Staff Identity & Access Management Engineer

The role

The Staff IAM Engineer runs the enterprise identity program from the ground up. You will design and build identity platforms, lead a small agile team, and manage vendors. You will also represent identity controls to auditors.

What you will do

• Serve as the directly responsible individual for the enterprise identity program
• Own the identity roadmap end to end
• Build and lead a small, agile identity team
• Manage external implementation partners and vendors
• Own operation of the enterprise workforce identity platform
• Lead identity-related Helpdesk operations
• Lead the identity workstream in operational and cybersecurity incidents
• Define platform observability and operational KPIs
• Own quarterly user access reviews end to end
• Own identity control design and evidence for TISAX, ISO 2701, SOC 2, and SOX

Required qualifications

• Bachelor's degree in Computer Science, Information Security, Information Systems, or a related technical field
• 8+ years in identity and access management
• 3+ years as the accountable lead for a production workforce identity program or platform
• Experience building and leading a small, agile, effective team
• Experience managing a contractor workforce and directing external implementation partners and vendors
• Deep hands-on experience with major identity platforms including Okta, Microsoft Entra ID, Ping Identity, or comparable workforce IdPs
• Expert knowledge of SAML, OIDC, OAuth 2.0, SCIM, and directory services (Entra ID/Active Directory) in hybrid enterprise environments
• Exemplary written and verbal communication skills
• Experience presenting identity controls and evidence directly to auditors for TISAX, ISO 27001, SOC 2, and/or SOX
• Experience leading identity-related Helpdesk or service operations
• Experience leading identity response during security incidents
• Hands-on coding experience (Python or similar)

Nice to have

• Advanced vendor certification on a major identity platform
• Experience selecting and deploying IGA, PAM, and enterprise secrets management platforms
• Experience leading an identity platform migration or consolidation
• Experience building AI-assisted or agentic security automation
• SIEM integration and detection engineering experience for identity signals
• Experience in an automotive, joint-venture, or multi-entity enterprise environment

Benefits

• Competitive base salary
• Annual company performance bonus program
• Equity in the form of Restricted Stock Units (RSUs)
• Health coverage
• Retirement savings
• Time off
• Family planning programs

About the company

Rivian and Volkswagen Group Technologies is a joint venture between two industry leaders. They address the challenges of electric vehicles through technology for software-defined vehicles.