> Markdown version of [/jobs/ext/1955450-senior-identity-management-engineer](https://www.wearedevelopers.com/jobs/ext/1955450-senior-identity-management-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Senior Identity Management Engineer

- **Company:** Aurora Innovation, Inc.
- **Location:** Mountain View, CA, United States
- **Experience:** Expert
- **Contract:** Permanent contract
- **Skills:** Amazon Web Services, Microsoft Azure, Cyber Security, Human Resources Information System (HRIS), Identity and Access Management, Python (Programming Language), Lightweight Directory Access Protocols (LDAP), OAuth, OpenID, Role-Based Access Control, Zero Trust Network Access, Security Assertion Markup Language (SAML), Okta, Information Technology, Workday
- **Published:** August 6, 2026
- **Apply:** https://us.experteer.com/career/view-jobs/senior-identity-management-engineer-mountain-view-ca-usa-58818639

## About the Role

identities to Ping Directory * Operational readiness: draft test plans, procedural docs for audits, and runbooks for the ops team Tasks * 4+ years in Information Security with at least 2 years implementing IAM in large enterprises * Expert-level knowledge of at least one major Cloud Identity Provider (AWS IAM, Azure) and core protocols: SAML, OAuth 2.0, OIDC, SCIM, LDAP * Deep understanding of Zero Trust and access models (RBAC, ABAC, PBAC) * Bachelor's or Master's degree in Computer Science or IT or equivalent practical experience * Ability to develop code in Python or Go Key requirements * annual bonus * equity compensation * benefits * hybrid work environment * in-office 3 days per week * salary range across locations

## Description

Experteer Overview In this hands-on IAM Engineer role, you will implement and operate a modern identity platform at Aurora, focusing on Ping Directory and Conductor One. You'll collaborate with the IAM Architect to migrate and harden identity services, enabling scalable, secure access across the ecosystem. You'll drive JML automation, connector development, and audit-ready processes to support SOX/ISO reviews. This role offers impact through secure, scalable identity infrastructure that underpins our zero-trust stack. Compensation / Benefits * Platform implementation: configure Ping Directory and Conductor One across Dev and Prod * Workforce automation: integrate HRIS (Workday) with IGA to automate Joiner-Mover-Leaver processes * Technical connectivity: build and validate connectors for Okta, AWS, Google, Slack, and Squad * Compliance hardening: deploy Justify or Revoke workflows and automated reporting for privileged access reviews * Identity isolation: migrate workforce and service identities to Ping Directory * Operational readiness: draft test plans, procedural docs for audits, and runbooks for the ops team Tasks * 4+ years in Information Security with at least 2 years implementing IAM in large enterprises * Expert-level knowledge of at least one major Cloud Identity Provider (AWS IAM, Azure) and core protocols: SAML, OAuth 2.0, OIDC, SCIM, LDAP * Deep understanding of Zero Trust and access models (RBAC, ABAC, PBAC) * Bachelor's or Master's degree in Computer Science or IT or equivalent practical experience * Ability to develop code in Python or Go Key requirements * annual bonus * equity compensation * benefits * hybrid work environment * in-office 3 days per week * salary range across locations


## Related Videos

- [Keeping applications secure by evolving OAuth 2.0 and OpenID Connect](https://www.wearedevelopers.com/videos/100152-keeping-applications-secure-by-evolving-oauth-2-0-and-openid-connect)
- [Our GitOps approach for deploying an Identity Provider and an API Gateway in a SaaS company](https://www.wearedevelopers.com/videos/776-our-gitops-approach-for-deploying-an-identity-provider-and-an-api-gateway-in-a-saas-company)
- [Delegating the chores of authenticating users to Keycloak](https://www.wearedevelopers.com/videos/1558-delegating-the-chores-of-authenticating-users-to-keycloak)
- [Get started with securing your cloud-native Java microservices applications](https://www.wearedevelopers.com/videos/123-get-started-with-securing-your-cloud-native-java-microservices-applications)
- [30 powerful AWS hacks in just 30 minutes: Boost your developer productivity](https://www.wearedevelopers.com/videos/1624-30-powerful-aws-hacks-in-just-30-minutes-boost-your-developer-productivity)
- [Delay the AI Overlords: How OAuth and OpenFGA Can Keep Your AI Agents from Going Rogue](https://www.wearedevelopers.com/videos/1637-delay-the-ai-overlords-how-oauth-and-openfga-can-keep-your-ai-agents-from-going-rogue)

## Related Articles

- [Highest Paying Tech Companies for Developers](https://www.wearedevelopers.com/magazine/220-highest-paying-tech-companies-for-developers)
- [Why Upskilling And Reskilling is Important For Developers](https://www.wearedevelopers.com/magazine/428-why-upskilling-and-reskilling-is-important-for-developers)
- [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers)
- [Navigating the AI Shift](https://www.wearedevelopers.com/magazine/629-navigating-the-ai-shift)
- [Best US AI Conferences for CTOs in 2026: Build vs. Buy, Vendor Evaluation, and Peer Intelligence](https://www.wearedevelopers.com/magazine/736-best-us-ai-conferences-for-ctos-in-2026-build-vs-buy-vendor-evaluation-and-peer-intelligence)
- [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs)