Serve as the technical owner of Replit’s corporate IT identity architecture
Design and implement scalable authentication and authorization solutions (SSO, phishing resistant MFA, passwordless, tokens, device trust, zero trust)
Architect lifecycle management workflows to support a rapid growth corporate IT environment
Evaluate technologies to protect against current and emerging threats
Partner with internal teams to implement and maintain provisioning/deprovisioning workflows via SCIM, APIs, and custom automations
Support SOC 2, ISO 27001 and SOX controls related to identity governance
Serve as the enterprisewide subject matter expert and escalation point for complex authentication and authorization inquiries and issues
Mentor IT and security engineers on identity best practices
Additional duties as assigned

8+ years experience in identity and access management tools and platforms with at least 5 years of hands on Okta experience
Expert in authentication and federation technologies (SSO, SAML, OAuth/OIDC, SCIM)
Deep knowledge of identity lifecycle management and access governance within HRIS and SaaS platforms
Proficient in one or more workflow automation platforms such as Workato, Zapier, Okta Workflows, or equivalent
Experience deploying Infrastructure as Code with tools such as Terraform, Google Cloud Deployment Manager, AWS Cloud Formation
Strong communications skills with the ability to convey IAM concepts to a non-technical audience
Demonstrated experience serving as a technical advisor for cross functional teams to ensure IAM integrates into a wider security strategy

Systems Engineer – IAM

Key skills