Senior Identity Access Management Engineer

Responsibilities

• Lead enterprise-wide IAM standardization, including identity lifecycle, access governance, and policy enforcement
• Drive automation across IAM to streamline administration and user experience
• Support enterprise application onboarding into Azure Entra ID using SSO, Conditional Access, and RBAC
• Enhance privileged access management and implement scalable monitoring and auditability solutions
• Collaborate with IT, Networking, and Security teams to troubleshoot identity-related issues
• Advance Zero Trust Identity Fabric principles across users, devices, and workloads
• Build identity automation with a DevOps mindset using scripts and pipelines

Requirements

• 8+ years of experience with IAM and cloud automation in the Microsoft ecosystem
• Deep experience with Microsoft Entra ID, Conditional Access, and Identity Governance
• Proficiency in PowerShell, Azure CLI, and Microsoft Graph API
• Advanced knowledge of OAuth2, OpenID Connect, and SAML
• Experience with privileged access tools (Azure PIM, CyberArk) and secrets management
• Understanding of Zero Trust Architecture principles
• B.S. in Computer Science, Information Technology, Engineering, or equivalent experience

Preferred Qualifications

• Familiarity with Microsoft 365 services (Exchange Online, Defender, Purview, Sentinel, Intune)
• Knowledge of workload identity patterns (SPIFFE/SPIRE) and NHI governance
• Exposure to OPA/Rego or policy-as-code frameworks
• Familiarity with Microsoft Purview for DLP
• Knowledge of FIDO2 and multi-factor authentication

About the Company

Roku is the #1 TV streaming platform in the U.S., Canada, and Mexico, dedicated to connecting the entire TV ecosystem and powering the future of television.