Impress employers and recruiters.
Choose from hundreds of resume examples.

Target Resume Now

Tailor your resume to this Lead IAM Engineer role.

Rezi rewrites your resume against Braze's job description. Free.

Resume score gauge reading 58 out of 100

Don't guess if your resume is good enough.

See how it scores against the Lead IAM Engineer posting at Braze — free, in seconds.

About the Role

We are seeking a Lead IAM Engineer to own the technical direction and evolution of our enterprise identity and access management strategy. In this senior individual contributor role, you will architect, build, and continuously improve a secure, scalable, and automated identity ecosystem centered on Okta, identity lifecycle, access governance, and automation.

Responsibilities

Own the technical roadmap and architecture for enterprise Identity & Access Management, with Okta as a core identity platform
Architect and continuously improve Okta capabilities across SSO, authentication, lifecycle automation, Workflows, Identity Governance, and Access Requests
Design reliable onboarding, role-change, and offboarding identity processes for employees, contractors, partners, and other user populations
Build and improve integrations between Okta and systems such as Workday, Google Workspace, Slack, GitHub, Atlassian, MDM, and other enterprise applications
Drive identity automation using Okta Workflows, APIs, scripting, Terraform, and other engineering tools
Modernize how identity configuration changes are made through infrastructure as code, automated validation, peer review, and controlled deployment where appropriate
Lead identity governance initiatives including access reviews, access requests, role-based access, approval workflows, entitlement management, and least-privilege controls
Design and implement authentication, federation, and provisioning solutions using SAML, OIDC, OAuth, SCIM, MFA, and related identity standards
Partner with Security on authentication standards, privileged access, identity risk, and zero-trust initiatives
Support and continuously improve identity-related SOX controls, audit evidence, access reviews, and remediation processes
Design identity solutions for partners, resellers, service accounts, machine identities, and other non-standard access needs
Serve as a senior escalation point for complex identity issues and lead root cause analysis when identity or lifecycle processes fail
Identify recurring administrative or support work and create automation, self-service, runbooks, or delegated workflows to reduce manual intervention
Establish repeatable engineering standards for how identity changes are designed, tested, deployed, and documented
Mentor other engineers and help build broader IAM expertise and independent backup coverage across the team
Evaluate emerging identity capabilities and recommend where they can improve security, reliability, scalability, or user experience

Requirements

Deep hands-on expertise with Okta in a complex enterprise environment, including SSO, Lifecycle Management, Authentication, MFA, Workflows, and Identity Governance
Advanced understanding of SAML, OIDC, OAuth 2.0, SCIM, federation, provisioning, authentication, and authorization
Experience automating employee onboarding, role changes, and offboarding using an HRIS such as Workday as the authoritative source for employee data
Strong experience with identity governance including access reviews, entitlement management, access requests, role-based access control, and least privilege
Strong scripting and automation skills using Python, PowerShell, or similar languages
Strong API integration experience and the ability to connect identity platforms with broader enterprise systems
Experience with Terraform or another infrastructure-as-code framework
Experience turning manual identity administration into scalable, automated, and auditable processes
Experience supporting IAM controls in a SOX-regulated or similarly controlled environment
Proven ability to lead complex cross-functional IAM initiatives without requiring formal people-management authority
Strong communication skills with the ability to explain identity architecture, technical decisions, and risk to both technical and non-technical audiences

Skills

Okta
SSO
Authentication
MFA
Workflows
Identity Governance
SAML
OIDC
OAuth 2.0
SCIM
Federation
Provisioning
Authorization
Python
PowerShell
API integration
Terraform
Infrastructure as Code
SOX controls

Location

Hybrid

Work Type

Hybrid

Experience Level

Senior

Salary/Compensations

For candidates based in the United States, the pay range for this position at the start of employment is expected to be between $91,000 and $142,000/year, with an expected On Target Earnings (OTE) between $101,000 and $158,000/year (including bonus or commission).
In addition to cash compensation, this role qualifies for a comprehensive Total Rewards package that includes equity grants of restricted stock (RSUs) so that you will own a piece of our company.

Benefits

Competitive compensation that may include equity
Retirement and Employee Stock Purchase Plans
Flexible paid time off
Comprehensive benefit plans covering medical, dental, vision, life, and disability
Family services that include fertility benefits and equal paid parental leave
Professional development supported by formal career pathing, learning platforms, and a yearly learning stipend
A curated in-office employee experience, designed to foster community, team connections, and innovation
Opportunities to give back to your community, including an annual company-wide Volunteer Week and donation matching
Employee Resource Groups that provide supportive communities within Braze
Collaborative, transparent, and fun culture recognized as a Great Place to Work®

About the Company

Braze is the leading customer engagement platform that empowers brands to Be Absolutely Engaging.™ Braze helps brands deliver great customer experiences that drive value both for consumers and for their businesses. Built on a foundation of composable intelligence, BrazeAI™ allows marketers to combine and activate AI agents, models, and features at every touchpoint throughout the Braze Customer Engagement Platform for smarter, faster, and more meaningful customer engagement. From cross-channel messaging and journey orchestration to Al-powered decisioning and optimization, Braze enables companies to turn action into interaction through autonomous, 1:1 personalized experiences.
The company has repeatedly been recognized as a Leader in marketing technology by industry analysts, and was voted a G2 “Best of Marketing and Digital Advertising Software Product” in 2025.
Braze was also named a 2025 Best Companies To Work For by U.S. News & World Report, a 2025 America’s Greatest Companies by Newsweek, and a 2025 Fortune Best Workplace in Technology™ by Great Place to Work®, among other accolades. Braze is also proudly certified as a Great Place to Work® in the U.S., the UK, Australia, and Singapore.
The company is headquartered in New York with offices in Austin, Berlin, Bucharest, Chicago, Dubai, Jakarta, London, Paris, San Francisco, São Paulo, Singapore, Seoul, Sydney and Tokyo.

Equal Opportunity

At Braze, we strive to create equitable growth and opportunities inside and outside the organization.
Building meaningful connections is at the heart of everything we do, and that includes our recruiting practices. We're committed to offering all candidates a fair, accessible, and inclusive experience – regardless of age, color, disability, gender identity, marital status, maternity, national origin, pregnancy, race, religion, sex, sexual orientation, or status as a protected veteran. When applying and interviewing with Braze, we want you to feel comfortable showcasing what makes you you.
We know that sometimes different circumstances can lead talented people to hesitate to apply for a role unless they meet 100% of the criteria. If this sounds familiar, we encourage you to apply, as we’d love to meet you