IAM Software Engineer III- Eng

UKG Inc.
Lowell, United States of America
2 days ago

Role details

Contract type
Permanent contract
Employment type
Full-time (> 32 hours)
Working hours
Regular working hours
Languages
English
Experience level
Senior
Compensation
$ 147K

Job location

Lowell, United States of America

Tech stack

Microsoft Active Directory
API
Agile Methodologies
Amazon Web Services (AWS)
Application Integration Architecture
User Authentication
Authentication Protocols
Build Automation
C Sharp (Programming Language)
Cloud Computing Security
Cloud Engineering
Code Review
Continuous Integration
Software Debugging
Github
Revision Control Systems
Identity and Access Management
Python
Lightweight Directory Access Protocols (LDAP)
OAuth
OpenID
Openid Connect
Security Assertion Markup Language (SAML)
Software Engineering
Software Systems
Systems Integration
User Provisioning Software
Workflow Management Systems
Google Cloud Platform
Enterprise Software Applications
Cloud Platform System
Spring Cloud
System Availability
Software Security
Event Driven Architecture
Containerization
Infrastructure Automation Frameworks
SailPoint
REST
Terraform
Serverless Computing
Go
Microservices

Job description

UKG is seeking a Software Engineer III to join our Enterprise Identity and Access Management (IAM) team within Global Security. This role is responsible for designing, developing, and supporting software solutions that enable secure identity governance, privileged access management, authentication, and authorization across UKG's enterprise and cloud environments.

You will work closely with Security Engineering, Cloud Engineering, Platform Engineering, and application teams to develop scalable IAM capabilities, automate security controls, and integrate applications with enterprise identity platforms. This role is ideal for a highly technical engineer who enjoys building solutions at the intersection of software development, cloud security, and identity management.

About the Role

  • Design, develop, and maintain IAM, IGA, and PAM solutions that support secure access management across enterprise and cloud environments
  • Develop and enhance integrations between applications, cloud platforms, and identity providers using REST APIs and industry-standard authentication protocols
  • Build and maintain services, automation, and tooling utilizing Go, C#, Python, and cloud-native technologies
  • Develop scalable solutions to automate identity lifecycle management, access provisioning, de-provisioning, and privileged access workflows
  • Design and implement integrations leveraging SAML 2.0, OAuth 2.0, OpenID Connect (OIDC), LDAP, and Active Directory
  • Collaborate with application teams to onboard enterprise applications into IAM, IGA, and PAM platforms
  • Develop and maintain integrations with Saviynt and other enterprise identity solutions using APIs, workflows, and automation frameworks
  • Design and implement secure access patterns across Google Cloud Platform (GCP), Amazon Web Services (AWS), and enterprise infrastructure
  • Build automation and orchestration capabilities that improve operational efficiency, scalability, and reliability
  • Participate in architecture reviews and provide guidance on authentication, authorization, identity governance, and privileged access management best practices
  • Troubleshoot and resolve complex identity, authentication, authorization, and integration issues across cloud and enterprise environments
  • Develop and maintain Infrastructure-as-Code (IaC) solutions to support IAM and cloud security services
  • Partner with Security Engineering teams to implement and improve security controls, monitoring, and access management capabilities
  • Contribute to engineering standards, code reviews, technical documentation, and platform reliability initiatives

Requirements

  • 5+ years of experience in software engineering, security engineering, identity and access management, or a related technical field
  • Experience developing applications or services using one or more programming languages such as Go, C#, or Python
  • Experience working with REST APIs, microservices, and system integrations
  • Experience implementing or supporting Identity and Access Management (IAM), Identity Governance and Administration (IGA), or Privileged Access Management (PAM) solutions
  • Experience integrating applications using SAML 2.0, OAuth 2.0, OpenID Connect (OIDC), LDAP, and Active Directory
  • Experience working with cloud platforms such as Google Cloud Platform (GCP) and/or Amazon Web Services (AWS)
  • Experience troubleshooting authentication, authorization, and identity federation issues
  • Understanding of secure software development practices and application security principles
  • Experience using GitHub, source control systems, CI/CD pipelines, and modern development workflows
  • Strong analytical, problem-solving, and debugging skills
  • Ability to collaborate effectively across engineering, security, and platform teams, * Experience developing integrations with Saviynt or other enterprise identity governance platforms
  • Experience building automation for identity lifecycle management, access provisioning, and privileged access workflows
  • Experience working with Infrastructure-as-Code tools such as Terraform
  • Experience building cloud-native applications and services
  • Experience with event-driven architectures, serverless technologies, or workflow orchestration platforms
  • Experience implementing security controls within AWS and GCP environments
  • Familiarity with Active Directory, Entra ID, or enterprise directory services
  • Experience with PAM technologies and privileged account automation
  • Experience optimizing and scaling enterprise identity platforms through automation and software development
  • Experience working in Agile software development environments, UKG will never ask you for a copy of your driver's license, social security card, or passport during a job inter

Benefits & conditions

4.14.1 out of 5 stars Lowell, MA Hybrid work $102,300 - $147,050 a year, The pay range for this position is $102,300 to $147,050. The actual base pay offered may vary depending on skills, experience, job-related knowledge and work location. In addition to base pay, employees may be eligible to participate in a performance-based bonus plan and to receive restricted stock unit awards as part of total compensation. Learn more about UKG's benefits and rewards at https://www.ukg.com/about-us/careers/benefits

About the company

At UKG, the work you do matters. The code you ship, the decisions you make, and the care you show a customer all add up to real impact. Today, tens of millions of workers start and end their days with our workforce operating platform. Helping people get paid, grow in their careers, and shape the future of their industries. That's what we do. We never stop learning. We never stop challenging the norm. We push for better, and we celebrate the wins along the way. Here, you'll get flexibility that's real, benefits you can count on, and a team that succeeds together. Because at UKG, your work matters-and so do you., UKG is the Workforce Operating Platform that puts workforce understanding to work. With the world's largest collection of workforce insights, and people-first AI, our ability to reveal unseen ways to build trust, amplify productivity, and empower talent, is unmatched. It's this expertise that equips our customers with the intelligence to solve any challenge in any industry - because great organizations know their workforce is their competitive edge. Learn more at ukg.com.

Apply for this position