Security Engineer, IAM

Responsibilities

• Implement authentication and authorization controls across SaaS platforms, cloud infrastructure, and internal applications
• Configure and maintain SSO, MFA, conditional access policies, and federation integrations
• Design and enforce role-based and attribute-based access control models (RBAC/ABAC)
• Support AWS IAM security, including policy implementation, role configuration, and identity federation
• Secure APIs, service accounts, and non-human identities used in automation and CI/CD workflows
• Implement privileged access and identity lifecycle controls, including provisioning, deprovisioning, and least privilege enforcement
• Partner with GRC to support identity-related audits and control validation for frameworks like ISO 27001 and SOC 2
• Contribute to incident response efforts involving identity compromise or unauthorized access

Requirements

• 3+ years of experience in IAM engineering or identity architecture
• Hands-on experience with enterprise identity providers such as Okta or Azure AD
• Strong understanding of modern protocols including SAML, OAuth 2.0, OIDC, SCIM, and JWT
• Strong knowledge of AWS IAM, cross-account access models, and cloud identity federation
• Experience automating IAM tasks using scripting or infrastructure-as-code tools (e.g., Python, Terraform)
• Bachelor’s degree in Computer Science, Cybersecurity, or a related field

About the Company

WHOOP is on a mission to unlock human performance and healthspan. Our wearable technology provides personalized insights that help millions of members better understand their bodies and make smarter decisions about training, recovery, and lifestyle.