Asks for

The ad says“Fluency with identity protocols and access models (SAML, OIDC, OAuth 2.0, SCIM; RBAC, ABAC, or policy-based access), plus working knowledge of Okta administration and APIs: SSO, provisioning, group rules, and authentication policies”
The ad says“Deep AWS IAM expertise: policy evaluation logic, permission boundaries, assume-role patterns, SCPs, and the ways they fail in practice and how to express them in Terraform”
The ad says“Ability to build automation for your own work, using either scripting or low-code/no-code orchestration platforms, including LLM or agent-driven steps”
The ad says“Ability to build automation for your own work, using either scripting or low-code/no-code orchestration platforms, including LLM or agent-driven steps”
The ad says“Fluency with identity protocols and access models (SAML, OIDC, OAuth 2.0, SCIM; RBAC, ABAC, or policy-based access), plus working knowledge of Okta administration and APIs: SSO, provisioning, group rules, and authentication policies”
The ad says“Fluency with identity protocols and access models (SAML, OIDC, OAuth 2.0, SCIM; RBAC, ABAC, or policy-based access), plus working knowledge of Okta administration and APIs: SSO, provisioning, group rules, and authentication policies”
The ad says“Fluency with identity protocols and access models (SAML, OIDC, OAuth 2.0, SCIM; RBAC, ABAC, or policy-based access), plus working knowledge of Okta administration and APIs: SSO, provisioning, group rules, and authentication policies”
The ad says“Fluency with identity protocols and access models (SAML, OIDC, OAuth 2.0, SCIM; RBAC, ABAC, or policy-based access), plus working knowledge of Okta administration and APIs: SSO, provisioning, group rules, and authentication policies”
The ad says“Fluency with identity protocols and access models (SAML, OIDC, OAuth 2.0, SCIM; RBAC, ABAC, or policy-based access), plus working knowledge of Okta administration and APIs: SSO, provisioning, group rules, and authentication policies”
The ad says“As a Senior IAM Engineer on the Security team, you will set the standard for identity and access across Verkada, owning how access is defined, granted, reviewed, and revoked throughout our infrastructure. From codifying identity boundaries in Terraform and Rego to driving least privilege across AWS roles and policies on zero trust principles, your work will turn access management from a manual ticket queue into a self-service system powered by scripts and agentic workflows.”
The ad says“Fluency with identity protocols and access models (SAML, OIDC, OAuth 2.0, SCIM; RBAC, ABAC, or policy-based access), plus working knowledge of Okta administration and APIs: SSO, provisioning, group rules, and authentication policies”
The ad says“Fluency with identity protocols and access models (SAML, OIDC, OAuth 2.0, SCIM; RBAC, ABAC, or policy-based access), plus working knowledge of Okta administration and APIs: SSO, provisioning, group rules, and authentication policies”
The ad says“Ability to build automation for your own work, using either scripting or low-code/no-code orchestration platforms, including LLM or agent-driven steps”
The ad says“As a Senior IAM Engineer on the Security team, you will set the standard for identity and access across Verkada, owning how access is defined, granted, reviewed, and revoked throughout our infrastructure. From codifying identity boundaries in Terraform and Rego to driving least privilege across AWS roles and policies on zero trust principles, your work will turn access management from a manual ticket queue into a self-service system powered by scripts and agentic workflows.”

Who We Are

Verkada is transforming how organizations protect their people and places with an integrated, privacy-sensitive AI-powered platform that includes solutions for video security, access control, air quality sensors, alarms, intercoms, and visitor management.

We’ve got serious momentum in the market: more than 30,000 customers (including 100+ of the Fortune 500), a $5.8B valuation, more than $1 billion in annualized bookings, and backing from CapitalG, Sequoia Capital, General Catalyst, Felicis Ventures, Next47 and more. Physical AI is one of the most consequential technology shifts of our time, and Verkada is at the center of it.

You can look at all kinds of communities to see our platform’s impact in the world. It's the retailer that uses our agentic AI to deter theft before it happens. The warehouse that uses AI-powered alerts to make sure its team is protected on the floor with proper PPE. The school that’s alerted to a threat in real-time and triggers a lockdown in seconds, not minutes. We’re rapidly scaling this impact: today, more than 2 million Verkada devices are deployed across 170+ countries.

About the Role

As a Senior IAM Engineer on the Security team, you will set the standard for identity and access across Verkada, owning how access is defined, granted, reviewed, and revoked throughout our infrastructure. From codifying identity boundaries in Terraform and Rego to driving least privilege across AWS roles and policies on zero trust principles, your work will turn access management from a manual ticket queue into a self-service system powered by scripts and agentic workflows.

What You'll Do

Manage identity and access infrastructure as code in Terraform, with peer-reviewed change control, drift detection, and policy-as-code.
Advance zero trust controls for engineering access: short-lived credentials, just-in-time elevation, and the elimination of standing privilege.
Own the access lifecycle for both human and non-human identities: joiner/mover/leaver flows, service accounts, and agents.
Operate access review and certification workflows that produce audit evidence.
Write tools to surface over-permissioned identities, unused credentials, and policy drift; then drive remediation to completion.
Build agentic workflows on a low-code orchestration platform to automate access requests, approvals, risk scoring, and access review campaigns.
Partner with security, infrastructure, and product engineering teams so that the secure path is the easy path, and consult on IAM design for new services.

What You'll Need

Bachelor of Science in Computer Science degree or equivalent practical experience
3+ years working hands-on with identity and access management in a cloud-native engineering environment
Deep AWS IAM expertise: policy evaluation logic, permission boundaries, assume-role patterns, SCPs, and the ways they fail in practice and how to express them in Terraform
Fluency with identity protocols and access models (SAML, OIDC, OAuth 2.0, SCIM; RBAC, ABAC, or policy-based access), plus working knowledge of Okta administration and APIs: SSO, provisioning, group rules, and authentication policies
Ability to build automation for your own work, using either scripting or low-code/no-code orchestration platforms, including LLM or agent-driven steps
Excellent written and verbal communication skills — you can explain an access decision to an engineer, an auditor, and an executive

US Employee Benefits

Verkada is committed to fostering a workplace environment that prioritizes the holistic health and wellbeing of our employees and their families by offering comprehensive wellness perks, benefits, and resources. Our benefits and perks programs include, but are not limited to:

Healthcare programs that can be tailored to meet the personal health and financial well-being needs - Premiums are 100% covered for the employee under at least one plan and 80% for family premiums under all plans
Nationwide medical, vision and dental coverage
Health Saving Account (HSA) with annual employer contributions and Flexible Spending Account (FSA) with tax saving options
Expanded mental health support
Paid parental leave policy & fertility benefits
Time off to relax and recharge through our paid holidays, firmwide extended holidays, flexible PTO and personal sick time
Professional development stipend
Wellness/fitness benefits
Healthy lunches provided daily
Commuter benefits

Additional Information

We do sponsor and take over sponsorship of employment visas for this role. If we make you an offer, we will make every reasonable effort to get you a visa.

Annual Pay Range

At Verkada, we want to attract and retain the best employees, and compensate them in a way that appropriately and fairly values their individual contribution to the company. With that in mind, we carefully consider a number of factors to determine the appropriate starting pay for an employee, including their primary work location and an assessment of a candidate's skills and experience, as well as market demands and internal parity. A Verkada employee may be eligible for additional forms of compensation, depending on their role, including sales incentives, discretionary bonuses, and/or equity in the company in the form of restricted stock units (RSUs)

Below is the annual on-target earnings (OTE) range for full-time employees for this position, comprised of base compensation and commissions (if applicable).

Estimated Annual Pay Range

$200,000—$300,000 USD

Verkada Is An Equal Opportunity Employer

As an equal opportunity employer, Verkada is committed to providing employment opportunities to all individuals. All applicants for positions at Verkada will be treated without regard to race, color, ethnicity, religion, sex, gender, gender identity and expression, sexual orientation, national origin, disability, age, marital status, veteran status, pregnancy, or any other basis prohibited by applicable law.

Your application will be handled in accordance with our Candidate Privacy Policy.