{"id":3376950,"url":"https://alion.io/job/chewy-iam-engineer-iii-identity-access-management","title":"IAM Engineer III, Identity & Access Management","company":{"id":709617,"name":"Chewy","domain":"chewy.com","url":"https://alion.io/company/chewy-2","size_band":"501-1000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"A","score":88,"open_postings":13,"ghost_share":0,"stale_share":0.462,"repost_share":0,"time_to_fill_p50_days":23,"computed_at":"2026-10-31T05:58:55Z"}},"role":"Security","role_family":"Security","seniority":"middle","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Minneapolis, United States","Bellevue, United States","United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":118500,"max":189500,"currency":"USD","period":"year","gross":null,"usd_annual":189500},"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":true,"technologies":[{"name":"AI Agents","optional":false},{"name":"IAM","optional":false},{"name":"Okta","optional":false},{"name":"Least Privilege","optional":true},{"name":"ServiceNow","optional":true}],"status":"live","first_seen_at":"2026-10-27T00:00:00Z","employer_posted_date":"2026-10-27","last_verified_at":"2026-10-31T03:20:22Z","board_verified":true,"closed_at":null,"days_open":4,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":4},"description":"Job Description:\nOur Opportunity\nChewy's IAM team keeps the right people, services, and AI agents connected to the right access, from someone's first day to their last. As an IAM Engineer III, a senior individual-contributor role, you'll set technical direction for our identity platforms, primarily SailPoint Identity Security Cloud alongside Okta, and own the big projects that make whole categories of manual work disappear.\nThis isn't a ticket-queue role. Your success is measured by the work you eliminate: request types automated away, manual steps removed, and cycle times cut, all while keeping strong controls and clean audit evidence. You'll mentor IAM Engineer I and II staff, lead design reviews, and help shape how Chewy governs non-human identities, including AI agents.\nWhat You'll Own in Your First Year\nModernize the joiner experience. Redesign how new hires move from offer to day one: accounts ready ahead of time, the right access exactly on the start date, and nothing early.\nAutomate birthright access at scale. Turn manual license and access requests into rule-based roles that grant and remove access on their own as people join, move, and leave.\nStrengthen the leaver and contractor lifecycle. Make sure access ends exactly when employment or a contract ends, with proof.\nOnboard and run SailPoint Machine Identity Security (MIS) and Data Access Security (DAS), extending governance to service accounts, machine identities, and sensitive data access.\nConsolidate access onto modern, requestable patterns, working with our identity provider experts to move app access off legacy directory groups.\nBuild safe automation, with AI where it helps, that removes manual work, keeps human approval where it matters, and leaves clear evidence for audit.\nWhat You'll Do\nOwn IAM projects end to end: define the problem and the starting numbers, design the fix, lead the build, roll it out, and prove the result.\nHunt down repeat work. Turn recurring tickets, incidents, and review findings into automation or self-service that removes them for good.\nSet direction and design solutions in SailPoint ISC: lifecycle, provisioning, correlation, connectors, transforms, workflows, and roles, with safe change practices (testing, staged rollout, rollback).\nPartner with our Okta experts on application access, lifecycle, and provisioning patterns.\nOwn the technical debt list for your area and clear the highest-value items first.\nLead root-cause analysis for serious failures and turn each into a lasting fix.\nMentor IAM Engineer I and II staff through design reviews and pairing.\nGovern non-human identities (service accounts, workloads, AI agents) and take part in the on-call rotation for critical identity services.\nBonus (Nice to Have)\nSailPoint ISC certification (e.g. ISC Engineer) and/or Okta Certified Professional or Administrator\nExperience building AI-assisted automation or agent-based workflows, with human approval steps and audit-ready evidence\nExperience governing non-human identities: service accounts, workload identities, or AI agent credentials\nExperience with HR-driven lifecycle (Workday as the source of truth) and birthright role design at scale\nExperience integrating identity with service management (ServiceNow catalog and request flows)\nBackground in audit and control evidence: certifications, separation of duties, least privilege\nThe base salary range for this role is $118,500 - $189,500.00.The specific salary offered to a candidate may be influenced by a variety of factors including but not limited to the candidate’s relevant experience, education, and work location. In addition, this position is eligible for 401k and a new hire and annual equity grant. C08+ positions may also be eligible for annual bonus.\n\nWe offer different types of insurance and benefits, such as medical/Rx, vision, dental, life, disability, hospital indemnity, critical illness, and accident. We offer parental leave, family services benefits, backup dependent care, flexible spending accounts, telemedicine, pet adoption reimbursement, employee assistance program, and many discounts including 10% off pet insurance and 20% off at Chewy.com.\nExempt salary team members have unlimited PTO, subject to manager approval. Team members will receive six paid holidays per year. Team members may be eligible for paid sick and family leave in compliance with applicable state and local regulations.\nChewy is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, ancestry, national origin, gender, citizenship, marital status, religion, age, disability, gender identity, results of genetic testing, veteran status, as well as any other legally-protected characteristic. If you have a disability under the Americans with Disabilities Act or similar law, and you need an accommodation during the application process or to perform these job requirements, or if you need a religious accommodation, please contact .\nTo access Chewy's California CPRA Job Applicant Privacy Policy, please click here.","description_format":"text","description_chars":5097,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["401k plan","Equity","Parental leave","Unlimited PTO"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["E-commerce Platforms","Pet Food, Supplies & Care"],"lifecycle":[{"event":"open","at":"2026-10-28T03:06:04Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"H-1B filings in 12 months: 184 · green card filings: 110","filings_12m":184,"filings_prev_12m":257,"green_card_filings_12m":110,"median_offered_wage_usd":149813,"route":null,"cap_exempt":false,"checked_at":"2026-10-29T16:27:21+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)","US Department of Labor: PERM disclosure data (green cards)"],"filings_for_role_12m":12}],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":4,"expected_fill_days":23,"reasons":["conf:2","velocity","win:early","comp:brand"],"computed_at":"2026-10-31T05:58:55Z"},"pay":{"stated_usd_annual":189500,"is_top_pay":true},"html_url":"https://alion.io/job/chewy-iam-engineer-iii-identity-access-management","json_url":"https://alion.io/job/chewy-iam-engineer-iii-identity-access-management.json","meta":{"generated_at":"2026-10-31T12:23:35Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":19134,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-01T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":709617},"rest":"https://alion.io/mcp/rest/get_company?id=709617"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fchewy-iam-engineer-iii-identity-access-management"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fchewy-iam-engineer-iii-identity-access-management"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fchewy-iam-engineer-iii-identity-access-management"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/chewy-iam-engineer-iii-identity-access-management\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fchewy-iam-engineer-iii-identity-access-management"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3376950}},{"tool":"search_jobs","arguments":{"company":"chewy.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3376950},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}