TL;DR

Senior IAM & Security Engineer (AI): Designing, implementing, and managing identity, access, and endpoint security solutions at scale with an accent on secure, least-privilege, and scalable access models for human and non-human identities, including agentic AI systems. Focus on architecting SSO, RBAC, identity governance workflows, and securing multi-cloud environments.

Location: We are looking to speak to candidates who are based on the East Coast of the US for our hybrid working model.

Salary: $118,000–$231,000 USD

Company

MongoDB is a product company that provides a unified database platform for the AI era, enabling customers to innovate with software and offering a globally distributed, multi-cloud database platform, MongoDB Atlas.

What you will do

  • Lead administration and enhancement of IAM platforms, including Okta, AWS IAM, GCP IAM, and Azure AD.
  • Architect and implement SSO and authentication solutions (SAML, OIDC, OAuth2, MFA).
  • Design and continuously improve RBAC, access models, and identity governance workflows.
  • Define and standardize patterns for non-human identity lifecycle and access, including agentic AI systems.
  • Automate complex identity lifecycle processes using Terraform/OpenTofu, CloudFormation, Python, and Tines.
  • Secure multi-cloud environments (AWS, GCP, Azure) from an identity and access perspective.
  • Manage and improve endpoint security posture and device trust controls, integrating signals into IAM and Zero Trust decisions.
  • Support FedRAMP High and other regulatory/compliance programs by implementing required IAM and endpoint controls.
  • Monitor, investigate, and respond to IAM and cloud security incidents.

Requirements

  • At least 5 years of experience in Identity & Access Management, Security Engineering, or Cloud Security roles.
  • Demonstrated experience working in or supporting FedRAMP High or Moderate environments, or equivalent U.S. public-sector frameworks (e.g., FISMA, StateRAMP).
  • Subject matter expertise in securing workforce identity and access at scale using platforms such as Okta, AWS IAM, GCP IAM, and Azure AD.
  • Strong understanding of authentication and authorization in modern environments, including OAuth2, OIDC, SAML, and MFA.
  • Deep experience designing and operating RBAC models, access patterns, and identity governance workflows.
  • Experience securing non-human identities, including agentic AI systems, lifecycle management, and least-privilege access design.
  • Strong experience with infrastructure-as-code, such as Terraform/OpenTofu and CloudFormation, in AWS and at least one additional cloud provider (Azure or GCP).
  • Experience using scripting languages such as Python and Bash and low-code automation tools such as Tines.
  • Experience using Datadog (or similar observability / SIEM platforms) for security logging, alerting, and incident investigation.
  • Ability to perform security and access reviews, identify gaps, and recommend pragmatic controls.
  • Be a US Citizen.

Nice to have

  • Experience designing and operating phishing-resistant authentication (e.g., WebAuthn, FIDO2, YubiKey).
  • Experience with identity governance and administration (IGA) platforms.
  • Experience with Zero Trust architectures, particularly integrating device posture, network controls, and IAM policies.
  • Experience managing MDM platforms (Jamf, Workspace ONE, Kolide) and implementing device trust models.
  • Experience with security incident response focused on identity, access, and endpoint security events.

Culture & Benefits

  • Committed to developing a supportive and enriching culture for all employees.
  • Provides employee affinity groups, fertility assistance, and a generous parental leave policy.
  • Offers flexible paid time off, 20 weeks fully-paid gender-neutral parental leave, and 401(k) plan (applicable to U.S.-based candidates).
  • Provides mental health counseling and access to transgender-inclusive health insurance coverage (applicable to U.S.-based candidates).
  • Committed to providing necessary accommodations for individuals with disabilities.