{"id":943948,"url":"https://alion.io/job/braze-lead-iam-engineer","title":"Lead IAM Engineer","company":{"id":3574,"name":"Braze","domain":"braze.com","url":"https://alion.io/company/braze","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":{"grade":"A","score":89,"open_postings":7,"ghost_share":0,"stale_share":0.429,"repost_share":0,"time_to_fill_p50_days":49,"computed_at":"2026-10-31T05:58:55Z"}},"role":"Security","role_family":"Security","seniority":"lead","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"explicit","locations":["New York, United States","Austin, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":91000,"max":142000,"currency":"USD","period":"year","gross":null,"usd_annual":142000},"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":true,"technologies":[{"name":"GitHub","optional":false},{"name":"Google Workspace","optional":false},{"name":"IAM","optional":false},{"name":"Least Privilege","optional":false},{"name":"Okta","optional":false},{"name":"Platform Engineering","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"Slack","optional":false},{"name":"Terraform","optional":false},{"name":"Zero Trust","optional":false},{"name":"AI Agents","optional":true},{"name":"CI/CD","optional":true},{"name":"Git","optional":true},{"name":"Zscaler","optional":true}],"status":"live","first_seen_at":"2026-09-15T19:37:39Z","employer_posted_date":"2026-09-30","last_verified_at":"2026-10-31T23:07:19Z","board_verified":true,"closed_at":null,"days_open":46,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":46},"description":"At Braze, we have found our people. We’re a genuinely approachable, exceptionally kind, and intensely passionate crew.\nWe seek to ignite that passion by setting high standards, championing teamwork, and creating work-life harmony as we collectively navigate rapid growth on a global scale while striving for greater equity and opportunity - inside and outside our organization.\nTo flourish here, you must be prepared to set a high bar for yourself and those around you. There is always a way to contribute: Acting with autonomy, having accountability and being open to new perspectives are essential to our continued success.\nOur deep curiosity to learn and our eagerness to share diverse passions with others gives us balance and injects a one-of-a-kind vibrancy into our culture.\nIf you are driven to solve exhilarating challenges and have a bias toward action in the face of change, you will be empowered to make a real impact here, with a sharp and passionate team at your back. If Braze sounds like a place where you can thrive, we can’t wait to meet you.\nWHAT YOU'LL DO\nWe’re seeking a Lead IAM Engineer to own the technical direction and evolution of our enterprise identity and access management strategy. In this senior individual contributor role, you’ll architect, build, and continuously improve a secure, scalable, and automated identity ecosystem centered on Okta, identity lifecycle, access governance, and automation.\nYou’ll partner across Information Systems, Security, Engineering, Financial, and People Systems to ensure employees, contractors, partners, applications, and services have the right access at the right time while maintaining strong security, governance, reliability, and user experience.\nA major focus of this role will be improving onboarding, access-change, and offboarding reliability, reducing manual administration, strengthening access governance, and expanding automation across our identity ecosystem. You’ll help modernize how identity configuration changes are managed through APIs, infrastructure as code, automated workflows, and repeatable engineering practices.\nYou’ll also help strengthen the broader Identity & Access capability by developing reusable patterns, improving documentation and operational resilience, mentoring other engineers, and reducing key-person dependencies across critical identity services.\nIf you’re an experienced IAM engineer with deep Okta expertise who enjoys both defining architecture and getting hands-on with automation, integrations, governance, and platform engineering, we’d love to meet you.\nMain responsibilities:\nOwn the technical roadmap and architecture for enterprise Identity & Access Management, with Okta as a core identity platform\nArchitect and continuously improve Okta capabilities across SSO, authentication, lifecycle automation, Workflows, Identity Governance, and Access Requests\nDesign reliable onboarding, role-change, and offboarding identity processes for employees, contractors, partners, and other user populations\nBuild and improve integrations between Okta and systems such as Workday, Google Workspace, Slack, GitHub, Atlassian, MDM, and other enterprise applications\nDrive identity automation using Okta Workflows, APIs, scripting, Terraform, and other engineering tools\nModernize how identity configuration changes are made through infrastructure as code, automated validation, peer review, and controlled deployment where appropriate\nLead identity governance initiatives including access reviews, access requests, role-based access, approval workflows, entitlement management, and least-privilege controls\nDesign and implement authentication, federation, and provisioning solutions using SAML, OIDC, OAuth, SCIM, MFA, and related identity standards\nPartner with Security on authentication standards, privileged access, identity risk, and zero-trust initiatives\nSupport and continuously improve identity-related SOX controls, audit evidence, access reviews, and remediation processes\nDesign identity solutions for partners, resellers, service accounts, machine identities, and other non-standard access needs\nServe as a senior escalation point for complex identity issues and lead root cause analysis when identity or lifecycle processes fail\nIdentify recurring administrative or support work and create automation, self-service, runbooks, or delegated workflows to reduce manual intervention\nEstablish repeatable engineering standards for how identity changes are designed, tested, deployed, and documented\nMentor other engineers and help build broader IAM expertise and independent backup coverage across the team\nEvaluate emerging identity capabilities and recommend where they can improve security, reliability, scalability, or user experience\nWHO YOU ARE\nDeep hands-on expertise with Okta in a complex enterprise environment, including SSO, Lifecycle Management, Authentication, MFA, Workflows, and Identity Governance\nAdvanced understanding of SAML, OIDC, OAuth 2.0, SCIM, federation, provisioning, authentication, and authorization\nExperience automating employee onboarding, role changes, and offboarding using an HRIS such as Workday as the authoritative source for employee data\nStrong experience with identity governance including access reviews, entitlement management, access requests, role-based access control, and least privilege\nStrong scripting and automation skills using Python, PowerShell, or similar languages\nStrong API integration experience and the ability to connect identity platforms with broader enterprise systems\nExperience with Terraform or another infrastructure-as-code framework\nExperience turning manual identity administration into scalable, automated, and auditable processes\nExperience supporting IAM controls in a SOX-regulated or similarly controlled environment\nProven ability to lead complex cross-functional IAM initiatives without requiring formal people-management authority\nStrong communication skills with the ability to explain identity architecture, technical decisions, and risk to both technical and non-technical audiences\nBonus Points:\nOkta certifications such as Okta Certified Administrator, Consultant, Developer, or Identity Governance credentials\nExperience managing Okta configuration through Terraform or similar tooling\nExperience using Git-based workflows or CI/CD practices to manage identity or infrastructure changes\nFamiliarity with adjacent enterprise platforms such as Google Workspace, Slack, GitHub, Atlassian, Iru, Kandji, Jamf, Zscaler, or 1Password\nExperience with partner, reseller, B2B, or external identity architectures\nExperience managing service accounts, machine identities, workload identities, or other non-human access\nExperience automating audit evidence or identity governance controls\nFor candidates based in the United States, the pay range for this position at the start of employment is expected to be between $91,000 and $142,000/year, with an expected On Target Earnings (OTE) between $101,000 and $158,000/year (including bonus or commission). Your exact offer may vary depending on multiple individualized factors, including market location, job-related knowledge, skills, and experience. In addition to cash compensation, this role qualifies for a comprehensive Total Rewards package that includes equity grants of restricted stock (RSUs) so that you will own a piece of our company.\nWHAT WE OFFER\nBraze benefits vary by location, and we encourage you to review our specific benefits offerings for each country at here. More details on benefits plans will be provided if you receive an offer of employment.\nFrom offering comprehensive benefits to fostering hybrid ways of working, we've got you covered so you can prioritize work-life harmony. Braze offers benefits such as:\nCompetitive compensation that may include equity\nRetirement and Employee Stock Purchase Plans\nFlexible paid time off\nComprehensive benefit plans covering medical, dental, vision, life, and disability\nFamily services that include fertility benefits and equal paid parental leave\nProfessional development supported by formal career pathing, learning platforms, and a yearly learning stipend\nA curated in-office employee experience, designed to foster community, team connections, and innovation\nOpportunities to give back to your community, including an annual company-wide Volunteer Week and donation matching\nEmployee Resource Groups that provide supportive communities within Braze\nCollaborative, transparent, and fun culture recognized as a Great Place to Work®\nABOUT BRAZE\nBraze is the leading customer engagement platform that empowers brands to Be Absolutely Engaging™ Braze helps brands deliver great customer experiences that drive value both for consumers and for their businesses. Built on a foundation of composable intelligence, BrazeAI™ allows marketers to combine and activate AI agents, models, and features at every touchpoint throughout the Braze Customer Engagement Platform for smarter, faster, and more meaningful customer engagement. From cross-channel messaging and journey orchestration to Al-powered decisioning and optimization, Braze enables companies to turn action into interaction through autonomous, 1:1 personalized experiences.\nThe company has repeatedly been recognized as a Leader in marketing technology by industry analysts, and was voted a G2 “Best of Marketing and Digital Advertising Software Product” in 2025.\nBraze was also named a 2025 Best Companies To Work For by U.S. News and World Report, a 2025 America’s Greatest Companies by Newsweek, and a 2025 Fortune Best Workplace in Technology™ by Great Place To Work®, among other accolades. Braze is also proudly certified as a Great Place to Work® in the U.S., the UK, Australia, and Singapore.\nThe company is headquartered in New York with offices in Austin, Berlin, Bucharest, Chicago, Dubai, Jakarta, London, Paris, San Francisco, São Paulo, Singapore, Seoul, Sydney and Tokyo.\nBRAZE IS AN EQUAL OPPORTUNITY EMPLOYER\nAt Braze, we strive to create equitable growth and opportunities inside and outside the organization.\nBuilding meaningful connections is at the heart of everything we do, and that includes our recruiting practices. We're committed to offering all candidates a fair, accessible, and inclusive experience - regardless of age, color, disability, gender identity, marital status, maternity, national origin, pregnancy, race, religion, sex, sexual orientation, or status as a protected veteran. When applying and interviewing with Braze, we want you to feel comfortable showcasing what makes you you.\nWe know that sometimes different circumstances can lead talented people to hesitate to apply for a role unless they meet 100% of the criteria. If this sounds familiar, we encourage you to apply, as we’d love to meet you\nOUR AI-POWERED BRAZE RECRUITMENT PROCESS\nAt Braze, we’re committed to a fair and transparent candidate experience. To help our recruitment teams focus on what matters most - the person behind each application - we use AI-assisted tools at certain stages of our recruitment process.\nThis includes using AI to analyze the experience, skills and qualifications in your application materials to help with screening and prioritizing candidates. Such screening may amount to a form of solely automated decision-making. We also use AI for administrative support, like scheduling and recording interviews and summarizing interview notes. Our recruiting teams remain responsible for all hiring decisions and are involved throughout the process.\nDepending on where you are located, you may have certain rights available to you in relation to Braze’s use of AI:\nTo opt out of AI-assisted review of your application, please click the “Learn More” at the end of the application form below and follow the instructions before submitting your application. Please note, if you apply to multiple roles at Braze, you will need to opt out in relation to each application.\nTo exercise other types of rights, such...","description_format":"text","description_chars":13468,"description_truncated":true,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Equity","Parental leave","Professional development","Retirement plans"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Marketing Automation","Email Marketing"],"lifecycle":[{"event":"open","at":"2026-09-15T19:45:00Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"H-1B filings in 12 months: 21 · green card filings: 6","filings_12m":21,"filings_prev_12m":16,"green_card_filings_12m":6,"median_offered_wage_usd":151944,"route":null,"cap_exempt":false,"checked_at":"2026-10-29T16:27:21+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)","US Department of Labor: PERM disclosure data (green cards)"],"filings_for_role_12m":3}],"liveness":{"score":49,"band":"ok","label":"Likely open","p_open":1,"p_active":0.824,"p_room":0.6,"age_days":45,"expected_fill_days":49,"reasons":["conf:1","velocity","win:late","crowd:brand"],"computed_at":"2026-10-31T05:58:55Z"},"pay":{"stated_usd_annual":142000,"is_top_pay":false},"html_url":"https://alion.io/job/braze-lead-iam-engineer","json_url":"https://alion.io/job/braze-lead-iam-engineer.json","meta":{"generated_at":"2026-11-01T00:51:45Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":1503,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-02T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":3574},"rest":"https://alion.io/mcp/rest/get_company?id=3574"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fbraze-lead-iam-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fbraze-lead-iam-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fbraze-lead-iam-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/braze-lead-iam-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fbraze-lead-iam-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":943948}},{"tool":"search_jobs","arguments":{"company":"braze.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":943948},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}