Identity & Access Management Engineer / Identity Security Engineer
Open a video or resource link, watch it, then check its box to track your progress and unlock what comes next.
- Build the trust foundation: identity lifecycle, federation and least privilege
- Automate provisioning and govern privileged, contextual access
- Defend identity as the control plane for people, workloads and agents
Benchmark: Okta Staff Identity Engineer + current enterprise identity-security roles (current Sep 2026) Market refresh: human and machine identity, OAuth/OIDC, SAML, SCIM, phishing-resistant authentication, conditional access, IGA, PAM/PIM, multi-cloud IAM, workload/agent identity, identity-as-code and detection of identity-centric attacks.
Search Live Openings
We don’t have a direct job-board feed matched to this one yet, so here are real, live US job searches for “Identity & Access Management Engineer / Identity Security Engineer” instead.
Build the trust foundation: identity lifecycle, federation and least privilege
IAM architecture, identity lifecycle + least privilege
Coverage: Identity & Access Management / Cloud Security
Federation: OAuth/OIDC + SAML
Coverage: IAM / Authentication / Authorization / Federation
Automate provisioning and govern privileged, contextual access
Provisioning, SCIM, governance + conditional access
Coverage: IAM / IGA / Zero Trust / Automation
Privileged access, workload + machine identity
Coverage: PAM / PIM / Workload Identity / Agentic Security
Defend identity as the control plane for people, workloads and agents
Passkeys, phishing resistance + Zero Trust access
Coverage: FIDO2 / Passkeys / Zero Trust / Authentication Strength
Identity telemetry, incident response + remediation
Coverage: Identity Threat Detection / SOC / Incident Response
Role-Readiness Proof / Capstone
Design and implement identity for a cloud-native enterprise service. Model workforce, customer and workload identities; federate with OIDC/SAML; automate lifecycle provisioning with SCIM; enforce least privilege and conditional access; add PIM for privileged roles, phishing-resistant MFA/passkeys and a non-human identity for an agent or service. Centralize identity telemetry, simulate credential/session abuse, investigate it and produce a remediation plus access-review package.
Proof Rubric
- Demonstrate correct authentication and authorization flows
- lifecycle automation
- least-privilege role design
- privileged elevation controls
- workload/agent identity without long-lived secrets
- phishing-resistant authentication
- policy-as-code or repeatable configuration
- auditable access reviews
- high-signal telemetry
- incident containment
- and explicit security/usability tradeoffs with recovery and break-glass design