[Hiring] Senior Identity & Access Management Engineer @ServiceNow

Role Description

Do you care deeply about secure access at scale? Making sure the right people have the right access, exactly when they need it, without slowing teams down? Join Moveworks and help shape the future of our identity and access strategy.

At Moveworks, we believe great security is an enabler, not a blocker. As a Senior Identity & Access Management Engineer, you’ll be a hands-on technical developer, coding, designing, building, and scaling IAM solutions across cloud infrastructure, SaaS applications, and internal systems. You’ll own the development of IAM initiatives end-to-end, from untangling ambiguous access challenges to architecting secure, automated solutions and driving them into production.

Your work will directly protect Moveworks’ most critical systems while enabling our engineers to move fast, safely, and confidently.

• Be the technical developer to drive IAM application development: Code, design, and implement solutions with extensive knowledge in AWS, Azure, Teleport, and Terraform.
• Drive IAM projects end-to-end: Take ambiguous access problems, understand and define requirements, architect solutions, and own the rollout/operationalization.
• Develop with secure access models in mind: Continuously develop role design improvements and access assignment patterns across AWS, Kubernetes, SaaS apps, and internal systems.
• Develop on operationalizing logging and metrics: Ensure access changes are observable in our Security Information and Event Management (SIEM) tool.
• Run and improve user access reviews (UAR): Develop, execute and design a UAR process & solution that meets compliance requirements.
• Develop technology to continuously de-risk: Identify high-risk permissions and misuse paths, propose appropriate controls and mitigations.
• Operate with strong security judgment and high signal: Reliably distinguish meaningful IAM risk from noise.
• Document and standardize the paved road: Write lightweight procedures, runbooks, and automation for consistent access decisions.

Qualifications

• US Citizenship preferred (Some responsibilities involve working with U.S. government customer environments subject to regulatory access requirements).
• Experience: 5+ years of experience working in IAM, security engineering, or platform engineering with substantial IAM responsibilities in production environments.
• IAM Expertise: Strong grasp of IAM best practices and common failure modes (e.g., least privilege, privilege escalation paths, separation of duties).
• Cloud Infrastructure IAM: Practical experience implementing and designing access control in AWS, Azure, GCP environments.
• SSO Experience: Experience with Okta administration and patterns (e.g., groups, app assignments, lifecycle/provisioning).
• Threat-aware thinking: Ability to spot dangerous permissions and misuse paths, assess risk, and identify suitable mitigations.
• Automation-first mindset: Comfortable using scripting languages and AI coding tools to build reliable automation.
• Protocol fluency: Working understanding of OAuth, OIDC, SAML, and SCIM.
• Collaboration: Proven ability to build long-lasting relationships with various technical teams.
• Educational Background: BS+ in computer science or a related field, or equivalent relevant experience.

Company Description

Moveworks is the Agentic AI Assistant platform that empowers the entire workforce. Our platform enables employees to converse with all of their business systems through natural language to quickly find answers and automate tasks.

Moveworks is trusted by over 5.5 million employees at more than 350 of the world’s largest companies, including 10% of the Fortune 500, to automate everyday tasks and streamline business operations.

By joining our team, you’ll be at the forefront of the AI transformation, backed by the global scale of ServiceNow and the agility of a high-growth company.