+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)","US Department of Labor: PERM disclosure data (green cards)"],"filings_for_role_12m":0}],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":1,"expected_fill_days":55,"reasons":["conf:3","velocity","win:early"],"computed_at":"2026-11-08T05:47:12Z"},"pay":{"stated_usd_annual":195000,"is_top_pay":true},"html_url":"https://alion.io/job/backblaze-identity-access-management-iam-engineer","json_url":"https://alion.io/job/backblaze-identity-access-management-iam-engineer.json","meta":{"generated_at":"2026-11-08T18:15:13Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":38280,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-09T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":37551},"rest":"https://alion.io/mcp/rest/get_company?id=37551"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fbackblaze-identity-access-management-iam-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":2,"usd":0.2},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fbackblaze-identity-access-management-iam-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fbackblaze-identity-access-management-iam-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/backblaze-identity-access-management-iam-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fbackblaze-identity-access-management-iam-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3889725}},{"tool":"search_jobs","arguments":{"company":"backblaze.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3889725},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}