Remote Iam Engineer Jobs
Remote Iam Engineer jobs are in active demand across the U.S., with remote-first firms and distributed enterprise teams hiring for identity and access management roles in technology, financial services, and healthcare. Employers hiring remotely right now include Cardinal Health, FICO, and Optiv. Find a role that fits below and apply directly.
Find Remote Iam Engineer JobsOverview
Showing 4 of 24+ Remote Iam Engineer jobs
- Remote - US: Select locations
- Remote
- Engineering
- Full Time
Dropbox is a Virtual First company. For this role, we are hiring in Zones 2 and 3. Zones are determined by your zip code; if you’re within 100 miles of a listed metro area (straight-line radius), you’re included in that Zone. Please
out our blog post on this topic and more here.
Responsibilities
- Design, deploy, and operate IAM controls across Dropbox’s cloud and on-premises infrastructure
- Design and implement secure identity, authentication, and authorization controls for AI agents and other non-human actors
- Implement least-privilege access using RBAC, ABAC, permission boundaries, service control policies, and just-in-time access
- Design secure integrations using SAML, OAuth 2.1, OpenID Connect, SCIM, and SPIFFE/SPIRE
- Automate identity lifecycle processes to ensure access is granted, modified, and revoked promptly
- Develop identity guardrails using infrastructure-as-code and policy-as-code
- Build monitoring and alerting for anomalous authentication, privilege escalation, credential misuse, and unauthorized access
- Partner with Incident Response to investigate identity-related incidents and rapidly revoke compromised access
- Conduct security reviews and threat modeling for new identity architectures and integrations
- Maintain IAM services with strong reliability, documentation, operational ownership, and on-call support
Many teams at Dropbox run Services with on-call rotations, which entails being available for calls during both core and non-core business hours. If a team has an on-call rotation, all engineers on the team are expected to participate in the rotation as part of their employment. Applicants are encouraged to ask for more details of the rotations to which the applicant is applying.
Requirements
- 5+ years of security engineering experience, including substantial IAM or identity-security experience
- Hands-on experience with Okta, Okta for AI Agents and Sailpoint, or comparable technologies
- Strong understanding of authentication, authorization, least privilege, zero trust, and identity lifecycle management
- Experience with SAML, OAuth 2.0/2.1, OpenID Connect, SCIM, and MFA
- Experience designing RBAC or ABAC authorization models
- Experience securing human and non-human identities, including services, workloads, automation, and CI/CD systems
- Experience with agentic frameworks and MCP tool integration
- Experience implementing access reviews, privileged-access controls, and joiner/mover/leaver workflows
- Proficiency in at least one programming or scripting language, such as Python, Go, Java, Ruby, or Bash
- Experience with infrastructure-as-code, policy-as-code, APIs, and security automation
- Bachelor’s degree in Computer Science, Information Security, or a related field, or equivalent practical experience
Preferred Qualifications
- Experience with workload identity technologies such as SPIFFE/SPIRE, Kubernetes service accounts, or cloud workload identity.
- Experience securing identities and authorization for AI agents and other autonomous systems.
- Experience with just-in-time access, zero-standing-privilege, or privileged-access management platforms.
- Familiarity with identity threat detection and response.
- Experience building IAM controls for multi-account cloud environments.
- Familiarity with NIST SP 800-63, NIST SP 800-207, CIS benchmarks, and relevant identity-security guidance.
- Experience supporting compliance programs such as SOC 2, ISO 27001, or FedRAMP.
- Security certifications such as CISSP, CCSP, or equivalent.
- Contributions to the identity or security community through open-source projects, publications, or conferences.
Durable Skills
AI fluency means using these tools to amplify human judgment, not replace it. We believe people with these skills will thrive as work and technology continue to evolve:
- Awareness: Understand yourself and others.
- Judgment: Evaluate information and make decisions in complex situations.
- Adaptability: Learn, adjust, and stay effective through change.
- Connection: Communicate, collaborate, and build trust.
Dropbox is an equal opportunity employer. We are a welcoming place for everyone, and we do our best to make sure all people feel supported and connected at work.
- Remote - US: Select locations
- Remote
- Engineering
- Full Time
Dropbox is a Virtual First company. For this role, we are hiring in Zones 2 and 3. Zones are determined by your zip code; if you’re within 100 miles of a listed metro area (straight-line radius), you’re included in that Zone. Please
out our blog post on this topic and more here.
Responsibilities
- Design, deploy, and operate IAM controls across Dropbox’s cloud and on-premises infrastructure
- Design and implement secure identity, authentication, and authorization controls for AI agents and other non-human actors
- Implement least-privilege access using RBAC, ABAC, permission boundaries, service control policies, and just-in-time access
- Design secure integrations using SAML, OAuth 2.1, OpenID Connect, SCIM, and SPIFFE/SPIRE
- Automate identity lifecycle processes to ensure access is granted, modified, and revoked promptly
- Develop identity guardrails using infrastructure-as-code and policy-as-code
- Build monitoring and alerting for anomalous authentication, privilege escalation, credential misuse, and unauthorized access
- Partner with Incident Response to investigate identity-related incidents and rapidly revoke compromised access
- Conduct security reviews and threat modeling for new identity architectures and integrations
- Maintain IAM services with strong reliability, documentation, operational ownership, and on-call support
Many teams at Dropbox run Services with on-call rotations, which entails being available for calls during both core and non-core business hours. If a team has an on-call rotation, all engineers on the team are expected to participate in the rotation as part of their employment. Applicants are encouraged to ask for more details of the rotations to which the applicant is applying.
Requirements
- 5+ years of security engineering experience, including substantial IAM or identity-security experience
- Hands-on experience with Okta, Okta for AI Agents and Sailpoint, or comparable technologies
- Strong understanding of authentication, authorization, least privilege, zero trust, and identity lifecycle management
- Experience with SAML, OAuth 2.0/2.1, OpenID Connect, SCIM, and MFA
- Experience designing RBAC or ABAC authorization models
- Experience securing human and non-human identities, including services, workloads, automation, and CI/CD systems
- Experience with agentic frameworks and MCP tool integration
- Experience implementing access reviews, privileged-access controls, and joiner/mover/leaver workflows
- Proficiency in at least one programming or scripting language, such as Python, Go, Java, Ruby, or Bash
- Experience with infrastructure-as-code, policy-as-code, APIs, and security automation
- Bachelor’s degree in Computer Science, Information Security, or a related field, or equivalent practical experience
Preferred Qualifications
- Experience with workload identity technologies such as SPIFFE/SPIRE, Kubernetes service accounts, or cloud workload identity.
- Experience securing identities and authorization for AI agents and other autonomous systems.
- Experience with just-in-time access, zero-standing-privilege, or privileged-access management platforms.
- Familiarity with identity threat detection and response.
- Experience building IAM controls for multi-account cloud environments.
- Familiarity with NIST SP 800-63, NIST SP 800-207, CIS benchmarks, and relevant identity-security guidance.
- Experience supporting compliance programs such as SOC 2, ISO 27001, or FedRAMP.
- Security certifications such as CISSP, CCSP, or equivalent.
- Contributions to the identity or security community through open-source projects, publications, or conferences.
Durable Skills
AI fluency means using these tools to amplify human judgment, not replace it. We believe people with these skills will thrive as work and technology continue to evolve:
- Awareness: Understand yourself and others.
- Judgment: Evaluate information and make decisions in complex situations.
- Adaptability: Learn, adjust, and stay effective through change.
- Connection: Communicate, collaborate, and build trust.
Dropbox is an equal opportunity employer. We are a welcoming place for everyone, and we do our best to make sure all people feel supported and connected at work.
See All 24 Remote Iam Engineer Jobs
Find roles that match your experience and apply in just a few clicks.
Find Remote Iam Engineer JobsRemote Iam Engineer Job Market
Who's Hiring
Top Industries Hiring
- Technology & Software
What Employers Look For
The qualifications that appear most often in remote iam engineer jobs.
- Hands-on experience with at least one enterprise IAM platform such as Okta, SailPoint, or CyberArk
- Strong understanding of directory services including Active Directory and LDAP
- Familiarity with identity protocols such as SAML, OAuth 2.0, and OpenID Connect
- Experience designing or administering role-based access control and least-privilege policies
- Knowledge of compliance frameworks such as SOX, HIPAA, NIST, or FedRAMP as applied to identity
- Bachelor's degree in computer science, information systems, or a related technical field
Tips for Your Remote Iam Engineer Job Search
Apply early to remote roles that fit
Migrate Mate lists remote iam engineer openings from across the U.S. in one place. Search by role, find positions that match your skills and experience level, and apply directly before competitive postings close.
Show async communication as a skill
Remote iam employers care deeply about written clarity. Document your past access governance decisions, incident responses, and policy changes in writing samples or a portfolio you can share during the application process. Clear written communication signals remote readiness.
Lead with cloud identity platform depth
Remote teams want iam engineers who can work independently inside Okta, Azure Active Directory, AWS IAM, or Google Cloud Identity without hand-holding. Name the specific platforms you've administered and the scope of user populations or integrations you've managed.
Prepare for remote-first technical screens
Remote iam interviews often use take-home scenarios covering role-based access control design, SSO troubleshooting, or access review workflows. Practice writing out your reasoning step by step, since remote teams evaluate how you think through problems in writing, not just your final answer.
Remote Iam Engineer Jobs: Frequently Asked Questions
How do I get a remote iam engineer job?
Target remote-first companies and distributed security or engineering teams that rely on cloud-based IAM platforms like Okta, Azure AD, or AWS IAM. Remote employers screen heavily for self-direction, clear written communication, and documented experience with identity lifecycle management, zero-trust architecture, and SSO integrations. Candidates who can show async collaboration skills and a history of independent project ownership stand out in remote hiring processes.
Which companies hire remote iam engineers?
Companies hiring remote iam engineers right now include Cardinal Health, FICO, and Optiv, based on current remote listings on Migrate Mate as of November 2026. Remote-first technology firms, distributed financial services organizations, and cloud-native healthcare companies are among the most consistent sources of remote iam engineer openings.
Can you get a remote iam engineer job with no experience?
Yes, but remote entry-level iam roles are harder to land because employers expect you to work independently from day one without on-site mentorship. Build hands-on experience through home lab projects using free tiers of Okta or Azure AD, earn vendor certifications like Microsoft SC-300, and contribute to open-source identity projects. Remote-first startups and managed security service providers tend to be the most open to junior candidates who can demonstrate self-sufficiency.
Do you need a degree for remote iam engineer jobs?
Not always. Many remote employers weigh demonstrated skills, relevant certifications, and real project work more heavily than a formal degree for iam engineer roles. Certifications like CISSP, SC-300, or Okta Certified Professional carry significant weight, and a portfolio showing you've built or administered identity systems, automated provisioning workflows, or led access governance projects can substitute effectively for a degree in remote hiring.
Which industries hire the most remote iam engineers?
Most remote iam engineer openings sit in Technology & Software, per current remote listings on Migrate Mate as of November 2026. These sectors rely on distributed teams managing access controls across cloud environments and regulated data systems, making remote iam engineers a core part of their security and compliance infrastructure.
See All 24 Remote Iam Engineer Jobs
Find roles that match your experience and apply in just a few clicks.
Find Remote Iam Engineer Jobs