Identity and Access Management (IAM) Engineer

Viasat’s Identity & Access Management (IAM) program is a critical security and enablement function supporting workforce access, cloud environments, and mission-critical systems. As IAM capabilities continue to mature and expand, including Identity Governance Administration (IGA) and Privileged Access Management (PAM), we are seeking additional members of the team to design, implement, administer, and continuously improve enterprise identity services.

The IAM Engineer will work with other IAM Engineers and be responsible for IAM services and governance processes, owning the execution, quality, and continuous improvement of identity lifecycle management and access functions. This role partners closely with security, infrastructure, application, and business teams to ensure identity services remain secure, scalable, compliant, and aligned to business needs.

The position directly contributes to platform reliability, access governance, automation, user experience, and the long-term maturity of the enterprise IAM program.

The day-to-day

• Administer, automate/improve and oversee joiner, mover, and leaver (JML) processes in accordance with IAM standards and governance requirements
• Manage role, group, entitlement, and privileged access assignments based on approved business requests
• Develop and enhance automation solutions to improve IAM service delivery and reduce manual effort
• Configure and maintain IAM workflows, access request processes, and approval structures
• Troubleshoot access and authentication issues and serve as a Tier 2 escalation point for IAM-related service requests
• Partner with IAM Engineering team to implement and optimize automated workflows and access fulfillment processes
• Build and maintain workflows, connectors, and integrations with enterprise applications and identity sources
• Partner with application teams to onboard systems into IAM governance and provisioning processes
• Identify opportunities to automate recurring administrative tasks and governance activities
• Drive continuous improvement initiatives focused on scalability, efficiency, and user experience
• Serve as a Tier 2/3 escalation point for IAM-related incidents and access issues
• Troubleshoot authentication, provisioning, federation, and access-related problems
• Partner with security and infrastructure teams to resolve complex identity-related issues
• Monitor platform health, service performance, and process effectiveness

• 3+ years of experience designing, implementing, or supporting Identity and Access Management solutions
• Hands-on experience with enterprise IAM platforms such as Entra ID, Okta, or similar solutions
• Strong understanding of:
• Identity lifecycle management
• Role-Based Access Control (RBAC)
• Access governance principles
• Least-privilege models
• Privileged access concepts
• Experience supporting audit, compliance, and governance activities
• Strong attention to detail and process discipline
• Ability to work effectively in regulated and security-sensitive environments
• Experience troubleshooting identity, authentication, and access-related issues
• Knowledge of compliance and security frameworks within regulated environments
• Strong analytical, problem-solving, and technical troubleshooting skills
• ship required
• Ability to obtain US Confidential Clearance

What will help you on the job

• Experience with IAM automation, workflow development, or scripting
• Experience integrating applications with IAM platforms
• Familiarity with SAML, OAuth, OIDC, and SCIM protocols
• Experience supporting cloud and SaaS application onboarding
• Experience leveraging AI to improve processes or develop automations for improvements
• Experience implementing or administering PAM solutions
• Familiarity with identity governance processes including certifications, access reviews, and role management
• Experience working in engineering-driven, automation-first environments
• Strong written and verbal communication skills
• Ability to work effectively with technical and business stakeholders

$117,000.00 - $185,000.00 / annually.For specific work locations within San Jose, the San Francisco Bay area and New York City metropolitan area, the base pay range for this role is $145,000.00- $218,000.00/ annually

At Viasat, we consider many factors when it comes to compensation, including the scope of the position as well as your background and experience. Base pay may vary depending on job-related knowledge, skills, and experience. Additional cash or stock incentives may be provided as part of the compensation package, in addition to a range of medical, financial, and/or other benefits, dependent on the position offered. Learn more about Viasat’s comprehensive benefit offerings that are focused on your holistic health and wellness at EEO Statement

One team. Global challenges. Infinite opportunities. At Viasat, we’re on a mission to deliver connections with the capacity to change the world. For more than 35 years, Viasat has helped shape how consumers, businesses, governments and militaries around the globe communicate. We’re looking for people who think big, act fearlessly, and create an inclusive environment that drives positive impact to join our team.