Identity & Access Management (IAM) Engineer
Backblaze · Remote - US
About this role
**Identity & Access Management (IAM) Engineer — Backblaze** ## About Backblaze Backblaze is the object storage leader in the open cloud movement, helping customers unlock budgets, reduce administrative burden, and accelerate innovation. Founded in 2007, Backblaze has grown to generate $100M+ in revenue and manages 3B+ GB of data storage for 500K+ customers across 175+ countries. ## Role Overview The IAM Engineer designs, implements, and operates identity and access capabilities for: - Human users - Non-human identities (workloads, devices, services) - AI agents This role focuses on the **subject side of access control**—identity, authentication, roles, groups, entitlements, and privileges—with an emphasis on: - **Least privilege** - **Separation of duties** - **Strong authentication** - **Automated lifecycle management** - **Short-lived credentials** You’ll partner across the organization to ensure applications, infrastructure, and services mediate access appropriately, separate security domains, minimize unnecessary sharing, and reduce privilege/blast radius. ## Key Responsibilities - Design and operate authentication, authorization, federation, SSO, MFA, RBAC/ABAC, PAM, conditional access, policy-based authorization, just-in-time access, continuous verification, and privileged-access capabilities. - Engineer roles, groups, entitlements, and privilege assignments around least privilege and separation of duties. - Automate identity provisioning, access reviews, privilege changes, revocation, and deprovisioning. - Implement phishing-resistant MFA, cryptographically bound authentication, and strong identity assurance across enrollment, authentication, federation, and recovery. - Govern service accounts, machine/device identities, workloads, automated processes, APIs, and AI-agent identities. - Implement short-lived workload and agent identities using federation, certificates, and modern workload-identity approaches—reducing reliance on persistent secrets. - Partner with architects and engineers to ensure access is efficiently mediated and designs minimize excessive privilege, unnecessary sharing, and cross-domain exposure. - Monitor identity posture and work with Security Operations to investigate identity threats and rapidly revoke compromised access. ## Qualifications - Hands-on experience engineering enterprise IAM systems and integrations. - Strong knowledge of authentication, authorization, federation, identity lifecycle management, role/group design, separation of duties, and least privilege. - Knowledge of phishing-resistant MFA, cryptographic authentication, identity proofing, federation, and modern identity assurance practices. - Experience managing human and non-human identities (service, machine, workload, or device identities). - Experience automating identity processes using APIs, scripting, or Infrastructure-as-Code. - Understanding of PKI, secrets management, short-lived credentials, workload identity federation, and technologies such as OIDC, OAuth, and SPIFFE/SPIRE. - Ability to reason about identity and authorization across distributed systems and collaborate on secure access design. ## Backblaze Perks - Healthcare for family (dental & vision) - Competitive compensation and 401K - RSU grants for full-time employees - ESPP program - Flexible vacation policy - Maternity & paternity leave - MacBook Pro + stipend to personalize your workstation - Childcare bonus (human children only) - Fertility treatment and support
Listing freshness
CronJobs last confirmed this listing 59m ago. If its source stops confirming the opening for seven days, this page is removed from active inventory.