STEM OPT Identity Access Management Jobs
Identity Access Management roles in cybersecurity and IT governance qualify for the 24-month STEM OPT extension if your degree falls under an eligible CIP code. Employers must be enrolled in E-Verify to hire you on STEM OPT, and you'll need a signed I-983 training plan before your extension begins.
See All Identity Access Management JobsOverview
Showing 5 of 7+ Identity Access Management jobs


Have you applied for this role?


Have you applied for this role?


Have you applied for this role?


Have you applied for this role?


Have you applied for this role?
See all Identity Access Management jobs
Sign up for free to unlock all listings, filter by visa type, and get alerts for new Identity Access Management roles.
Get Access To All Jobs
Who We Are
Join a team that puts its People First! Since 1889, First American (NYSE: FAF) has held an unwavering belief in its people. They are passionate about what they do, and we are equally passionate about fostering an environment where all feel welcome, supported, and empowered to be innovative and reach their full potential. Our inclusive, people-first culture has earned our company numerous accolades, including being named to the Fortune 100 Best Companies to Work For® list for ten consecutive years. We have also earned awards as a best place to work for women, diversity and LGBTQ+ employees, and have been included on more than 50 regional best places to work lists. First American will always strive to be a great place to work, for all.
What We Do
The Identity & Access Management (IAM) team is responsible for managing user identities, provisioning and deprovisioning access, enforcing least privilege principles, supporting access governance, and maintaining authentication and authorization controls across enterprise systems. This internship role will assist in IAM operational and governance activities. The intern will gain exposure to identity lifecycle management, access certifications, role-based access controls (RBAC), privileged access management (PAM), and authentication technologies such as Single Sign-On (SSO) and Multi-Factor Authentication (MFA). This role requires the ability to learn and understand Identity & Access Management concepts, enterprise systems, security policies and standards, and regulatory requirements at a foundational level.
What You'll Do:
- Assisting with user access provisioning and deprovisioning processes
- Supporting access reviews and certification campaigns
- Reviewing and documenting IAM processes and procedures
- Monitoring and tracking access-related tickets and remediation efforts
- Assisting with role and entitlement analysis to support least privilege initiatives
- Participating in meetings with application owners and business stakeholders
- Documenting IAM controls and supporting audit and compliance requests
- Helping maintain IAM tools and systems documentation
- Performing trend analysis related to access requests and access control issues
Knowledge and Skills / Technology Used
- Proficiency in Microsoft Office Suite (Word, Outlook, PowerPoint, Excel, Visio)
- Familiarity with basic IT concepts (Active Directory, networking fundamentals, operating systems)
- Interest in Identity & Access Management, Cybersecurity, or IT Governance
- Exposure to or interest in IAM tools (e.g., SailPoint, Okta, Azure AD, CyberArk, or similar platforms) is a plus
- Ability to work in a fast-paced environment where priorities may change
- Strong analytical and problem-solving skills
- High attention to detail and commitment to accuracy
- Ability to self-start and work independently while collaborating within a team
- Strong written and verbal communication skills
- Willingness to learn and adapt in a dynamic technology environment
- Ability to listen, accept feedback, and incorporate input from team members
Compensation
- $24.00-$28.00 Hourly
This hiring range is a reasonable estimate of the base pay range for this position at the time of posting. Pay is based on a number of factors which may include job-related knowledge, skills, experience, business requirements and geographic location.
Note that the following statements only apply to candidates who will be working from an unincorporated area within Los Angeles County.
First American will consider for employment all qualified applicants, including those with arrest or conviction records, in a manner consistent with the requirements of applicable state and local laws (e.g., the Los Angeles County Fair Chance Ordinance for Employers and the California Fair Chance Act).
First American intends to conduct a review of an applicant’s criminal history in connection with a conditional offer. First American reasonably believes that a criminal history may have a direct, adverse and negative relationship with the following material job duties for this position potentially resulting in the withdrawal of the conditional offer of employment: handling of confidential, proprietary or trade secret information belonging to First American or its customers, administrating or facilitating financial transactions, and the ability to meet customer-imposed criminal history requirements.
What We Offer
By choice, we don’t simply accept individuality – we embrace it, we support it, and we thrive on it! Our People First Culture celebrates diversity, equity and inclusion not simply because it’s the right thing to do, but also because it’s the key to our success. We are proud to foster an authentic and inclusive workplace For All. You are free and encouraged to bring your entire, unique self to work. First American is an equal opportunity employer in every sense of the term.
Based on eligibility, First American offers a comprehensive benefits package including medical, dental, vision, 401k, PTO/paid sick leave and other great benefits like an employee stock purchase plan.
See all Identity Access Management jobs
Sign up for free to unlock all listings, filter by visa type, and get alerts for new Identity Access Management roles.
Get Access To All JobsTips for Finding STEM OPT Authorization in Identity Access Management
Confirm E-Verify enrollment before applying
Search the E-Verify employer search tool to confirm a company is enrolled before you invest time interviewing. IAM teams at staffing firms and consulting shops frequently subcontract, so verify the actual legal employer, not the client site.
Build your I-983 training plan around IAM competencies
Draft your I-983 learning objectives using specific IAM competencies: identity lifecycle management, privileged access controls, and zero-trust architecture. Vague training plans get flagged by DSOs, so map each goal to your role's actual responsibilities.
Target employers with active PERM and LCA filings
Use Migrate Mate to filter IAM roles by employers who have filed Labor Condition Applications, signaling they understand sponsored work authorization and have HR processes built for international hires on OPT.
Negotiate your start date around cap-gap protection
If your OPT expires before October 1 and your employer files an H-1B petition on your behalf, cap-gap automatically extends your work authorization. Coordinate your offer letter start date so there's no gap between your EAD expiration and cap-gap coverage.
Use IAM certification credentials to offset degree mismatches
If your degree is adjacent to IAM, such as electrical engineering or applied mathematics, industry certifications like CISSP or CyberArk credentials document your technical training and strengthen the employer's I-983 justification for placing you in an IAM role.
Identity Access Management jobs are hiring across the US. Find yours.
Find Identity Access Management JobsFrequently Asked Questions
Does an Identity Access Management role qualify for the STEM OPT extension?
IAM roles typically qualify if your underlying degree has an eligible CIP code, such as computer science, information assurance, or cybersecurity. The role itself must require STEM knowledge and be directly related to your degree field. Your DSO confirms eligibility based on your program's CIP code, not your job title alone.
What E-Verify requirement applies to my STEM OPT employer in an IAM role?
Your employer must be enrolled in E-Verify before your STEM OPT extension is approved. This applies to the legal entity signing your I-983, not necessarily a client site where you work. If you're placed through a staffing agency or consulting firm, confirm which entity holds your employment record and verify their E-Verify status directly through the E-Verify employer search.
How do I complete the I-983 training plan for an IAM position?
Your I-983 must outline specific learning goals tied to your IAM role, such as implementing identity governance frameworks, managing privileged access systems, or deploying multi-factor authentication solutions. Both you and your employer's authorized representative must sign it. Your DSO reviews and approves it before USCIS processes your extension, so vague or generic objectives will delay approval.
Where can I find IAM jobs that sponsor STEM OPT students?
Migrate Mate filters IAM roles by employers with active Labor Condition Application filing history, so you can identify companies that have already navigated sponsored work authorization. This saves time compared to applying broadly and discovering after interviews that an employer has never hired on OPT or isn't enrolled in E-Verify.
What happens to my STEM OPT authorization if my IAM employer loses E-Verify enrollment?
If your employer's E-Verify enrollment lapses or is terminated after your STEM OPT extension is approved, your authorization is at risk. USCIS requires continuous E-Verify enrollment throughout your extension period. You should notify your DSO immediately, and you may need to transfer to a new qualifying employer and file an updated I-983 to maintain valid status.
See which Identity Access Management employers are hiring and sponsoring visas right now.
Search Identity Access Management Jobs