Remote Identity And Access Management Engineer Jobs
Remote Identity And Access Management Engineer jobs are in active demand at remote-first companies and large distributed teams, including employers like Pinterest, Providence, and Fisher Investments, from junior to senior. Find a role that fits below and apply directly.
Find JobsOverview
Showing 5 of 22+ Remote Identity And Access Management Engineer jobs











ABOUT GITHUB: GitHub is the world’s leading platform for agentic software development — powered by Copilot to build, scale, and deliver secure software. Over 180 million developers, including more than 90% of the Fortune 100 companies, use GitHub to collaborate, and more than 77,000 organisations have adopted GitHub Copilot.
LOCATIONS: In this role you can work from Remote, United States
Overview:
GitHub is looking for a Principal Engineering Manager to lead Identity & Access Management for GitHub’s workforce and production systems. Identity is foundational to GitHub’s regulatory commitments, cloud strategy, internal security model, and the trust boundaries that protect access to critical infrastructure. Getting it right is one of the highest-leverage things we can do to secure GitHub at scale.
You will lead the team responsible for GitHub’s IAM platform across identity lifecycle, entitlements, privileged access, identity federation, workforce identity providers, and secured administrative access patterns. These systems sit on the critical path for Hubber productivity and production security, and they must operate with high reliability, strong usability, and clear security guarantees.
This role requires both deep technical judgment and strong organizational leadership. You will partner across Security, Infrastructure, IT, Legal, Compliance, and Engineering teams to define strategy, build paved paths, improve operational maturity, and make least-privilege and just-in-time access the default across GitHub. You will lead engineers, create clarity in ambiguous spaces, and help the team deliver durable systems rather than one-off policy-driven solutions.
This is a unique opportunity to shape the identity foundation that protects GitHub’s internal systems today while preparing the company for a future where access decisions must be increasingly automated, policy-driven, and consumable by both humans and agents.
Responsibilities:
- Lead the engineering strategy and technical roadmap for GitHub’s Identity & Access Management service area, spanning identity lifecycle, entitlements, privileged access, identity federation, and workforce identity providers.
- Build and support high-performing engineering teams by coaching engineers, managing performance, growing technical leadership, and fostering a culture of ownership, inclusion, operational excellence, and learning.
- Drive multi-quarter IAM platform evolution, including programs such as identity provider migrations, privileged access maturation, least-privilege access models, access automation, and identity platform consolidation.
- Partner with Security, Infrastructure, IT, Compliance, Legal, and product engineering teams to define requirements, resolve dependencies, and ensure IAM systems meet GitHub’s security, regulatory, reliability, and usability needs.
- Make secure access the easiest path by investing in paved paths, automation, APIs, and agent-consumable interfaces rather than relying on manual processes or policy memos.
- Oversee reliability, supportability, and operational maturity for Tier-0 IAM services, including incident response, postmortems, observability, deployment safety, rollback strategies, and systemic reduction of operational toil.
- Guide teams in designing scalable, secure, observable systems that support least privilege, just-in-time access, strong authentication, authorization, auditability, and identity governance at GitHub scale.
- Create clarity across ambiguous security and infrastructure programs, balancing long-term correctness with pragmatic delivery, phased cutovers, parity validation, and safe migration strategies.
- Raise the engineering bar through design reviews, architecture guidance, quality practices, automation, and mentorship across the IAM organization and adjacent engineering teams.
QUALIFICATIONS
Required Qualifications:
- 11+ years experience in Software Engineering, Computer Science, or related technical discipline with proven experience maintaining and delivering production software coding in languages including, but not limited to, C, C++, C#, Java, JavaScript, Go, Ruby, Rust, or Python
- OR Associate’s Degree in Computer Science, Electrical Engineering, Electronics Engineering, Math, Physics, Computer Engineering, Computer Science, or related field AND 10+ years experience in Software Engineering, Computer Science, or related technical discipline with proven experience maintaining and delivering production software coding in languages including, but not limited to, C, C++, C#, Java, JavaScript, Go, Ruby, Rust, or Python
- OR Bachelor's Degree in Computer Science or related field AND 9+ years experience in Software Engineering, Computer Science, or related technical discipline with proven experience maintaining and delivering production software coding in languages including, but not limited to, C, C++, C#, Java, JavaScript, Go, Ruby, Rust, or Python
- OR Master's Degree in Computer Science, Electrical Engineering, Electronics Engineering, Math, Physics, Computer Engineering, Computer Science, or related field AND 7+ years experience in Software Engineering, Computer Science, or related technical discipline with proven experience maintaining and delivering production software coding in languages including, but not limited to, C, C++, C#, Java, JavaScript, Go, Ruby, Rust, or Python.
- OR PhD Degree in Computer Science, Electrical Engineering, Electronics Engineering, Math, Physics, Computer Engineering, Computer Science, or related field AND 5+ years experience in Software Engineering, Computer Science, or related technical discipline with proven experience maintaining and delivering production software coding in languages including, but not limited to, C, C++, C#, Java, JavaScript, Go, Ruby, Rust, or Python,
- OR equivalent experience.
- 5+ years people management experience.
Preferred Qualifications:
- Experience leading engineering teams responsible for identity, access management, infrastructure security, internal developer platforms, or other Tier-0 production services.
- Experience with identity directories and providers such as Okta, Entra ID/Azure AD, or similar workforce identity platforms.
- Familiarity with authentication, authorization, federation, provisioning, and access-control patterns, including OAuth, OIDC, SAML, SCIM, and LDAP.
- Experience leading large-scale identity platform migrations or consolidations, including parity validation, device trust, phased cutovers, rollback strategies, and dependent-team coordination.
- Strong understanding of privileged access management, least privilege, just-in-time access, entitlement governance, access reviews, auditability, and operating IAM or security-critical services in Azure, AWS, or GCP.
- Proven track record building and scaling engineering organizations in high-growth, high-ambiguity, or security-sensitive environments while partnering across Security, Infrastructure, IT, Legal, Compliance, and Engineering to deliver durable platform outcomes, including systems and APIs for programmatic or AI-agent consumption.
COMPENSATION RANGE: The base salary range for this job is USD $160,200.00 - USD $425,000.00 /Yr.
These pay ranges are intended to cover roles based across the United States. An individual's base pay depends on various factors including geographical location and review of experience, knowledge, skills, abilities of the applicant. At GitHub certain roles are eligible for benefits and additional rewards, including annual bonus and stock. These rewards are allocated based on individual impact in role. In addition, certain roles also have the opportunity to earn sales incentives based on revenue or utilization, depending on the terms of the plan and the employee's role.
This position will be open for a minimum of 3 days, with applications accepted on an ongoing basis until the position is filled.
GITHUB LEADERSHIP PRINCIPLES:
GitHub values
- Customer-obsessed
- Ship to learn
- Growth mindset
- Own the outcome
- Better together
- Diverse and inclusive
Manager fundamentals
- Model
- Coach
- Care
Leadership principles
- Create clarity
- Generate energy
- Deliver success
WHO WE ARE: GitHub is the world’s leading AI-powered developer platform with 150 million developers and counting. We’re also home to the biggest open-source community on earth (and 99% of the world’s software has open-source code in its DNA). Many of the apps and programs you use every day are built on GitHub.
Our teams are dreamers, doers, and pioneers, leading the way in AI, driving humanitarian efforts around the globe, and even sending open source to Mars (and beyond!). At GitHub, our goal is to create the space you need to do your best work. We’re remote-first and offer competitive pay, generous learning and growth opportunities, and excellent benefits to support you, wherever you are—because we know that people flourish when they can work on their own terms.
Join us, and let’s change the world, together.
EEO STATEMENT: GitHub is made up of people from a wide variety of backgrounds and lifestyles. We embrace diversity and invite applications from people of all walks of life. We don't discriminate against employees or applicants based on gender identity or expression, sexual orientation, race, religion, age, national origin, citizenship, disability, pregnancy status, veteran status, or any other differences. Also, if you have a disability, please let us know if there's any way we can make the interview process better for you; we're happy to accommodate!
See All 22 Remote Identity And Access Management Engineer Jobs
Find roles that match your experience and apply in just a few clicks.
Find JobsRemote Identity And Access Management Engineer Job Market
Who's Hiring
- Pinterest3

- Providence2

- Fisher Investments2

- World Wide Technology2

- GitHub1

Top Industries Hiring
- Technology & Software9
- Agriculture & Farming2
- Insurance1
- Telecommunications1
- Electronics & Hardware1
What Employers Look For
The qualifications that appear most often in remote identity and access management engineer jobs.
- Experience with IAM platforms such as SailPoint, Okta, CyberArk, or Azure AD
- Proficiency in writing scripts or automation using PowerShell, Python, or similar languages
- Knowledge of directory services including Active Directory and LDAP
- Familiarity with compliance frameworks such as SOX, HIPAA, or FedRAMP access controls
- Relevant certification such as CISSP, Microsoft SC-300, or a vendor-specific IAM credential
- Bachelor's degree in computer science, information security, or a related technical field
Tips for Your Remote Identity And Access Management Engineer Job Search
Tailor your resume to the stack
IAM roles vary sharply by toolset. If the job listing names CyberArk, SailPoint, or Okta, mirror that exact product name in your resume's experience bullets. Hiring managers filter on specific platforms, not general identity experience.
Lead with your certifications up front
Certifications like CISSP, SC-300, or CIST carry real weight in IAM screening. Put them in a dedicated section near the top of your resume, not buried in education, so recruiters and applicant tracking systems catch them immediately.
Apply early to roles that fit
Migrate Mate lists identity and access management engineer openings from across the United States in one place, so you can find roles that match and apply directly to each listing.
Filter by compliance framework in job descriptions
Many IAM openings are tied to SOX, HIPAA, or FedRAMP compliance programs. When you spot those frameworks in a posting, your application should explicitly connect your past access governance work to that regulatory context.
Prepare a technical scenario for role-based access control
Almost every IAM interview includes a scenario question on designing or auditing RBAC or ABAC policies. Before your interview, draft a concise example from your own work showing how you scoped entitlements and handled privilege creep.
Negotiate using your on-call and escalation scope
IAM engineers who own incident response for access provisioning outages carry more operational risk than the title suggests. When negotiating your offer, make the breadth of your on-call obligations explicit so compensation reflects the actual responsibility.
Remote Identity And Access Management Engineer Jobs: Frequently Asked Questions
How do I get a remote identity and access management engineer job?
Target companies that already run distributed teams, since they hire remotely by default and know how to onboard someone they never meet in person. Remote identity and access management engineer employers screen hard for self-direction and clear written communication on top of the core skills, so show evidence you can own work without someone over your shoulder. Apply to the openings above that match your experience.
Which companies hire remote identity and access management engineers?
Employers currently hiring remote identity and access management engineers include Pinterest, Providence, and Fisher Investments, per current remote listings on Migrate Mate as of June 2026. Remote-first firms and large companies running distributed teams post the most remote identity and access management engineer roles.
Can you get a remote identity and access management engineer job with no experience?
Yes, but it is harder than an on-site role, because remote work expects you to operate independently from the start. Entry-level remote identity and access management engineer openings do exist, especially at remote-first companies, and a portfolio of real work helps more than a long resume. Applying broadly to the roles that fit improves your odds.
Do you need a degree for remote identity and access management engineer jobs?
Not always. Many employers hire remote identity and access management engineers on demonstrated skills and prior work rather than a specific degree, though some larger companies still prefer one. Showing relevant results matters more than a credential for most remote identity and access management engineer roles.
Which industries hire the most remote identity and access management engineers?
Remote identity and access management engineer roles concentrate in Technology & Software, Agriculture & Farming, and Insurance, based on current remote listings on Migrate Mate as of June 2026. These sectors run distributed teams and hire identity and access management engineers remotely most consistently.
See All 22 Remote Identity And Access Management Engineer Jobs
Find roles that match your experience and apply in just a few clicks.
Find Jobs