Why This Role Matters
This Engineer III designs, implements, and maintains identity and access management solutions that support secure access across the organization. This role contributes to IAM modernization efforts while improving authentication, authorization, automated provisioning, access governance, and compliance.
As an experienced individual contributor, you will help shape technical decisions, deliver high-quality solutions, and continuously improve the IAM program by evaluating emerging identity threats, technologies, and best practices.
Team and Technology
You will work across SailPoint IIQ, SailPoint ISC, Auth0, Microsoft Entra ID, Java, REST APIs, GraphQL, SAML, OAuth 2.0, OpenID Connect, SCIM, LDAP, and Active Directory. You will partner with application, infrastructure, security, audit, and business teams to define and implement access requirements. The role supports complex applications, data integrations, automated provisioning processes, and compliance with organizational policies and frameworks such as SOX, TISAX, GDPR, and CMMC.
What Success Looks Like
- Serve as a lead contributor for identity and access management modernization efforts.
- Lead design sessions for the team.
- Identify, manage, and resolve incidents for applications owned by the team.
- Become established as a mentor for other engineers.
- Continuously improve the IAM program through emerging technologies and best practices.
Key Areas of Impact
Technical Depth and Delivery
- Design, implement, maintain, and support identity and access management solutions while automating identity-management processes using PowerShell, APIs, Java, AI, and other development tools.
- Configure and support SSO, MFA, conditional access, passwordless authentication, provisioning, federation, and directory services while contributing to operational excellence, incident response, and continuous improvement.
Architectural Scale
- Develop role-based and attribute-based access controls, integrate enterprise applications with IAM platforms, and evaluate system dependencies, operational impacts, and design tradeoffs.
- Design and implement scalable IAM solutions using SailPoint IIQ, SailPoint ISC, Auth0, Microsoft Entra ID, REST APIs, GraphQL, SAML, OAuth 2.0, OpenID Connect, SCIM, LDAP, and Active Directory.
Team Collaboration Scale
- Partner with application, infrastructure, security, audit, and business teams to define and implement access requirements while supporting planning, coordination, and alignment across initiatives.
- Collaborate across engineering teams, provide technical feedback, support the growth of less experienced engineers, and contribute to a culture of knowledge sharing and continuous improvement.
Influence and Advocacy
- Lead design sessions, share technical recommendations, communicate risks and tradeoffs, and advocate for solutions that improve security, delivery, quality, and customer outcomes.
- Evaluate emerging identity threats, technologies, and best practices to continuously improve the IAM program and strengthen access governance capabilities.
Scope of Vision
- Contribute to IAM modernization efforts by translating business and technical priorities into actionable plans and technology solutions with a near- to mid-term planning horizon.
Scale of Business Understanding
- Support compliance with organizational policies and frameworks, including SOX, TISAX, GDPR, and CMMC, while balancing technical quality, operational effectiveness, and business needs.
- Conduct access certifications, entitlement reviews, and privileged-access assessments to strengthen security controls and improve customer and business outcomes.
This position is on-site and will reside in the greater Seattle, WA. area at one of the following locations depending on availability. Candidates must be local or willing to relocate. Relocation assistance is not offered for this position.
- Downtown Seattle
- Federal Way
- Lynnwood
- Bellevue (Factoria)
Qualifications for Success
Required
- Bachelor’s degree in Computer Science, Information Systems, Engineering, Business, or a related field, or equivalent combination of education and experience in identity management, information security, systems engineering, application development, or infrastructure architecture.
- Demonstrated experience designing, implementing, supporting, or administering enterprise IAM solutions such as SailPoint IIQ, SailPoint ISC, Auth0, and Entra ID.
- Experience working with complex applications, data integrations, and automated provisioning processes.
- Working knowledge of security and compliance principles, including least privilege, separation of duties, and access governance.
- Experience contributing to technical design discussions and solution architecture decisions.
- Experience supporting production systems and participating in operational support activities.
- Experience collaborating across teams to deliver technology solutions and business outcomes.
- Experience working with agile delivery practices, source control, testing methodologies, and modern engineering workflows.
- Experience with Agentic AI development processes and practices.
Preferred
- Five or more years of professional experience in a technical engineering or IAM-focused position.
- Experience with SailPoint IIQ or ISC, Entra ID, and Auth0 solutions.
- Relevant certifications, such as Microsoft Certified: Identity and Access Administrator Associate, Azure Security Engineer Associate, SailPoint certification, CISSP, or CISM.
Applicants are required to be eligible to lawfully work in the U.S. immediately; employer will not transfer or sponsor applicants for U.S. work authorization (such as an H-1B visa) for this opportunity.
Compensation and Benefits
Base Salary: $124,000 - $186,000
Benefits: Expeditors offers competitive benefits to all full-time employees including:
- Paid vacation
- Holidays (10)
- Flexible Days (2)
- Paid Sick Time (accrual rate of 1 hour of sick time per 30 hours paid)
- 401(k) Retirement Savings Plan with employer match
- Employee Stock Purchase Plan (ESPP)
- Medical, Prescription Drug, Dental & Vision Coverage
- Health Savings Account (HSA)
- Life and Disability Insurance
- Paid Parental Leave (additional eligibility criteria)
- Dependent Care Flexible Spending Account (DC FSA)
- Commuter Benefit
- Employee Assistance Program (EAP)
- Training and Personnel Development Program
- Educational Assistance and Reimbursement
- Position is full time (40 hours per week) Monday through Friday
All your information will be kept confidential according to EEO guidelines.