Sr. Identity and Access Management (IAM) Engineer, Enterprise Identity Transformation (Remote) - Military veterans preferred

2025-06-24
CrowdStrike, Inc.
Other

/yr

  employee   contract


Sunnyvale
California
94086
United States

CrowdStrike, Inc.

Full time

R23597

About the Role:

We are seeking an exceptional Senior IAM Engineer to help design, implement, and maintain CrowdStrike's core identity infrastructure. This role is critical in ensuring secure, efficient access management across our rapidly growing organization. As a senior engineer, you will focus on Active Directory, Okta, and Multi-Factor Authentication while supporting our Enterprise Identity Governance Framework. The ideal candidate will combine deep technical expertise with strong security knowledge and excellent problem-solving abilities.


What You’ll Do:
Solution Design & Implementation-
  • Help design, implement, and maintain IAM solutions, focusing on Active Directory, Okta, and Multi-Factor Authentication (MFA)

  • Engineer identity infrastructure to support 12,000+ users and several applications

  • Develop and enforce security policies related to identity management and access control

  • Support scalable, secure identity solutions aligned with our Identity Spec 1.0 requirements

  • Implement advanced authentication mechanisms including passwordless solutions


  • Identity Lifecycle Management-
  • Manage user lifecycle, including onboarding, role changes, and off-boarding processes

  • Design and implement role-based access control (RBAC) solutions

  • Develop automated provisioning and de-provisioning workflows

  • Create efficient access request and approval processes

  • Implement access certification and review procedures


  • Integration & Automation-
  • Integrate IAM systems with other enterprise applications and cloud services

  • Design, implement, and maintain Okta Workflows for process automation and integration

  • Develop custom integrations using APIs and scripting

  • Create automated monitoring and alerting solutions

  • Build self-service capabilities for common identity tasks


  • Operational Excellence-
  • Troubleshoot complex IAM issues and provide escalation support

  • Participate in on-call rotation to provide 24/7 support for critical IAM systems

  • Create and maintain comprehensive documentation for IAM systems and processes

  • Develop and update detailed runbooks for operational procedures and disaster recovery

  • Conduct regular security audits and access reviews


  • What You’ll Need:
  • 8+ years of experience in IAM, with strong expertise in Active Directory and Okta

  • 5+ years of hands-on implementation of enterprise IAM solutions

  • Proven experience implementing and managing MFA solutions

  • Experience with PowerShell/Python; API Development; CI/CD Pipelines

  • Operational support ability – troubleshooting, escalation, maintaining documentation, and occasional rotational on-call support

  • In-depth knowledge of security policies/security management (policies, controls, audits, reviewing access), frameworks, and compliance requirements

  • Strong technical leadership background, as well as competencies in solutioning, systems implementation, integration, and process automation


  • Bonus Points:
  • Relevant certifications (CISSP, CISM, Okta certification)

  • Experience with SAML, OAuth, and OpenID Connect protocols

  • Familiarity with privileged access management (PAM) solutions

  • Experience using documentation management systems

  • Advanced knowledge of Okta Workflows

  • Cloud platform expertise (AWS, Azure, GCP)

  • Security architecture experience


  • #LI-Remote


    #LI-JC3


    CrowdStrike is proud to be an equal opportunity employer. We are committed to fostering a culture of belonging where everyone is valued for who they are and empowered to succeed. We support veterans and individuals with disabilities through our affirmative action program.

    CrowdStrike is committed to providing equal employment opportunity for all employees and applicants for employment. The Company does not discriminate in employment opportunities or practices on the basis of race, color, creed, ethnicity, religion, sex (including pregnancy or pregnancy-related medical conditions), sexual orientation, gender identity, marital or family status, veteran status, age, national origin, ancestry, physical disability (including HIV and AIDS), mental disability, medical condition, genetic information, membership or activity in a local human rights commission, status with regard to public assistance, or any other characteristic protected by law. We base all employment decisions--including recruitment, selection, training, compensation, benefits, discipline, promotions, transfers, lay-offs, return from lay-off, terminations and social/recreational programs--on valid job requirements.

    If you need assistance accessing or reviewing the information on this website or need help submitting an application for employment or requesting an accommodation, please contact us at recruiting@crowdstrike.com for further assistance.

    Find out more about your rights as an applicant.

    CrowdStrike participates in the E-Verify program.

    Notice of E-Verify Participation


    Right to Work



    Equal employment opportunity, including veterans and individuals with disabilities.

    PI274193417