> Markdown version of [/jobs/ext/2561766-senior-systems-engineer-iam-operations](https://www.wearedevelopers.com/jobs/ext/2561766-senior-systems-engineer-iam-operations). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Senior Systems Engineer, IAM Operations

- **Company:** Crusoe's Inc
- **Location:** San Francisco, CA, United States
- **Experience:** Expert
- **Salary:** $165,000.0 - $200,000.0
- **Contract:** Permanent contract
- **Skills:** Microsoft Access, Application Programming Interfaces (APIs), Application Integration Architecture, Systems Engineering, Software as a Service, Multi-Factor Authentication, Identity and Access Management, Information Technology Operations, Python (Programming Language), OpenID, Windows PowerShell, Role-Based Access Control, Security Assertion Markup Language (SAML), User Provisioning Software, Scripting, Okta, No-code Tools, Low-code, Gsuite, Restful APIs, Terraform, DocuSign, Multiplatform
- **Published:** August 11, 2026
- **Apply:** https://www.indeed.com/viewjob?jk=444ad590c760a567

## About the Role

* 5+ years of experience in Systems Engineering, IT Operations, or Identity & Access Management (IAM), with hands-on Okta administration experience.
 * Hands-on experience with Identity Governance platforms (e.g., Lumos, Okta Identity Governance, or similar governance frameworks) to manage access requests, entitlements, and periodic access reviews.
 * Proven experience managing user lifecycle automation, including onboarding, offboarding, hires, rehires, and contractor conversions.
 * Deep familiarity with Okta security features, such as FastPass multifactor authentication (MFA) and device trust.
 * Familiarity with SCIM provisioning, including building custom solutions when native support is unavailable.
 * Working knowledge of no-code or low-code automation tools, particularly Okta Workflows.
 * Strong troubleshooting skills across authentication issues, REST APIs, and scripting languages (e.g., Python, PowerShell) for bulk operations.
 * Experience supporting multi-platform enterprise environments, including Google Workspace and Slack.
 * Clear communication skills and comfort partnering cross-functionally with API, engineering, and Service Desk teams.

Bonus Points

 * Exposure to identity governance platforms such as Lumos, Opal, or similar tools
 * Experience with application integrations using OIDC or SAML
 * Terraform or other infrastructure-as-code experience
 * Okta Administrator or Consultant certification

## Description

We're looking for a Senior Systems Engineer to own day-to-day identity and access management operations at Crusoe. This is a hands-on role focused on keeping our Okta ecosystem running smoothly and securely. You will oversee user lifecycle management, onboard applications to Okta for SSO, manage our governance platform (Lumos), and support our SaaS application stack.

You'll be the go-to for onboarding, offboarding, and access automation, acting as a Tier 2 escalation point for the Service Desk while building the automations that keep IAM operations scalable as Crusoe grows.

What You'll Be Working On

 * Owning end-to-end user lifecycle management in Okta, including onboarding, offboarding, hires, rehires, and contractor conversions
 * Managing sensitive offboarding scenarios, including closing out lingering user sessions on personal devices across Slack, Google Workspace, and other platforms
 * Managing core SaaS application administration (e.g., Slack, Claude, Port.io, DocuSign), ensuring seamless user provisioning, role-based access control (RBAC), and automated license reclamation to optimize software spend
 * Building access request workflows and approval automations in our governance platform to streamline access delivery and enforce least-privilege principles
 * Building, executing, and supporting periodic user access reviews and entitlement certifications across core SaaS platforms to maintain compliance and audit readiness
 * Administering Okta security features, including FastPass multifactor authentication and device trust, to strengthen access across the environment
 * Building automations for application provisioning and repetitive IAM tasks using Okta Workflows and no-code platforms, including custom SCIM solutions where native support falls short
 * Training and empowering Service Desk team members on new security policies, IAM best practices, and major system changes, actively involving them in projects to ensure smooth operational handoffs
 * Acting as a Tier 2 escalation point for the Service Desk on complex access, authentication, and application integration issues
 * Partnering with the API team to define clear requirements for custom automations, leveraging Okta Workflows knowledge to bridge the gap between IAM and engineering
 * Troubleshooting authentication failures, API errors, and access-related incidents, using REST APIs and scripting to resolve issues or run bulk operations
 * Documenting SOPs and runbooks that keep IAM operations consistent and scalable as the team grows


## Related Videos

- [Keeping applications secure by evolving OAuth 2.0 and OpenID Connect](https://www.wearedevelopers.com/videos/100152-keeping-applications-secure-by-evolving-oauth-2-0-and-openid-connect)
- [Our GitOps approach for deploying an Identity Provider and an API Gateway in a SaaS company](https://www.wearedevelopers.com/videos/776-our-gitops-approach-for-deploying-an-identity-provider-and-an-api-gateway-in-a-saas-company)
- [Delegating the chores of authenticating users to Keycloak](https://www.wearedevelopers.com/videos/1558-delegating-the-chores-of-authenticating-users-to-keycloak)
- [Keycloak case study: Making users happy with service level indicators and observability](https://www.wearedevelopers.com/videos/1599-keycloak-case-study-making-users-happy-with-service-level-indicators-and-observability)
- [Get started with securing your cloud-native Java microservices applications](https://www.wearedevelopers.com/videos/123-get-started-with-securing-your-cloud-native-java-microservices-applications)
- [Going Beyond Passwords: The Future of User Authentication](https://www.wearedevelopers.com/videos/714-going-beyond-passwords-the-future-of-user-authentication)

## Related Articles

- [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again)
- [Highest Paying Tech Companies for Developers](https://www.wearedevelopers.com/magazine/220-highest-paying-tech-companies-for-developers)
- [The Best X (Twitter) Accounts for Developers](https://www.wearedevelopers.com/magazine/294-the-best-x-twitter-accounts-for-developers)
- [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [Dev Digest 120 - Apple and peers](https://www.wearedevelopers.com/magazine/455-dev-digest-120-apple-and-peers)