Staff IAM Engineer

Responsibilities

• Lead the engineering, architecture, and scaling of core identity platforms including Okta and SailPoint
• Design and implement robust, least-privilege access controls across AWS environments, FedRAMP boundaries, and corporate infrastructure
• Drive automation across the IAM lifecycle using custom scripts and API integrations
• Leverage Terraform to deploy and manage security configurations consistently
• Take technical leadership on major IAM initiatives from design through deployment
• Troubleshoot complex identity workflows, federation issues, and access anomalies

Requirements

• 8+ years of hands-on experience in Identity and Access Management and Security Engineering
• Deep administrative and architectural proficiency with Okta (SSO, lifecycle management, advanced workflows)
• Proficiency with SailPoint (identity governance, access certifications)
• Strong background securing AWS access (IAM policies, roles, SCPs, AWS IAM Identity Center)
• Solid coding and scripting abilities in Python, Bash, or similar
• Experience working with REST APIs

Preferred Qualifications

• Hands-on experience with Terraform

Benefits

• Comprehensive healthcare plans
• Family-building benefits (fertility and adoption/surrogacy support)
• Flexible time off
• Annual wellness stipend
• Free OneMedical memberships
• CLEAR Plus membership
• 401(k) retirement plan with employer match
• Catered lunches and fully stocked kitchens

About the Company

CLEAR is building the secure identity company of the future, making experiences safer and easier both physically and digitally for over 38 million members.