Senior Identity & Access Management (IAM) Engineer

The role

The Senior IAM Engineer will own the design, integration, and governance of identity and access management using Microsoft Entra ID. This role involves automating provisioning, configuring SSO integrations, and managing AWS IAM roles and policies.

What you will do

• Own end-to-end access management strategy and governance using Microsoft Entra ID.
• Design and implement SCIM-based user provisioning and deprovisioning integrations.
• Configure and maintain SSO integrations between Entra ID and enterprise SaaS platforms.
• Design and manage the mapping of Palantir Foundry roles and permissions to Entra ID security groups.
• Design and manage the mapping of Polarion roles and permissions to Entra ID groups.
• Build automated workflows that assign or revoke SaaS licenses based on Entra group membership.
• Configure and manage AWS IAM roles, policies, and identity federation.
• Implement and maintain conditional access policies, MFA, and least-privilege access controls.
• Partner with application owners and business stakeholders to define RBAC models and workflows.
• Conduct periodic access reviews, certifications, and audits.

Required qualifications

• 5+ years of hands-on experience in Identity & Access Management, with deep expertise in Microsoft Entra ID (Azure AD).
• Strong experience implementing SCIM-based /API provisioning/deprovisioning integrations between Entra ID and SaaS applications.
• Strong experience configuring SSO (SAML/OIDC) integrations between Entra ID and enterprise/SaaS platforms.
• Experience mapping application roles and permissions to Entra ID security groups.
• Experience automating license assignment/management based on role, group, or department attributes.
• Hands-on experience with AWS IAM, including roles, policies, and SSO/identity federation between AWS and Entra ID.
• Solid understanding of RBAC design, least-privilege principles, and access governance best practices.
• Strong troubleshooting skills across identity, authentication, and provisioning integrations.
• Excellent communication skills.

Nice to have

• Experience with Palantir Foundry administration or platform governance.
• Experience with Polarion administration or ALM platform governance.
• Familiarity with identity governance tools (Entra ID Governance, SailPoint, Saviynt, or similar).
• Experience with scripting/automation (PowerShell, Microsoft Graph API, or AWS CLI/SDKs) for identity workflows.
• Microsoft certifications such as SC-300 (Identity and Access Administrator) or AWS Certified Security – Specialty.

Benefits

• Competitive base salary
• Equity ownership
• Comprehensive medical benefits
• Unlimited PTO
• Free daily lunch and dinner provided onsite
• Generous PPE stipend

Before you apply

• Applicants must be legally authorized to work in the United States as a U.S. citizen or lawful permanent resident (green card holder).

About the company

Valar Atomics aims to make clean, high-temperature nuclear power scalable. The company is a team of builders, engineers, and operators focused on deploying advanced nuclear systems.