Identity & Access Management (IAM) Engineer
Backblaze External Website, Remote - US
What you will do
- Design and operate authentication, authorization, federation, SSO, MFA, RBAC/ABAC, PAM, conditional access, policy-based authorization, just-in-time access, continuous verification, and privileged-access capabilities.
- Engineer roles, groups, entitlements, and privilege assignments around least privilege and separation of duties.
- Automate identity provisioning, access reviews, privilege changes, revocation, and deprovisioning.
- Implement phishing-resistant MFA, cryptographically bound authentication, and strong identity assurance across enrollment, authentication, federation, and recovery.
- Govern service accounts, machine and device identities, workloads, automated processes, APIs, and AI-agent identities.
- Implement short-lived workload and agent identities using federation, certificates, and modern workload-identity approaches while reducing reliance on persistent secrets.