> Markdown version of [/jobs/ext/1172399-iam-platform-engineer](https://www.wearedevelopers.com/jobs/ext/1172399-iam-platform-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# IAM Platform Engineer

- **Company:** Amazon.com, Inc.
- **Location:** Austin, TX, United States
- **Experience:** Expert
- **Contract:** Permanent contract
- **Skills:** Cloud Computing Security, Multi-Factor Authentication, Identity and Access Management, OpenID, Performance Tuning, Role-Based Access Control, Openid Connect, Security Assertion Markup Language (SAML), Single Sign-On, Systems Integration, Scripting, Enterprise Software Applications, SailPoint, Restful APIs
- **Published:** July 3, 2026
- **Apply:** https://www.careerjet.com/jobad/usf7018d9af3fac4c5ae59bef63d54363e

## About the Role

* 8+ years of experience in IAM platform engineering, governance, lifecycle automation, and scripting
 * 8+ years of experience integrating enterprise applications with IAM platforms
 * 5+ years of experience designing and implementing RBAC models and enforcing access governance
 * 5+ years of experience managing centralized Identity Providers, SSO, MFA, and federation protocols
 * Hands-on experience with SAML 2.0, OpenID Connect (OIDC), REST APIs, Joiner/Mover/Leaver (JML) workflows, and Privileged Access Management (PAM)

Preferred Skills:

 * 1+ year of experience implementing and supporting SailPoint Identity Security Cloud (ISC)

## Description

The client is seeking three experienced Software Developer III professionals to design, implement, and maintain its enterprise Identity and Access Management (IAM) ecosystem. The selected candidates will be responsible for developing a centralized identity provider framework using SAML 2.0 and OpenID Connect (OIDC) to support Single Sign-On (SSO) and Multi-Factor Authentication (MFA). The role also includes building Joiner, Mover, and Leaver (JML) lifecycle workflows, onboarding enterprise applications through REST APIs, and implementing Role-Based Access Control (RBAC) models.
Additional responsibilities include deploying and supporting a Privileged Access Management (PAM) solution with secure credential vaulting, automated password rotation, and Just-in-Time (JIT) provisioning. Candidates will also be responsible for ongoing system administration, performance tuning, troubleshooting provisioning and connectivity issues, and onboarding additional enterprise applications throughout the contract period., In this role, you will leverage your expertise to help train next-generation AI systems, shaping how models learn, reason, and perform through high-quality, real-world input. Your …

 + 1 month ago


## Related Videos

- [Keeping applications secure by evolving OAuth 2.0 and OpenID Connect](https://www.wearedevelopers.com/videos/100152-keeping-applications-secure-by-evolving-oauth-2-0-and-openid-connect)
- [Why make use of an integration platform in today's software developments and infrastructure?](https://www.wearedevelopers.com/videos/758-why-make-use-of-an-integration-platform-in-today-s-software-developments-and-infrastructure)
- [JavaScript? No. Java Scripts! - Scripting with Java](https://www.wearedevelopers.com/videos/2094-javascript-no-java-scripts-scripting-with-java)
- [Delegating the chores of authenticating users to Keycloak](https://www.wearedevelopers.com/videos/1558-delegating-the-chores-of-authenticating-users-to-keycloak)
- [Get started with securing your cloud-native Java microservices applications](https://www.wearedevelopers.com/videos/123-get-started-with-securing-your-cloud-native-java-microservices-applications)
- [Our GitOps approach for deploying an Identity Provider and an API Gateway in a SaaS company](https://www.wearedevelopers.com/videos/776-our-gitops-approach-for-deploying-an-identity-provider-and-an-api-gateway-in-a-saas-company)

## Related Articles

- [The Best X (Twitter) Accounts for Developers](https://www.wearedevelopers.com/magazine/294-the-best-x-twitter-accounts-for-developers)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [Stephan Gillich - Bringing AI Everywhere](https://www.wearedevelopers.com/magazine/489-stephan-gillich-bringing-ai-everywhere)
- [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers)
- [Highest Paying Tech Companies for Developers](https://www.wearedevelopers.com/magazine/220-highest-paying-tech-companies-for-developers)
- [The Best Software Developer Blogs to Read](https://www.wearedevelopers.com/magazine/156-the-best-software-developer-blogs-to-read)