Staff Identity and Access Management Engineer

A staff engineer who designs and runs identity and access management and identity governance across Tanium's corporate environment, including SSO, MFA and privileged access. The engineer automates joiner, mover and leaver processes, entitlements and approvals, owns the identity lifecycle, writes IAM policies and standards with GRC to meet ISO 27001, FedRAMP, GDPR and HIPAA, reviews identity systems for security gaps, leads upgrades, migrations and integrations, handles IAM incidents and mentors engineers in IT and Security.

Tanium asks for eight to ten years in IAM, including IGA integrations with Workday or similar HR systems, hands-on work with an IGA product such as SailPoint, Saviynt or Lumos, deep Entra ID and Active Directory experience, and PowerShell. Hybrid, at least three days a week in one of five Tanium offices.