Senior IAM Engineer
At a glance
Senior Security Engineering role at Reserv. Remote, United States · full-time · no salary stated · we estimate $152,500–$210,000 across the United States.
Reserv has not published a salary for this role. The figure below is our estimate, not theirs.
remoteroles summary, based on the employer's posting.
What you'll do
- Run employee, contractor and adjuster access from onboarding through role changes and departures, using HR data to trigger updates
- Review access certifications, remove excess permissions and keep evidence that supports audit checks
- Set up time-limited admin access across Okta, AWS and claims and payment systems, while spotting unusual account activity
- Investigate access incidents by rebuilding timelines, assessing exposure, preserving evidence and containing the issue
- Automate IAM and audit preparation with Python, PowerShell, Okta Workflows and APIs, and coach business reviewers on access hygiene
What you bring
- At least six years in cybersecurity or a related role, including four or more focused on IAM
- Hands-on Okta IGA experience is required, including SSO, SCIM, lifecycle management, workflows and policy design
- You have used Rippling or a comparable HRIS as the authoritative source for identity data
- You bring practical AWS IAM, privileged access, access-model design and Python or PowerShell automation experience
Who this fits
This senior role suits an experienced IAM practitioner who can handle confidential investigations and coach business reviewers. You must live in an eligible U.S. state throughout employment; California, Alaska, Hawaii, U.S. territories and locations outside the United States are excluded.
From the employer
About Reserv
Reserv is an insurtech creating and incubating cutting-edge AI and automation technology to bring efficiency and simplicity to claims. Founded by insurtech veterans with deep experience in SaaS and digital claims, Reserv is venture-backed by Bain Capital and Altai Ventures and began operations in May 2022. We are focused on automating highly manual tasks to tackle long-standing problems in claims and set a new standard for TPAs, insurance technology providers, and adjusters alike. We have ambitious (but attainable!) goals and need people who can work in an evolving environment. If building a leading TPA and the prospect of tackling the long-standing challenges of the claims role sounds exciting, we can't wait to meet you.
Location Requirement
Candidates must reside in an eligible U.S. state throughout employment. We are unable to hire candidates residing in California, Alaska, Hawaii, U.S. territories, or outside the United States.
What you'll do
- Administer the identity lifecycle end to end. Automated joiner, mover and leaver for employees, contractors and independent adjusters, driven by HRIS.
- Manage access certifications. Real reviewers, real remediation, real evidence. Assuring least privilege.
- Assure standing admin access. Just-in-time elevation across Okta, AWS, and our claims and payment platforms.
- Anomaly identification. Build and tune detection for access anomalies, dormant account reactivation, and privilege escalation.
- Incidents and Insider Threat Investigations. Reconstruct the access timeline, scope the exposure, preserve the evidence, and contain it fast.
- Automation. Python, PowerShell, Okta Workflows and APIs, facilitating audit preparation.
- Auditing. SOC 2, carrier client assessments, HIPAA, GDPR, and state insurance data security requirements, plus logical access controls over the systems that matter to the books.
- Standardization. Mentor and coach business reviewers so access hygiene scales past you.
Qualifications
- 6+ years in a Cybersecurity or relevant role; with minimum 4+ focused squarely on identity and access management.
- IGA platform experience with Okta (required).
- Rippling or a comparable modern HRIS used as an identity source of truth.
- Security+, Okta Certified Administrator / Consultant, or relevant.
- Identity threat detection, Identity Security Posture Management, or insider threat program experience.
- Scaling IAM through high growth or surge onboarding.
- Deep hands-on Okta: SSO, SCIM, Lifecycle Management, workflows, and policy design.
- Enhanced understanding of SAML, OIDC, OAuth 2.0, MFA and conditional access.
- Documented privileged access experience: vaulting, just-in-time elevation, credential rotation.
- Cloud IAM in AWS: roles, policies, federation, permission boundaries.
- RBAC and ABAC design, entitlement modeling, and SoD enforcement.
- Scripting and automation in Python or PowerShell against REST APIs.
- Bachelor’s degree in Cybersecurity, IT, or related field.
- Manage confidential work such as investigations and separations with discretion.
- Strong written and verbal communication.
- Experience working in a cloud-first or startup environment.
Benefits
- Generous health-insurance package with nationwide coverage, vision, & dental
- 401(k) retirement plan with employer matching
- Competitive PTO policy – we want our employees fresh, healthy, happy, and energized!
- Generous family leave policy after 8 months of continuous work
- Work from anywhere to facilitate your work life balance
- Apple laptop, large second monitor, and other quality-of-life equipment you may want. Technology is something that should make your life easier, not harder!
At Reserv, we value diversity in backgrounds, perspectives, and life experiences and believe that diversity in viewpoints and critical thinking drives innovation, first-principles thinking, and success. We welcome applicants from all backgrounds and encourage those from all walks of life to apply. If you believe you are a good fit for this role, we would love to hear from you!
Security Engineering work from LinkedIn, X, Reddit and Upwork, in one list.
Each morning you get everything that fits, strongest first.
Security EngineeringRemote
Find me workBy the team behind remoteroles.